c$ share block by XP Firewall

[bazcurtis2]

Hi,

I have suddenly found out that my Sophos console can't push install to my XP SP2 clients. After talking to Sophos we found out it was the XP firewall that was blocking access to the c$ share and Sophos console needs access to this.

I have put in place all the exceptions that Sophos requires into a group policy, but I can't see what in the firewall would block this. It used to work. I don't know what has changed.

Any help would be most welcome.

Best wishes

Michael

 

[cdogg]

Yeah, I've run into that problem a few times myself. By default, the firewall blocks the C$ from being seen across the network.

Instead of making a manual entry in the Windows Firewall settings, just go to the exceptions tab and make sure "File and Printer Sharing" is checked.

~cdogg
"Insanity: doing the same thing over and over again and expecting different results." - Albert Einstein
[tab][navy]For general rules and guidelines to get better answers, click here:[/navy] faq219-2884

 

[bazcurtis2]

Hi,

Thanks for the info, unfortunately that is checked. I will continute to investigate.

Best wishes

Michael

 

[cdogg]

OK, well the other thing to check, if you haven't already, is to make sure "Simple File Sharing" is disabled.

Open "My Computer", go to Tools -> Folder Options, and on the View tab uncheck "Use Simple File Sharing".

~cdogg
"Insanity: doing the same thing over and over again and expecting different results." - Albert Einstein
[tab][navy]For general rules and guidelines to get better answers, click here:[/navy] faq219-2884

 

[bazcurtis2]

Hi,

I think I have found the issue. The group policy is only allowing 172.20.3.23 to file and print share on these ports, 138,139,137 and 445. I am not sure where I made that change or why, but I will take it out and see if that helps.

Best wishes

Michael

 

[cdogg]

Michael,
Hopefully that works. However, from your description, you made it sound like only clients with XP SP2 were having an issue and that others were fine. So I'm not sure how that group policy setting you're referring to would only affect some but not all of the workstations in your environment.

~cdogg
"Insanity: doing the same thing over and over again and expecting different results." - Albert Einstein
[tab][navy]For general rules and guidelines to get better answers, click here:[/navy] faq219-2884

 

[bazcurtis2]

Hi,

I only have XP SP2 clients I have found out what it was. We installed a Release Candidate of System Centre Essentials and it makes its own Group Policy object and that is changing the policy.

I need to remove that and that will hopefully fix it.

Thanks for your help.

Best wishes

Michael