Firewall and Screen Saver policies?

G

Guest

not sure if this is the right place for this, if not please point me to the
correct discussion group, thanks,

Domain, AD, 40 plus computers. Group policy is used for a handfull of
policies.

issue:
on my computer i noticed that microsoft firewall sometimes is on, so i go in
to the registry and change it back to off, since the firewall settings is
grayed out in the controll panel. we have a firewall on our router so i don't
want MS firewall to be ON. is there a group policy that sets the firewall to
off? if so, where is it, i can not seem to find that. if not, why would the
firewall settings be grayed out and i can not change it on my computer (yes
it is the same on the compuers that i have looked at---firewall is OFF
however it is grayed out).

second issue:
I had a screen saver on my computer (custom screen saver), this morning the
screen saver has changed to one of MS, when i go into control
panel/display/screen saver i can not change it, it is also grayed out. i
looked in the registery file and also group policy both on the domain and on
local computer and can not find anything that would let me make the changes.
I know it is user specific since I logged in as Admin on my computer and i
was able to make the changes in the control panel. log in as myself and i
can not make changes.

with that said i have also ran Windows defender, Ad-Aware Pro, Spybot S&D
and our antivirus software--the system is clean.

i am running Windows XP Pro SP2 and all patches are up to date.
 
S

Steven L Umbach

Run rsop.msc on your computer and it should generate a report of all the
Group Policy settings applied to it [drill down through the displayed
folders] and the name of the GPO that is applying the policy that would need
to be modified by logging onto the domain controller as a domain
administrator. Note however that it is possible to have Group Policy like
settings applied to a computer by modifying the same registry keys [ HKLM or
HKCU \Microsoft\Windows\CurrentVersion\Policies] that Group Policy uses and
that can be a bit tricky to track down though there is a free tool called
Dial a Fix that can help with that but I would only use that if it is
confirmed that Group Policy settings are not enforcing the settings.

Steve

http://www.softpedia.com/get/System/System-Miscellaneous/Dial-a-fix.shtml
--- Dial a Fix
http://technet.microsoft.com/en-us/library/bb490624.aspx -- Windows Firewall
registry settings
 
G

Guest

Thank you Steve,
I will do as you mentioned below. I was out of town for a while and did not
get a chance to do this. i will respond back if i have any other issues. :)

Robin
--
Thank you,



Steven L Umbach said:
Run rsop.msc on your computer and it should generate a report of all the
Group Policy settings applied to it [drill down through the displayed
folders] and the name of the GPO that is applying the policy that would need
to be modified by logging onto the domain controller as a domain
administrator. Note however that it is possible to have Group Policy like
settings applied to a computer by modifying the same registry keys [ HKLM or
HKCU \Microsoft\Windows\CurrentVersion\Policies] that Group Policy uses and
that can be a bit tricky to track down though there is a free tool called
Dial a Fix that can help with that but I would only use that if it is
confirmed that Group Policy settings are not enforcing the settings.

Steve

http://www.softpedia.com/get/System/System-Miscellaneous/Dial-a-fix.shtml
--- Dial a Fix
http://technet.microsoft.com/en-us/library/bb490624.aspx -- Windows Firewall
registry settings
 
G

Guest

Thanks Steven,
i ran the rsop.msc and found that the display settings for screen saver are
set to enabled and the GPO name is "log off" however i can not seem to find
where the gpo log off is located. i looked on the domain gpo and i did not
see it there. i believe the setting is set on the domain gpo because all of
my users have the same issue as i am having where they can not change the
screen settings.

Thanks so much for your assistance.
Robin
--
Thank you,



Steven L Umbach said:
Run rsop.msc on your computer and it should generate a report of all the
Group Policy settings applied to it [drill down through the displayed
folders] and the name of the GPO that is applying the policy that would need
to be modified by logging onto the domain controller as a domain
administrator. Note however that it is possible to have Group Policy like
settings applied to a computer by modifying the same registry keys [ HKLM or
HKCU \Microsoft\Windows\CurrentVersion\Policies] that Group Policy uses and
that can be a bit tricky to track down though there is a free tool called
Dial a Fix that can help with that but I would only use that if it is
confirmed that Group Policy settings are not enforcing the settings.

