Just an FYI on this. "On the Domain" can be tricky here. For example. If your user is connected to the corporate network via VPN, they will be considered "off the domain" and will use the standard profile. The determination process is documented pretty well in the following article: http://www.microsoft.com/technet/community/columns/cableguy/cg0504.mspx
-----Original Message----- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Susan Bradley, CPA aka Ebitz - SBS Rocks [MVP] Sent: Friday, October 28, 2005 7:44 AM To: [email protected] Subject: Re: [ActiveDir] Group Policy Object for Windows Firewall www.sbslinks.com/group.htm [that's SBS's group policy settings for the XP sp2 firewall] Domain is when you are 'on' the domain Standard is when the device is unattached. Also grab the XP sp2 security documents that were just released on the web a few days ago. Todd Hofert wrote: > I am implementing Windows Firewall settings via an Active Directory > Group Policy. I see there are two sets of settings; Domain Profile and > Standard Profile with no explanation of how these settings differ. Can > anyone explain which circumstances dictate which profile to use? I am > assuming it relates to roaming profiles vs. local profiles but I am > not certain. I also do not want to create both profile settings if it > is not necessary. > > Thanks > > Todd Hofert > IT Director > Spartan Graphics, Inc. > > This e-mail and any attachments may contain confidential and > privileged information. If you are not the intended recipient, please > notify the sender immediately by return e-mail, delete this e-mail and > destroy any copies. Any dissemination or use of this information by a > person other than the intended recipient is unauthorized and may be > illegal. > List info : http://www.activedir.org/List.aspx List FAQ : http://www.activedir.org/ListFAQ.aspx List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/ List info : http://www.activedir.org/List.aspx List FAQ : http://www.activedir.org/ListFAQ.aspx List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/
