How to create a different (local?) userprofile with firewall disabled & a different IP address for the network port?

Odpovědět How to create a different (local?) userprofile with firewall disabled & a different IP address for the network port?

  • 28. dubna 2012 0:04
     
     

    Hello,

    My computer has Win7 with a domain login & is controlled by group policies where windows firewall is always enabled & IP is assigned through DHCP (standard setting). I have a requirement to disable the windows firewall & assign a static IP to the network port for some specific testing activities which is currently blocked by the firewall & limited by the IP address modification capability(due to admin access restriction). This is currently not feasible because of the group level policies which are applied in the system.

    I am looking forward to an option where a local user account created on the laptop. When the user logs in with this local user account, the windows firewall should be automatically disabled & the IP address should be a predefined static IP (like 192.168.100.100).

    I would prefer not to have any configuration changes done each time I want to perform my testing & hence hoping that I can get a local user profile created in which the software/hardware settings will be disabling the firewall & assigning 192.168.100.100 to the network interface. So, if I login with this local user profile, I have my test environment & when I login with my AD login, I would get the standard environment.

    I am hoping that, we can have a win7 startup script associated with this local user login, which overrides the global settings/group level policies and will disable the firewall & provide the defined IP.

    How do I achieve this? Any other alternative solutions?  Pl suggest/comment.

    Thanks,

Všechny reakce

  • 29. dubna 2012 7:56
     
     Odpovědět

    Give a try to nestsh function. As an alternative to logon script there is a possibillity to use scheduled task at logon, where there is in script a user account detection and for local user is IP reset as well as firewall disabled. Scheduled task can work with elevated right.

    Regards

    Milos