locked
Does Windows7 Firewall Advance Profile compatible to Windows 2003 Domain GPO? RRS feed

  • Question

  • Dear All,

    I have Windows 2003 Domain environment with GPO enabling Firewall to all PC/Laptop client. Seems all okay in WindowsXP Clients both Domain+Standard Profile setting. Found that GPO doesn't apply to "Advance Firewall Profile" where I can't manage "PRIVATE and PUBLIC" Network to be "ON". Was the Windows 2003 AD has limitation controlling GPO to Windows7 Windows Firewall Profile?

    Kindly share Knowledgebase item saying on this if possible just to prove that whether it is limitation in 2003 Domain GPO.

    Thank you indeed,

    Wibun


    • Edited by Swibun Tuesday, September 18, 2012 1:33 AM
    Tuesday, September 18, 2012 1:03 AM

Answers

  • The "Advanced Firewall Profile" policy setting will only about to Vista/Server 2008 or later computer OS's. The Network\Firewall administrative templates will apply to XP or later... But this is more of a backwards compatibility feature of Windows Vista (7) or later. If you are modifying firewall setting for Windows Vista (7) then definitely use the "Advanced Firewall" settings... but if it is for XP you have to use the Network\Firewall admin templates.

    Hope it helps


    Alan Burchill (MVP)
    http://www.grouppolicy.biz

    @alanburchill

    • Proposed as answer by Alan Burchill Tuesday, September 18, 2012 2:50 AM
    • Marked as answer by Andy Qi Wednesday, September 26, 2012 6:02 AM
    Tuesday, September 18, 2012 2:49 AM

All replies

  • The "Advanced Firewall Profile" policy setting will only about to Vista/Server 2008 or later computer OS's. The Network\Firewall administrative templates will apply to XP or later... But this is more of a backwards compatibility feature of Windows Vista (7) or later. If you are modifying firewall setting for Windows Vista (7) then definitely use the "Advanced Firewall" settings... but if it is for XP you have to use the Network\Firewall admin templates.

    Hope it helps


    Alan Burchill (MVP)
    http://www.grouppolicy.biz

    @alanburchill

    • Proposed as answer by Alan Burchill Tuesday, September 18, 2012 2:50 AM
    • Marked as answer by Andy Qi Wednesday, September 26, 2012 6:02 AM
    Tuesday, September 18, 2012 2:49 AM
  • Hi Alan, Thanks for the answer. Can you help sharing if there is some KB in Microsoft relating this? I will just want to prove this as an evidence to Auditor.

    Thanks,

    Wibun

    Thursday, September 20, 2012 7:16 AM