To err is human but, to seriously fluck shit up requires the root password.


EcoSnap

Windows XP SP3 Enables The Firewall even If you have it disabled as a Group Policy! Quick Fix!

Written by Karl L. Gechlik | AskTheAdmin.com on April 30, 2008 – 2:10 pm -

So after installing Windows XP SP3 this morning I noticed that the Windows Firewall popped up on restart asking me if I wanted to allow My VNC server access to the internet then my instant messenger. WTF?


I hate the Windows Firewall. You can see my feelings illustrated by the picture at the top of top of this post. I have a domain group policy in place - explicitly disabling the service via a few options. That didn’t stop them from re-enabling it.

After closer inspection I discovered M$ has renamed the Firewall services’ name to be “SharedAccess” and this breaks some stuff. (I am sure they did it intentionally for the MalWare authors of the world!)

Since we do not use the Windows Firewall in my domain it is NOT configured - so when it automagically pops on - SHIT DON”T WORK FOR THE GOOD OLD END USERS!

After querying my machine for services using this command:

sc query type= service (you need the space after the = sign!!)

I got a full listing of my services and after scrolling down I found this:

Now I needed a quick work-a-round for my SP3 test group. I created a line in my default user login script:

sc config “SharedAccess” start= disabled

And that shut it down! Thanks for letting me know M$ as always I appreciate the curve ball. I know your just keeping us Admin’s on our toes!

On some happier notes, I am seeing some other great results with memory allocation and overall speediness. I am digging the updated MSTSC remote desktop client as well.

_TheNotSoBetaTestingAdmiN_

Check out our RSS feed.
Need Free Tech Support? Ask The Admin a Question
Related Posts

Tags:
Posted in How To |


13 Responses to “Windows XP SP3 Enables The Firewall even If you have it disabled as a Group Policy! Quick Fix!”

  1. By Dan on Apr 29, 2008 | Reply

    You're right. Windows firewall is dreadful. I installed SP3 Final tonight (after un-installing RC1) and it DID NOT turn my firewall on - and it was off beforehand as I have third party cover. Strange…..

    [Click to Reply to This Comment.]

  2. By AskTheAdmin on Apr 29, 2008 | Reply

    Very.

    All 4 of my sp machines did it. 3 normal upgrades and one clean install with sp3 slip streamed.

    anyone else??

    [Click to Reply to This Comment.]

  3. By Michael on Apr 29, 2008 | Reply

    Office machine went great! about to do my home machine

    [Click to Reply to This Comment.]

  4. By Louie on Apr 30, 2008 | Reply

    I'll make sure I do this when I get to install SP3 :) Thanks man. Great tip.

    [Click to Reply to This Comment.]

  5. By Jay on Apr 30, 2008 | Reply

    I had the same issue and was able to manually disable it through the services.msc on reboot. Only one of 8 machines I did had this issue any one know why?

    [Click to Reply to This Comment.]

  6. By Rever on Apr 30, 2008 | Reply

    We did not run into this at my place yet. I have installed it on only 2 PCs so far. I have GPO that disables the firewall. Both on reboot stayed off.

    [Click to Reply to This Comment.]

  7. By AskTheAdmin on Apr 30, 2008 | Reply

    How did you have it disabled? I have been getting mixed reactions today - I wonder if it is which options you use to disable it.

    Thanks!

    [Click to Reply to This Comment.]

  8. By Rever75 on Apr 30, 2008 | Reply

    I have it disabled in a few places.
    1) Computer => Windows Settings => Security Settings => System Services =>Windows Firewall/Internet Connection Sharing (ICS) (Startup Mode: Disabled)

    2) Computer Config => Administraive Template => Network/ Network Connections =>Prohibit use of Internet Connection Firewall on your DNS domain network Enabled

    [Click to Reply to This Comment.]

  9. By AskTheAdmin on Apr 30, 2008 | Reply

    I had the second one in my Group Policy and I had defined the actual Windows Firewall service to be disabled via:

    Computer Configuration— Windows Settings —- System Services it was disabled.

    I did not have the first one. I will add this to my G and try deploying again! Thanks Rever75 -how has your testing been going?

