Don't be so certain.  Not all traffic is, by default, let out.  Check that
with some third party tools that use >1024 ports.  Effective in killing off
the DDoS Zombie issues.....

Rick Kingslan  MCSE, MCSA, MCT, CISSP
Microsoft MVP:
Windows Server / Directory Services
Windows Server / Rights Management
Associate Expert
Expert Zone - www.microsoft.com/windowsxp/expertzone
WebLog - www.msmvps.com/willhack4food
 

-----Original Message-----
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Depp, Dennis M.
Sent: Tuesday, April 13, 2004 9:07 AM
To: [EMAIL PROTECTED]
Subject: RE: [ActiveDir] Firewall

This is not a firewall issue.  The Windows ICF allows all outbound
connections.

Denny 

-----Original Message-----
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Jimmy Andersson
Sent: Tuesday, April 13, 2004 9:42 AM
To: [EMAIL PROTECTED]
Subject: RE: [ActiveDir] Firewall

I will probably (if testing goes well) implement it when SP2 is out.
Today
I'm not using the firewall on my XPs.

Regards,
/Jimmy 

-----Original Message-----
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Robbie Foust
Sent: Tuesday, April 13, 2004 3:46 PM
To: [EMAIL PROTECTED]
Subject: Re: [ActiveDir] Firewall

I'm not using the XP firewall yet, but I'll consider it with SP2 since it is
much better.  The built in firewall isn't supposed to interfere with
communications with DC's, I think.  Are you getting any specific error
message when users try to edit their attributes?  Or do they just not have
permission to do so?  Check the event logs to see if there are any errors.

Robbie Foust, IT Analyst
Systems and Core Services
Duke University




Douglas M. Long wrote:

> Do you all force your XP clients to have the built-in firewall 
> enabled? Are there any cons (such as some GPs not working) to having 
> it enabled? The reason I ask is I am having a problem finding the 
> culprit which is causing some users the inability to edit their 
> "editable" (phone number, homepage, address, etc) attributes. Thanks 
> in advance

List info   : http://www.activedir.org/mail_list.htm
List FAQ    : http://www.activedir.org/list_faq.htm
List archive:
http://www.mail-archive.com/activedir%40mail.activedir.org/

List info   : http://www.activedir.org/mail_list.htm
List FAQ    : http://www.activedir.org/list_faq.htm
List archive:
http://www.mail-archive.com/activedir%40mail.activedir.org/

List info   : http://www.activedir.org/mail_list.htm
List FAQ    : http://www.activedir.org/list_faq.htm
List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/

List info   : http://www.activedir.org/mail_list.htm
List FAQ    : http://www.activedir.org/list_faq.htm
List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/

Reply via email to