RE: [ActiveDir] Group Policy Object for Windows Firewall

[Ken Schaefer]

It’ll be just like any other group policy setting. If they conflict, group policy settings over-ride local settings. But you can either allow something to be “not configured”, or you can enable those settings like “allow local exceptions”, which allows users on the machine to make further modifications to the firewall settings.   Cheers Ken   From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Todd Hofert Sent: Friday, 28 October 2005 10:27 PM To: ActiveDir@mail.activedir.org Subject: RE: [ActiveDir] Group Policy Object for Windows Firewall   Peter,   Thanks for the reply. Next quick question. Will these settings over ride the settings that are currently configured via the local Group Policy?   Thanks In Advance   Todd   From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Peter Johnson Sent: Friday, October 28, 2005 8:20 AM To: ActiveDir@mail.activedir.org Subject: RE: [ActiveDir] Group Policy Object for Windows Firewall The difference between the two profiles is that the domain profile is applied when the OS detects that the machine is in one of your domain’s networks. When it detects that it is outside of your network the standard profile is applied. I would recommend that your use both profiles and make standard profile the tighter of the two since it’s what would be applied in the wild so to speak.   Regards Peter Johnson   From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Todd Hofert Sent: 28 October 2005 14:04 To: ActiveDir@mail.activedir.org Subject: [ActiveDir] Group Policy Object for Windows Firewall   I am implementing Windows Firewall settings via an Active Directory Group Policy. I see there are two sets of settings; Domain Profile and Standard Profile with no explanation of how these settings differ. Can anyone explain which circumstances dictate which profile to use? I am assuming it relates to roaming profiles vs. local profiles but I am not certain. I also do not want to create both profile settings if it is not necessary.   Thanks Todd Hofert This e-mail and any attachments may contain confidential and privileged information. If you are not the intended recipient, please notify the sender immediately by return e-mail, delete this e-mail and destroy any copies. Any dissemination or use of this information by a person other than the intended recipient is unauthorized and may be illegal.