    [Click to Reply to This Comment.]

  10. By Rever75 on May 1, 2008 | Reply

    So far testing is going pretty smoothly. I am running SP3 on 2 test networks. One in a VM network another in out Testing Lab. We have a few in house Apps I need to test a bit more but not to familiar with them. Waiting on someone from that dept. If all goes well, when MS release it I will deploy via WSUS.

    [Click to Reply to This Comment.]

  11. By Sandeep on May 20, 2008 | Reply

    This article is rubbish.

    SharedAccess has always been the name of "Windows firewall" and after every SP upgrade we have had the same issue, That looks pretty much like designed. Seems like people have forgot how the service packs work.

    You dont need to play with the "service controller" as advised here.

    Open the GPMC (Group Policy Management Console)
    Click on Start> Run>
    Type in GPEDIT.MSC and click on OK.

    The Windows policy that allows you to disable the Internet Connection Firewall for all users including administrators is at the following location in the Windows policy tree:
    Local Computer Policy/Computer Configuration/Administrative Templates/Network/Network Connections

    On the right hand side, you will see "Prohibit use of Internet Connection Firewall on your DNS Domain." That's where you get to play with it and the of course run the GPUPDATE /FORCE

    [Click to Reply to This Comment.]

  12. By AskTheAdmin on May 20, 2008 | Reply

    Thanks for your outspoken input Sandeep always appreciated :)

    [Click to Reply to This Comment.]

  13. By TheOrc on Apr 9, 2009 | Reply

    Hello, I’m one year behind, but can I have yet to be able to solve this problem.
    I tried what Sandeep said, but the Firewall still turns itself on upon every reboot.
    Or rather I have no idea what to set up in Local Computer Policy/Computer Configuration/Administrative Templates/Network/Network Connections.
    Please advise.

    [Click to Reply to This Comment.]

