Group Policies

[dupas]

I want to open the port of 5900 on every PC I have in my domain but I dont want to have to go to each PC to do so under the windows firewall. Is this possible?

 

[58sniper]

I'm assuming, then, that you have some sort of firewall on them (you don't mention which one, and you don't mention what OS). If it's XP SP2, try

Managing Windows XP Service Pack 2 Features Using Group Policy

http://www.microsoft.com/technet/prodtechnol/winxppro/maintain/mangxpsp2/mngdepgp.mspx

Pat Richard, MCSE MCSA:Messaging CNA
Microsoft Exchange MVP
Want to know how email works? Read for yourself -

http://www.ietf.org/rfc/rfc2821.txt

 

[hunterdw]

Yes, for VNC I assume.

Server 2003 SP1?

Use the GPMC - create a new policy - "Open TCP5900" or whatever.

Computer Configuration -> Administrative Templates -> Network -> Network Connections -> Windows Firewall

You can then set exceptiosn based upon "on the domain" and "local" (for roaming laptops, etc.).

Read here:

http://www.microsoft.com/technet/abouttn/flash/tips/tips_083105.mspx

--DW

 

[hunterdw]

I'm dying laughing here. I think Pat and I have identical timing/work habits. He's always "sniping" my posts

--DW

 

[dupas]

hunterdw: I actually did what you showed before I came posted this question and it didnt work. It allowed me to connect to machines that had users that were logged on with admin rights.
thought it didnt allow me creat a new policy.