Comments on: Windows XP SP3 Enables The Firewall even If you have it disabled as a Group Policy! Quick Fix!

By: TheOrc

TheOrc — Thu, 09 Apr 2009 11:28:08 +0000

Hello, I’m one year behind, but can I have yet to be able to solve this problem.
I tried what Sandeep said, but the Firewall still turns itself on upon every reboot.
Or rather I have no idea what to set up in Local Computer Policy/Computer Configuration/Administrative Templates/Network/Network Connections.
Please advise.

By: AskTheAdmin

AskTheAdmin — Tue, 20 May 2008 23:53:52 +0000

Thanks for your outspoken input Sandeep always appreciated :)

By: Sandeep

Sandeep — Tue, 20 May 2008 23:33:03 +0000

This article is rubbish.

SharedAccess has always been the name of "Windows firewall" and after every SP upgrade we have had the same issue, That looks pretty much like designed. Seems like people have forgot how the service packs work.

You dont need to play with the "service controller" as advised here.

Open the GPMC (Group Policy Management Console)
Click on Start> Run>
Type in GPEDIT.MSC and click on OK.

The Windows policy that allows you to disable the Internet Connection Firewall for all users including administrators is at the following location in the Windows policy tree:
Local Computer Policy/Computer Configuration/Administrative Templates/Network/Network Connections

On the right hand side, you will see "Prohibit use of Internet Connection Firewall on your DNS Domain." That's where you get to play with it and the of course run the GPUPDATE /FORCE

By: Rever75

Rever75 — Thu, 01 May 2008 17:16:10 +0000

So far testing is going pretty smoothly. I am running SP3 on 2 test networks. One in a VM network another in out Testing Lab. We have a few in house Apps I need to test a bit more but not to familiar with them. Waiting on someone from that dept. If all goes well, when MS release it I will deploy via WSUS.

By: AskTheAdmin

AskTheAdmin — Wed, 30 Apr 2008 17:30:01 +0000

I had the second one in my Group Policy and I had defined the actual Windows Firewall service to be disabled via:

Computer Configuration--- Windows Settings ---- System Services it was disabled.

I did not have the first one. I will add this to my G and try deploying again! Thanks Rever75 -how has your testing been going?

By: Rever75

Rever75 — Wed, 30 Apr 2008 17:15:21 +0000

I have it disabled in a few places.
1) Computer => Windows Settings => Security Settings => System Services =>Windows Firewall/Internet Connection Sharing (ICS) (Startup Mode: Disabled)

2) Computer Config => Administraive Template => Network/ Network Connections =>Prohibit use of Internet Connection Firewall on your DNS domain network Enabled

By: AskTheAdmin

AskTheAdmin — Wed, 30 Apr 2008 16:33:08 +0000

How did you have it disabled? I have been getting mixed reactions today – I wonder if it is which options you use to disable it.

Thanks!

By: Rever

Rever — Wed, 30 Apr 2008 15:51:48 +0000

We did not run into this at my place yet. I have installed it on only 2 PCs so far. I have GPO that disables the firewall. Both on reboot stayed off.

By: Jay

Jay — Wed, 30 Apr 2008 12:35:00 +0000

I had the same issue and was able to manually disable it through the services.msc on reboot. Only one of 8 machines I did had this issue any one know why?

By: Louie

Louie — Wed, 30 Apr 2008 10:09:59 +0000

I'll make sure I do this when I get to install SP3 :) Thanks man. Great tip.

By: Michael

Michael — Wed, 30 Apr 2008 00:41:56 +0000

Office machine went great! about to do my home machine

By: AskTheAdmin

AskTheAdmin — Wed, 30 Apr 2008 00:11:20 +0000

Very.

All 4 of my sp machines did it. 3 normal upgrades and one clean install with sp3 slip streamed.

anyone else??

By: Dan

Dan — Tue, 29 Apr 2008 23:03:02 +0000

You're right. Windows firewall is dreadful. I installed SP3 Final tonight (after un-installing RC1) and it DID NOT turn my firewall on – and it was off beforehand as I have third party cover. Strange…..