Post a Comment

panasonic blueooth panasonic fax machines lg 26lc2r sony pcg-z1 sony notebook computer lg 26lc2r sony pcg-z1 mitsubishi evo lg 26lc2r sony pcg-z1 sharp copiers lg 26lc2r sony pcg-z1 sharp lc-26d6u lg 26lc2r
sony pcg-z1
panasonic telephones lg 26lc2r sony pcg-r505dl sharp electronics
lg 26lc2r
sony pcg-r505dl sony walkman lg 26lc2r sony pcg-z1 panasonic dvd players lg 26lc2r sony pcg-z1 sony vaio notebook lg 26lc2r sony pcg-z1 air purifier sharp lg 26lc2r sony pcg-z1 sony cybershot lg 26lc2r sony pcg-z1 panasonic digital cameras lg 26lc2r sony pcg-z1 sony music lg 26lc2r sony pcg-z1 toshiba drivers lg 26lc2r sony pcg-z1 sony corp lg 26lc2r sony pcg-z1 sony bravia lg 26lc2r sony pcg-z1
sony laptop
lg 26lc2r sony pcg-k12p phillips magnavox universal remote lg 26lc2r sony pcg-z1 tivo hacks lg 26lc2r sony pcg-z1 lg monitors lg 26lc2r sony pcg-z1 samsung mp3 players lg 26lc2r sony pcg-z1 toshiba laptops lg 26lc2r sony pcg-z1 sony tv lg 26lc2r sony pcg-z1
sharp camescope
lg 26lc2r sony pcg-r505dl lg shine lg 26lc2r sony pcg-z1 mitsubishi canada lg 26lc2r sony pcg-z1 samsung cell phone lg 26lc2r sony pcg-z1 samsung usa lg 26lc2r sony pcg-z1 phillips magnavox remote control codes lg 26lc2r sony pcg-z1 sony uk lg 26lc2r sony pcg-z1 sony drivers lg 26lc2r sony pcg-z1
panasonic lumix
lg 26lc2r sony pcg-r505dl
samsung e250
lg 26lc2r sony pcg-k12p lg vx5300 lg 26lc2r sony pcg-z1 lg mobile phones lg 26lc2r sony pcg-z1 samsung mobile phones lg 26lc2r sony pcg-z1 lg televisions lg 26lc2r sony pcg-z1 lg cellphones lg 26lc2r sony pcg-z1 lg cellular phones lg 26lc2r sony pcg-z1 sony electronics lg 26lc2r sony pcg-z1 sony support lg 26lc2r sony pcg-z1 sony camcorders lg 26lc2r sony pcg-z1 sony lcd lg 26lc2r sony pcg-z1 toshiba regza
lg 26lc2r
sony pcg-r505dl samsung refrigerators lg 26lc2r sony pcg-z1 panasonic th-50pz700u lg 26lc2r sony pcg-z1 lg cell phone accessories
lg 26lc2r
sony pcg-r505dl
panasonic th-50px75u lg 26lc2r sony pcg-r505dl samsung bd-up5000 lg 26lc2r sony pcg-z1 sony handycam lg 26lc2r sony pcg-z1 lg cu400 lg 26lc2r sony pcg-z1 sony pictures games lg 26lc2r sony pcg-z1 toshiba parts lg 26lc2r sony pcg-z1 sony ericcson lg 26lc2r sony pcg-z1 samsung mp3 lg 26lc2r sony pcg-z1 lg lcd tv lg 26lc2r sony pcg-z1 sony headphones lg 26lc2r sony pcg-z1 sony usa lg 26lc2r sony pcg-z1 camescope sony dvd lg 26lc2r sony pcg-z1 sony digital camera lg 26lc2r sony pcg-z1 panasonic plasma tv lg 26lc2r sony pcg-z1 panasonic dmr-ez47vk
lg 26lc2r
sony pcg-r505dl samsung hdtv lg 26lc2r sony pcg-z1 lg prada lg 26lc2r sony pcg-z1 samsung s630 lg 26lc2r sony pcg-z1 sharp television lg 26lc2r sony pcg-z1 samsung 226bw lg 26lc2r sony pcg-z1 coby electronics lg 26lc2r sony pcg-z1 sony alpha
lg 26lc2r
sony pcg-r505dl samsung monitors lg 26lc2r sony pcg-z1 samsung u600 lg 26lc2r sony pcg-z1 sony mylo lg 26lc2r sony pcg-z1 sony laptops lg 26lc2r sony pcg-z1 samsung pc studio lg 26lc2r sony pcg-z1 mitsubishi electronics
lg 26lc2r