Steve

http://www.softpedia.com/get/System/System-Miscellaneous/Dial-a-fix.shtml
--- Dial a Fix
http://technet.microsoft.com/en-us/library/bb490624.aspx -- Windows Firewall
registry settings
 
S

Steven L Umbach

Check all your containers in Active Directory such as Organizational Units
and you should be able to find it. If the domain controller has Group Policy
Management Console installed use it as it should list all the GPOs together
for examination and management. You can download it at the link below if you
need it and it is well worth installing if you are not using it. Running the
utility gpotool on a domain controller may also give you more information
about your GPOs

Steve

http://www.microsoft.com/downloads/...24-8cbd-4b35-9272-dd3cbfc81887&displaylang=en
http://www.microsoft.com/downloads/...69-57ff-4ae7-96ee-b18c4790cffd&displaylang=en
-- RK tools

luv2bike2 said:
Thanks Steven,
i ran the rsop.msc and found that the display settings for screen saver
are
set to enabled and the GPO name is "log off" however i can not seem to
find
where the gpo log off is located. i looked on the domain gpo and i did
not
see it there. i believe the setting is set on the domain gpo because all
of
my users have the same issue as i am having where they can not change the
screen settings.

Thanks so much for your assistance.
Robin
--
Thank you,



Steven L Umbach said:
Run rsop.msc on your computer and it should generate a report of all the
Group Policy settings applied to it [drill down through the displayed
folders] and the name of the GPO that is applying the policy that would
need
to be modified by logging onto the domain controller as a domain
administrator. Note however that it is possible to have Group Policy like
settings applied to a computer by modifying the same registry keys [ HKLM
or
HKCU \Microsoft\Windows\CurrentVersion\Policies] that Group Policy uses
and
that can be a bit tricky to track down though there is a free tool called
Dial a Fix that can help with that but I would only use that if it is
confirmed that Group Policy settings are not enforcing the settings.

Steve

http://www.softpedia.com/get/System/System-Miscellaneous/Dial-a-fix.shtml
--- Dial a Fix
http://technet.microsoft.com/en-us/library/bb490624.aspx -- Windows
Firewall
registry settings

luv2bike2 said:
not sure if this is the right place for this, if not please point me to
the
correct discussion group, thanks,

Domain, AD, 40 plus computers. Group policy is used for a handfull of
policies.

issue:
on my computer i noticed that microsoft firewall sometimes is on, so i
go
in
to the registry and change it back to off, since the firewall settings
is
grayed out in the controll panel. we have a firewall on our router so i
don't
want MS firewall to be ON. is there a group policy that sets the
firewall
to
off? if so, where is it, i can not seem to find that. if not, why
would
the
firewall settings be grayed out and i can not change it on my computer
(yes
it is the same on the compuers that i have looked at---firewall is OFF
however it is grayed out).

second issue:
I had a screen saver on my computer (custom screen saver), this morning
the
screen saver has changed to one of MS, when i go into control
panel/display/screen saver i can not change it, it is also grayed out.
i
looked in the registery file and also group policy both on the domain
and
on
local computer and can not find anything that would let me make the
changes.
I know it is user specific since I logged in as Admin on my computer
and i
was able to make the changes in the control panel. log in as myself
and i
can not make changes.

with that said i have also ran Windows defender, Ad-Aware Pro, Spybot
S&D
and our antivirus software--the system is clean.

i am running Windows XP Pro SP2 and all patches are up to date.
 

Ask a Question

Want to reply to this thread or ask your own question?

You'll need to choose a username for the site, which only take a couple of moments. After that, you can post your question and our members will help you out.

Ask a Question

Top