What versions are the clients? The Win7 host firewall does not AFAIK share any settings or behaviors with its predecessors.
I'd definitely prefer to leave the firewall on, with an allow rule for RDP (and probably RPC remote management) in the Domain profile. --Steve On Tue, Aug 7, 2012 at 2:14 PM, Kurt Buff <kurt.b...@gmail.com> wrote: > Just added that. We'll see if that fixes the problem. > > The thing is, there's a long standing GPO (admin template) that allows > RDP, and it's either being ignored or overridden. That's pretty > puzzling. > > Also, the new GPO controlling the firewall explicitly turns off the > firewall for the Domain profile, but that's being ignored as well. Any > idea why? > > Kurt > > On Tue, Aug 7, 2012 at 11:06 AM, Jim Majorowicz <jmajorow...@gmail.com> wrote: >> You're going to need to allow Remote Desktop (TCP-in) in the Inbound >> Rules as part of your firewall GPO. >> >> On Tue, Aug 7, 2012 at 10:52 AM, Kurt Buff <kurt.b...@gmail.com> wrote: >>> All, >>> >>> We set up a GPO that turned on the Windows firewall for our >>> workstations, and encountered several problems - the most urgent of >>> which is the inability of people working from home to RDP to their >>> desktop machines. >>> >>> I have deleted the GPO via GPMC, and have set up a GPO that explicitly >>> turns off the firewall for the Domain profile, but it's still showing >>> as on, even after rebooting the affected workstations, and seeing that >>> the new GPO settings seem to be in place. >>> >>> I've been googling a bunch, and am not seeing how to turn this back to >>> the way it used to be for folks. >>> >>> Can anyone point me in the right direction on this? >>> >>> >>> Thanks, >>> >>> Kurt >>> >>> ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ >>> ~ <http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/> ~ >>> ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ <http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/> ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe ntsysadmin