sony pcg-r505dl lg chocolate lg 26lc2r sony pcg-z1 samsung q1 lg 26lc2r sony pcg-z1 panasonic sdr-h18 lg 26lc2r sony pcg-z1 samsung t629 lg 26lc2r sony pcg-z1 mitsubishi parts lg 26lc2r sony pcg-z1 panasonic th-42pz700u lg 26lc2r sony pcg-z1 toshiba home page lg 26lc2r sony pcg-z1 sharp tv lg 26lc2r sony pcg-z1 lg vx8600 lg 26lc2r sony pcg-z1 toshiba hd-xa2 lg 26lc2r sony pcg-z1 phillips magnavox lg 26lc2r sony pcg-z1 toshiba lcd tv lg 26lc2r sony pcg-z1 sony a100 lg 26lc2r sony pcg-z1 samsung electronics lg 26lc2r sony pcg-z1 lg refrigerators lg 26lc2r sony pcg-z1
mitsubishi electric
lg 26lc2r sony pcg-r505dl samsung d807 lg 26lc2r sony pcg-z1 sharps rifle lg 26lc2r sony pcg-z1 sony memory stick lg 26lc2r sony pcg-z1 samsung mp3 player lg 26lc2r sony pcg-z1 lg vx8300 lg 26lc2r sony pcg-z1 lg electronics lg 26lc2r sony pcg-z1 lg cell phone lg 26lc2r sony pcg-z1 sony mp3 players lg 26lc2r
sony pcg-z1
mitsubishi outlander lg 26lc2r sony pcg-r505dl lg products lg 26lc2r sony pcg-z1 sony hdtv lg 26lc2r sony pcg-z1 sharp televisions lg 26lc2r sony pcg-z1 telephone samsung lg 26lc2r sony pcg-z1 samsung m500 lg 26lc2r sony pcg-z1 sony digital cameras lg 26lc2r sony pcg-z1 lg washer lg 26lc2r sony pcg-z1 toshiba gigabeat lg 26lc2r sony pcg-z1 panasonic tv lg 26lc2r sony pcg-z1 panasonic uk lg 26lc2r sony pcg-z1 sony music box lg 26lc2r sony pcg-z1 panasonic plasma lg 26lc2r sony pcg-z1 mitsubishi televisions lg 26lc2r sony pcg-z1 samsung digital camera lg 26lc2r sony pcg-z1 sony cyber-shot lg 26lc2r sony pcg-z1 panasonic car audio lg 26lc2r sony pcg-z1 mitsubishi minicab lg 26lc2r sony pcg-z1 lg bh100 lg 26lc2r sony pcg-z1 samsung u740 lg 26lc2r sony pcg-z1 sony vaio notebook computer
lg 26lc2r
sony pcg-r505dl samsung sync
lg 26lc2r
sony pcg-r505dl sony camcorder lg 26lc2r sony pcg-z1 lg venus lg 26lc2r sony pcg-z1 sony tvs lg 26lc2r sony pcg-z1
sony cameras
lg 26lc2r sony pcg-r505dl samsung televisions lg 26lc2r sony pcg-z1 panasonic phones lg 26lc2r sony pcg-z1 sony ps3 lg 26lc2r sony pcg-z1 samsung phone
lg 26lc2r
sony pcg-r505dl toshiba laptop parts
lg 26lc2r
sony pcg-r505dl lg refrigerator lg 26lc2r sony pcg-z1 sony vaio lg 26lc2r sony pcg-z1 panasonic th-42px600u lg 26lc2r sony pcg-z1 samsung ln-t5265f lg 26lc2r sony pcg-z1 sony dvd recorder lg 26lc2r
sony pcg-z1
samsung bd-p1200 lg 26lc2r sony pcg-r505dl sony televisions lg 26lc2r sony pcg-z1 lg washing machine lg 26lc2r sony pcg-z1 lg cell phones lg 26lc2r sony pcg-z1 samsung dlp lg 26lc2r sony pcg-z1 lg phone lg 26lc2r sony pcg-z1 samsung cell phones lg 26lc2r sony pcg-z1 sony erricson | lg 26lc2r sony pcg-z1 sony corporation lg 26lc2r sony pcg-z1 samsung lcd tv lg 26lc2r sony pcg-z1 keesha sharp lg 26lc2r sony pcg-z1 samsung m610 lg 26lc2r sony pcg-z1
samsung d900
lg 26lc2r sony pcg-r505dl sony cyber shot lg 26lc2r sony pcg-z1 panasonic digital camera lg 26lc2r sony pcg-z1 toshiba laptop lg 26lc2r sony pcg-z1 samsung sch i760 lg 26lc2r sony pcg-z1 lg ringtones lg 26lc2r sony pcg-z1 sony xbr lg 26lc2r sony pcg-z1 mitsubishi tv lg 26lc2r sony pcg-z1 mitsubishi air conditioner lg 26lc2r
sony pcg-z1
