What is with windows firewall!?!

[mirojr]

I try in vain to use group policy to turn the damned thing off

 

I do computer->admin templates->network->net connections->windows firewall->std profile->protect all network connections-> disabled

 

My rsop.msc on client shows firewall disabled. Services.msc shows ...firewall running!!

 

Tried turning off service from group policy.

 

windows settings->security->system services->windows firewall

 

It then shows up in rsop.msc as another service: mpsSvc disabled firewall off

 

When I open services.msc.... firewall is running.... bloody great.

 

Why is this not happening?! anyone know

 

Thanks

[Michael]

You need to disable the same policies under the Domain Profile as well as Standard Profile. The run a gpupdate and all should be good

[mirojr]

Thanks for response.

 

But...

 

Still seems to have firewall service running, even though both these items are applied according to the clients rsop.msc

[Michael]

If you run gpupdate /force that should do the trick. You can also change/update how often your workstations receive new GPO settings. I believe the default is every 90 minutes. You can change this navigating to:

 

Computer Config > Admin Templates > System > Group Policy - Group Policy refresh interval for computers

[mirojr]

The rsop.msc shows its applied, but still service runs... aghh

 

I tried the forcing of the policy also. Same deal.

 

But the fact rsop.msc shows its applied without errors, and still the service runs, is enough to make me cry.

[jamesreedersmith]

The service will always run even if you have disabled all firewall functionality, the service is linked to some other windows services and therefore cant be stopped (from what i know) just the traffic control part will not do anything if you disable it!

[HallX]

The service will still be running even if the firewall is turned off. Have you checked Control Panel > Firewall?

[stevehp]

The service is shared with ICS (Internet Connection Sharing) on Windows XP. I tend to disable that service on all of my images even though we have a GPO that prevents the firewall from running.

 

If you open the Windows Firewall control panel on an admin acccount it will be or should be all greyed out.