Hello,

It possible to take the system.adm file from a WinXPsp2 machine and change
the #if version and #endif and tag them with ; and then import the system.adm
into AD ? Would this allow me to control the WinXP firewall from my Win2k AD ?

I have read the question from djc and the answer from Mark Heitbrink, but
still im alittle confused if i edit my AD GPO from a WinXP i cannot see the
firewall settings ?

(I use gpmc.msc)

Regards
René

rfalken wrote:
Hi,

> It possible to take the system.adm file from a WinXPsp2 machine and
> change the #if version and #endif and tag them with ; and then import
> the system.adm into AD ? Would this allow me to control the WinXP
> firewall from my Win2k AD ?

Yes that would be a possibility. But it's far easier to install the GPMC on
a Windows XP machine and configure your GPOs from there.


Bye
Norbert

Hi Norbert,

I understand that its easier. But what if i cannot see the settings in GPMC
? and what if another Admin is changing a GPO later from normal AD ?

Regards
René

"Norbert Fehlauer [MVP]" wrote:

> rfalken wrote:
> Hi,
>
> > It possible to take the system.adm file from a WinXPsp2 machine and
> > change the #if version and #endif and tag them with ; and then import
> > the system.adm into AD ? Would this allow me to control the WinXP
> > firewall from my Win2k AD ?
>
> Yes that would be a possibility. But it's far easier to install the GPMC on
> a Windows XP machine and configure your GPOs from there.
>
>
> Bye
> Norbert
>
>

rfalken wrote:
Hi,

> I understand that its easier. But what if i cannot see the settings
> in GPMC ?

Did you try it?

> and what if another Admin is changing a GPO later from
> normal AD ?

Nothing. He don't see these settings, so he can't change them.

Bye
Norbert

Yes i have tried it.

I'm looking under Computer Settings / Administrative Templates / Network

And there is nothing regarding the firewall.

"Norbert Fehlauer [MVP]" wrote:

> rfalken wrote:
> Hi,
>
> > I understand that its easier. But what if i cannot see the settings
> > in GPMC ?
>
> Did you try it?
>
> > and what if another Admin is changing a GPO later from
> > normal AD ?
>
> Nothing. He don't see these settings, so he can't change them.
>
> Bye
> Norbert
>

rfalken wrote:
> Yes i have tried it.

OK.

> I'm looking under Computer Settings / Administrative Templates /
> Network

And you use the Windows XP SP2 or Windows Server 2003 system.adm in this
GPO?

Bye
Norbert
--
Dilbert's words of wisdom #32: If it wasn't for the last minute,
nothing would get done.

I had not imported the system.adm from windows xp

Thanks for the help.

"Norbert Fehlauer [MVP]" wrote:

> rfalken wrote:
> > Yes i have tried it.
>
> OK.
>
> > I'm looking under Computer Settings / Administrative Templates /
> > Network
>
> And you use the Windows XP SP2 or Windows Server 2003 system.adm in this
> GPO?
>
> Bye
> Norbert
> --
> Dilbert's words of wisdom #32: If it wasn't for the last minute,
> nothing would get done.
>
>

rfalken wrote:
> I had not imported the system.adm from windows xp

The latest is the adm from W2k3 SP1.

HTH
Norbert

Ok thanks

"Norbert Fehlauer [MVP]" wrote:

> rfalken wrote:
> > I had not imported the system.adm from windows xp
>
> The latest is the adm from W2k3 SP1.
>
> HTH
> Norbert
>