2011年5月25日 下午 01:27
I've noticed that while deploying FEP 2010 using SCCM 2007 that on Windows 2003 Server machines the firewall is turned on. I know that when installing FEP manually one of the last question it asks during the install is about turning on the firewall or not.
How can I create and FEP 2010 deployment that installs FEP 2010 without having the firewall turned on automatically?
2011年5月25日 下午 01:49you can control the Firewall settings in the FEP policy in hte ConfigMgr. console.
Kent Agerlund | My blogs: http://blog.coretech.dk/author/kea/ and http://scug.dk/ | Twitter @Agerlund | Linkedin: /kentagerlund
2011年5月25日 下午 01:53
Thanks for the quick response.
I did configure the policy settings in the SCCM console so that the server policy had the Manage Firewall unchecked; however, it seems that the 2003 Servers had these turned on during the install regardless of this setting.
I could be imagining this, but it sure seems like it. I've had to go and manually turn off the firewall on all 2003 servers that I've installed FEP 2010 on via SCCM.
2011年5月25日 下午 01:59
I had a similar issue with the policy for FEP during OSD, which command are you using for installing the FEP client?
I exported the policy from the SCCM Console to an .XML file and used that during the installation.
The command line looked like this “fepinstall.exe /q /s /policy \\sccm01\apps\feppolicy\Windows7all.xml"
then the FEPinstall will apply the policy you want during setup and the problem should hopefully not appear, but as I said I haven't tested it with the Firewall setting on a Windows 2003 server.
Hope it helps!
-- My System center blog ccmexec.com --
2011年5月25日 下午 02:15
Thanks for the reply. I was hoping I could simply not turn on the firewall using a switch on the FEPInstall.exe, but apparently not according to this: http://technet.microsoft.com/en-us/library/gg398035.aspx.
I'll try to look at the policies a bit closer.
All the Best,
2012年4月13日 下午 12:16
If you go into your policy and check the box for 'Manage Windows Firewall', you can then set it to be turned off. That should leave it turned off when it installs on your servers. I haven't tried this on a server, but it works that way on every computer I've installed it on.
2012年7月18日 下午 07:05Have you had any luck in getting this to deploy without the firewall turning on?