How to create a different (local?) userprofile with firewall disabled & a different IP address for the network port?
28. dubna 2012 0:04
My computer has Win7 with a domain login & is controlled by group policies where windows firewall is always enabled & IP is assigned through DHCP (standard setting). I have a requirement to disable the windows firewall & assign a static IP to the network port for some specific testing activities which is currently blocked by the firewall & limited by the IP address modification capability(due to admin access restriction). This is currently not feasible because of the group level policies which are applied in the system.
I am looking forward to an option where a local user account created on the laptop. When the user logs in with this local user account, the windows firewall should be automatically disabled & the IP address should be a predefined static IP (like 192.168.100.100).
I would prefer not to have any configuration changes done each time I want to perform my testing & hence hoping that I can get a local user profile created in which the software/hardware settings will be disabling the firewall & assigning 192.168.100.100 to the network interface. So, if I login with this local user profile, I have my test environment & when I login with my AD login, I would get the standard environment.
I am hoping that, we can have a win7 startup script associated with this local user login, which overrides the global settings/group level policies and will disable the firewall & provide the defined IP.
How do I achieve this? Any other alternative solutions? Pl suggest/comment.
29. dubna 2012 7:56
Give a try to nestsh function. As an alternative to logon script there is a possibillity to use scheduled task at logon, where there is in script a user account detection and for local user is IP reset as well as firewall disabled. Scheduled task can work with elevated right.
- Označen jako odpověď Leo HuangMicrosoft Contingent Staff, Moderator 4. května 2012 8:20