SP2 firewall

[darrinr]

Can anybody help with regard to disabling the Windows firewall installed with SP2?
When I access through Security Centre the whole dialogue box is grayed out and so cant turn the thing off.

Any ideas?

 

[micker377]

Which "Security Center" did you check? There is the one in the taskbar and one in the Control Panel.

 

[darrinr]

I have tried both....they bring you to the same dialogue box though.

 

[bcastner]

If you are using Group Policy to configure Windows Firewall for computers running Windows XP with SP2, the Group Policy settings you configure might not allow local configuration. In this case, the options on the General tab and the other tabs might be grayed out and unavailable, even when you log on with an account that is a member of the local Administrators group (a local administrator). Microsoft, The Cable Guy

http://www.microsoft.com/technet/community/columns/cableguy/cg0204.mspx

As Administrator, click Start, Run, and type gpedit.msc

Computer Configuration
Adminitrative Templates
Network
Network Connection
Window Firewall
(Choose Domain or Standard as appropriate)
Windows Firewall: Protect all network conenctions

Disabled: Firewall off
Enabled: Firewall On
Not Configured: Firewall On by default

 

[linney]

Windows Firewall and Security Center are both services, you could just Stop and Disable either or both services.

Do make sure that your Virus Software is protecting you and is up to date and that you have some other firewall protection.


883792 - Frequently asked questions about Windows Security Center

http://support.microsoft.com/default.aspx?scid=kb;en-us;883792&Product=windowsxpsp2

 

[darrinr]

Thanks for that.
I have tried altering the Group policy through gpedit.msc but without success.
I left most of the settings as 'not configured' as well as enabling/disabling certain elements but it seemed to make no difference...the dialogue box is still grayed out.

 

[bcastner]

Try:

Open a notepad session and copy/paste the below. Save as fire_0ff_fix.reg:

**********start copy/paste below this line
REGEDIT4

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center]
"FirewallOverride"=dword:"00000001"

*********** end copy/paste above this line

(You can reverse this later by using Regedit and putting a 1 in the value for this key).

This will disable the firewall.

Double click your saved file to merge its contents with the registry and reboot.

 

[intuity]

I have installed XP SP 2 and can't turn on the firewall option. It appears to be running Group Policy and I am loged as on the MCC but do not see any option for Group policy. I can't run GPedit.exe from the run box. Any ideas how I can change or edit the group policy so I can enable the firewall? thanks, Intuity.

 

[bcastner]

You need to be a member of the Domain Administrators group if in a Domain, or local Administrator if not.

 

[intuity]

bcastner,

Thank you for this information. Theuser icon claims I am the administrator already but I will certainly check the user account to see what groups myuser id has rights to. I'll get backto you with an update later this afternoon to let you know how things worked out or if I still have a problem. Just for advanced plannng, once I get access to the group policy scurity setting, which script or setting and I looking for to enable or turn on the firewall? Intuity

 

[bcastner]

See my first post.

What is symptomatic here is that you cannot run gpedit.msc, which implies that there are Group Policy objects at work that are denying your permission to this utility.

 

[intuity]

bcastner, I am in front of the pc now and am logged in as an administrator. Ican not find a user or group file to change or add user id to a group if necesseary. I can not run gpedit.msc. So, if I am a local administratorhow come I can't add the group policy scripts? What should I try now? Intuity

 

[bcastner]

Are you in a Domain?

 

[LloydSev]

local administrators can't edit group policy for a domain..

Computer/Network Technician
CCNA

 

[intuity]

lloydsev,

On the general tab for firewall it does not indicate if it is a domain or standard. How can I tell? This is a stand alone Windows XP Home version running SP2

 

[intuity]

Bcastner,

It is a workgroup setting. Intuity

 

[intuity]

I would like to know what I can do to edit the group policy to enable the windows firewall in light of the fact that a local administrator can not edit the group policy scripts via gpedit.msc? Intuity

 

[bcastner]

I would advise you how to circumvent Group Policy settings, use REG.EXE, REGINI.EXE or even REGEDIT.EXE to be able to achieve your end.

But, this Forum has policies. One of which is to respect a wish by the Domain Administrators that you not circumvent their settings.

I mean this nicely. I cannot repond to a request on this site to circumvent passwords or other security related items of the OS.

It is just not done here.

The way to achieve your end is by talking to the Domain Administrator / IT folks and tell them what you need and why.

 

[intuity]

bcastner,

I appreciate what you are saying. This pc is a home pc used by my instructor who is not pc literate. She only has her log in which is the administrator log in to Windows XP home edition. She wants me to activate the windows firewall feature but I can't do it becasue of some group policy. I do not know how this group policy got put in place nor does she. That is the problem. So, ther is no Domain Administrator to discuss this issue as she is the only owner of this home pc. I am wondering what to do now? Intuity

 

[bcastner]

Uh,

gpedit.msc is not in Home.

Event Viewer is.

Tell me what the Event logs states: Start, Run eventvwr.msc