Configuring the Builtin Firewall GPO

[Zachary]

I am trying to configure a group policy that will allow me to control the
windows built in firewall across our domain. What I don't know how to do is
configure it so that if a PC needs the firewall to be temporarily disabled
an administrator can come do that for the machine. I have a test OU setup
to do this so any suggestions can be tested.

 

[Zachary]

i tried setting the security on the service and that was a no go. No matter
what i do, or what user i log in as, the Windows ICS/Firewall Service won't
start. I get an error:

error 0x80004015 the class is configured to run as a security id different
from the caller

This sounded like a very simple solution and would like to deploy it, am i
doing somthing wrong? Did you run into this when you deployed these GPO
settings?