File and Printer Sharing and Firewall settings change

[Guest]

Running Windows XP Pro with SP2, I recently noticed that "File and Printer
Sharing" becomes disabled and my "Firewall" settings become enabled after
logging off. I customize my profile so "File and Printer Sharing" is enabled
in the "Local Area Connections Properties" page and "Firewall" is OFF in the
"Windows Firewall" page. GPO's are not involved since the DC is a Windows
2000 server. The problem persists even while logged on locally, disconnected
from the LAN.

If I restart or log off, then log on again, the settings change state and
reset for "File and Printer Sharing" disabled and "Firewall" on.

Not sure exactly when this behavior started or what recent changes to my
system might have upset Windows XP. There are no third party software
firewalls or file management programs installed. I've exhausted all my
skills, where should I look next?

 

[Steven L Umbach]

It does not matter if the domain controller is Windows 2000. Group Policy
settings can still be applied to XP Pro computers including settings
specific to XP pro. You can run rsop.msc to see what Group Policy settings
are being applied to the computer and user and the enforcing GPO. It sounds
like it may at least have Group Policy logon or startup scripts being
applied.

Steve

 

[Guest]

I already scoured the GPO’s applied to the affected computer, concerned that
a recent update from Microsoft to Window 2000 Servers might have snuck in an
Administrative Template to increase security. A thorough examination of the
RSoP did not reveal any policy causing this nightmare.

I connected another WinXP Pro with SP2 computer to this Domain (rebooting
several times) and the problem does not propagate to this second client
computer.

Anyone with other ideas? I’m close to performing a system repair… but
reluctant to take a chance of going from bad to really, really bad.

John

 

[Steven L Umbach]

Can't think of much else. It sounds a lot like a Group Policy logoff script
is running if this keeps happening at logoff but that should happen when you
logoff another domain computer assuming Group Policy is propagating
correctly and it is not configured in local Group Policy. There has not been
any update that would disable the file and print sharing which is a core
service for domain computers. It might help to enable auditing of system
events and process tracking on that computer and then examine the logs via
Event Viewer for events time stamped at logoff that may give a clue. You
also may want to see if the same behavior happens while booted into Safe
Mode with networking.

Steve