sony camera lg 26lc2r sony pcg-r505dl sony playstation 3 lg 26lc2r sony pcg-z1 panasonic camera lg 26lc2r sony pcg-z1 sony parts lg 26lc2r sony pcg-z1 lg phones lg 26lc2r sony pcg-z1 toshiba support lg 26lc2r sony pcg-z1 coby dvd player lg 26lc2r sony pcg-z1 toshiba copier lg 26lc2r sony pcg-z1 lg faceplates lg 26lc2r sony pcg-z1 sony computers lg 26lc2r sony pcg-z1
sharp lcd tv
lg 26lc2r sony pcg-r505dl sony dvd lg 26lc2r sony pcg-z1 mitsubishi galant lg 26lc2r sony pcg-z1 toshiba hd-a2 lg 26lc2r sony pcg-z1 sony playstation cheats lg 26lc2r sony pcg-z1 toshiba notebook
lg 26lc2r
sony pcg-r505dl
sony bmg
lg 26lc2r
sony pcg-r505dl
sony dsc-h9 lg 26lc2r sony pcg-r505dl samsung f700 lg 26lc2r sony pcg-z1 samsung ln-t4661f lg 26lc2r sony pcg-z1 sony pda lg 26lc2r sony pcg-z1 sony pictures
lg 26lc2r
sony pcg-r505dl
sharp tvs
lg 26lc2r sony pcg-r505dl sony store lg 26lc2r
sony pcg-z1
panasonic camcorders lg 26lc2r sony pcg-r505dl samsung phones lg 26lc2r
sony pcg-z1
lg cu500 lg 26lc2r sony pcg-r505dl samsung i760 lg 26lc2r sony pcg-z1 toshiba computers lg 26lc2r sony pcg-z1 panasonic cameras lg 26lc2r sony pcg-z1 panasonic toaster oven
lg 26lc2r
sony pcg-r505dl lg vx8700 lg 26lc2r sony pcg-z1 sony reader lg 26lc2r sony pcg-z1 lg vx9400 lg 26lc2r sony pcg-z1
sony mp3
lg 26lc2r sony pcg-k12p sony viao lg 26lc2r sony pcg-z1 mitsubishi pajero lg 26lc2r sony pcg-z1 mitsubishi motors lg 26lc2r sony pcg-z1 sony vaio laptop
lg 26lc2r
sony pcg-r505dl atheros wireless toshiba ubuntu lg 26lc2r sony pcg-z1 sony clie lg 26lc2r sony pcg-z1 sony lcd tv lg 26lc2r sony pcg-z1 sharp microwave lg 26lc2r sony pcg-z1 samsung lcd lg 26lc2r sony pcg-z1 sony xel-1 lg 26lc2r sony pcg-z1 panasonic tough book lg 26lc2r sony pcg-z1 panasonic cordless phone lg 26lc2r sony pcg-z1 samsung sch-i760 lg 26lc2r sony pcg-z1 sony television lg 26lc2r sony pcg-z1 sharp lcd lg 26lc2r sony pcg-z1 toshiba notebooks lg 26lc2r sony pcg-z1 sony sound forge lg 26lc2r sony pcg-z1 mitsubishi endeavor lg 26lc2r sony pcg-z1 magnavox tv lg 26lc2r sony pcg-z1 philips magnavox remote codes lg 26lc2r sony pcg-z1 sony canada
lg 26lc2r
sony pcg-r505dl coby mp3 player lg 26lc2r sony pcg-z1 sharp appliances lg 26lc2r sony pcg-z1 panasonic dvd recorder lg 26lc2r sony pcg-z1 sharps rifles lg 26lc2r sony pcg-z1 sony products lg 26lc2r sony pcg-z1 toshiba satellite lg 26lc2r sony pcg-z1 lg cell phone batteries | lg 26lc2r sony pcg-z1 samsung refrigerator lg 26lc2r sony pcg-z1 panasonic dvd lg 26lc2r sony pcg-z1 sony playstation lg 26lc2r
sony pcg-z1
toshiba tv lg 26lc2r sony pcg-r505dl lg ax8600 lg 26lc2r sony pcg-z1 lg washers lg 26lc2r sony pcg-z1 samsung ringtones lg 26lc2r sony pcg-z1 sony playstation 2 lg 26lc2r sony pcg-z1 samsung a707 lg 26lc2r sony pcg-z1 samsung tv lg 26lc2r sony pcg-z1 panasonic dmc-tz3
lg 26lc2r
sony pcg-r505dl lg vx8350 lg 26lc2r sony pcg-z1
samsung m300
lg 26lc2r sony pcg-r505dl toshiba television
lg 26lc2r
sony pcg-r505dl samsung sch-u740 lg 26lc2r sony pcg-z1 lg 8300 lg 26lc2r sony pcg-z1 panasonic camcorder
lg 26lc2r
sony pcg-r505dl
sonneries mobile samsung lg 26lc2r sony pcg-k12p sony ericson lg 26lc2r sony pcg-z1 sony mp3 player
lg 26lc2r


Visit BEING FIVE www.beingfive.com Copyright by George Sfarnas EcoSnap