Rolling out SP2 using Group policy

[Nick]

Hi

I am running Windows 2003 server Domain. I would like to roll out Service
pack 2 for XP to all of our machines using a group policy. My problem is we
use vnc to control the pc's so i will need certain ports to be available,
and our anti virus software requires certain ports open. What i have noticed
when i have installed SP2 manually on a machine is that it enables the
firewall by default and then i have to open up the ports before the above
programs will work.

Is there a way to get it to open ports up by default when installing via a
GP. Going round to each machine will mean i actually have to do some work


Many Thanks

Nick

 

[Torgeir Bakken \(MVP\)]

I am running Windows 2003 server Domain. I would like to roll out Service
pack 2 for XP to all of our machines using a group policy. My problem is we
use vnc to control the pc's so i will need certain ports to be available,
and our anti virus software requires certain ports open. What i have noticed
when i have installed SP2 manually on a machine is that it enables the
firewall by default and then i have to open up the ports before the above
programs will work.

Is there a way to get it to open ports up by default when installing via a
GP. Going round to each machine will mean i actually have to do some work

Hi

There are specific Group Policy settings for the SP2 firewall.

More here:

Managing Windows XP Service Pack 2 Features Using Group Policy
http://www.microsoft.com/technet/prodtechnol/winxppro/maintain/mangxpsp2/mngintro.mspx


If you install the WinXP SP2 .adm files on the domain controller, but
you don't use WinXP SP2 to edit the GPO settings, you may you get the
message below, install the hotfix that is available in the KB article
in the link below to solve this.

"The following entry in the [strings] section is too long and has
been truncated" error message when you try to modify or to view GPOs
in Windows Server 2003, Windows XP Professional, or Windows 2000
http://support.microsoft.com/?id=842933

 

[Werner Pertl]

Hi Nick,
you can control the firewall in sp2 by group policy and define the port
exceptions you need.
Have a look @ this link:
http://www.microsoft.com/technet/prodtechnol/winxppro/maintain/mangxpsp2/mngwfw.mspx
Best regards
Werner