Windows firewall settings deployed via group policy

I'm trying to find the correlation between the settings I have defined
on the WinXP SP3 clients and where/what those would be in Group
policy/organizational units (sorry, I'm lacking in terminology here).

I have the windows firewall enabled, but there are 2 programs that I
need to let through for functionality.

In the MMC, I have browsed to Computer Configuration, Administrative
Templates, Network, Network Connections, and then Windows Firewall. In
define program exceptions, what is the string I put in there to specify
these 2 programs to get through the firewall? "program.exe"

Also, in order to allow the c$ share and manage machines remotely
(access remote machines with right-click my computer > Manage) do I put
my exceptions in the Define port exceptions setting?

Thanks.

Kapibarra wrote:
> I'm trying to find the correlation between the settings I have defined
> on the WinXP SP3 clients and where/what those would be in Group
> policy/organizational units (sorry, I'm lacking in terminology here).
>
> I have the windows firewall enabled, but there are 2 programs that I
> need to let through for functionality.
>
> In the MMC, I have browsed to Computer Configuration, Administrative
> Templates, Network, Network Connections, and then Windows Firewall. In
> define program exceptions, what is the string I put in there to specify
> these 2 programs to get through the firewall? "program.exe"
>
> Also, in order to allow the c$ share and manage machines remotely
> (access remote machines with right-click my computer > Manage) do I put
> my exceptions in the Define port exceptions setting?
>
> Thanks.

Is this the wrong group to ask this question in? I just ask because I
have not received a reply.

Thank you.

This is the correct group, there are a couple of sharp gpo folks who monitor
this group but they must be away right now. I haven't used gpo for firewall
management so I don't want to try and answer a question I'm not qualified to
answer.

--
Paul Bergson
MVP - Directory Services
MCTS, MCT, MCSE, MCSA, Security+, BS CSci
2008, 2003, 2000 (Early Achiever), NT4
Microsoft's Thrive IT Pro of the Month - June 2009

http://www.pbbergs.com

Please no e-mails, any questions should be posted in the NewsGroup This
posting is provided "AS IS" with no warranties, and confers no rights.

"Kapibarra" <me3@privacy.net> wrote in message news:hgdva9$22a$1@aioe.org...
> Kapibarra wrote:
>> I'm trying to find the correlation between the settings I have defined on
>> the WinXP SP3 clients and where/what those would be in Group
>> policy/organizational units (sorry, I'm lacking in terminology here).
>>
>> I have the windows firewall enabled, but there are 2 programs that I need
>> to let through for functionality.
>>
>> In the MMC, I have browsed to Computer Configuration, Administrative
>> Templates, Network, Network Connections, and then Windows Firewall. In
>> define program exceptions, what is the string I put in there to specify
>> these 2 programs to get through the firewall? "program.exe"
>>
>> Also, in order to allow the c$ share and manage machines remotely (access
>> remote machines with right-click my computer > Manage) do I put my
>> exceptions in the Define port exceptions setting?
>>
>> Thanks.
>
> Is this the wrong group to ask this question in? I just ask because I
> have not received a reply.
>
> Thank you.

I did a brief search and this may help you out.
http://technet.microsoft.com/en-us/l.../bb490626.aspx

--
Paul Bergson
MVP - Directory Services
MCTS, MCT, MCSE, MCSA, Security+, BS CSci
2008, 2003, 2000 (Early Achiever), NT4
Microsoft's Thrive IT Pro of the Month - June 2009

http://www.pbbergs.com

Please no e-mails, any questions should be posted in the NewsGroup This
posting is provided "AS IS" with no warranties, and confers no rights.

"Paul Bergson [MVP-DS]" <pbbergs@no_spammsn.com> wrote in message
news:%230noYS%23fKHA.3792@TK2MSFTNGP02.phx.gbl...
> This is the correct group, there are a couple of sharp gpo folks who
> monitor this group but they must be away right now. I haven't used gpo
> for firewall management so I don't want to try and answer a question I'm
> not qualified to answer.
>
> --
> Paul Bergson
> MVP - Directory Services
> MCTS, MCT, MCSE, MCSA, Security+, BS CSci
> 2008, 2003, 2000 (Early Achiever), NT4
> Microsoft's Thrive IT Pro of the Month - June 2009
>
> http://www.pbbergs.com
>
> Please no e-mails, any questions should be posted in the NewsGroup This
> posting is provided "AS IS" with no warranties, and confers no rights.
>
> "Kapibarra" <me3@privacy.net> wrote in message
> news:hgdva9$22a$1@aioe.org...
>> Kapibarra wrote:
>>> I'm trying to find the correlation between the settings I have defined
>>> on the WinXP SP3 clients and where/what those would be in Group
>>> policy/organizational units (sorry, I'm lacking in terminology here).
>>>
>>> I have the windows firewall enabled, but there are 2 programs that I
>>> need to let through for functionality.
>>>
>>> In the MMC, I have browsed to Computer Configuration, Administrative
>>> Templates, Network, Network Connections, and then Windows Firewall. In
>>> define program exceptions, what is the string I put in there to specify
>>> these 2 programs to get through the firewall? "program.exe"
>>>
>>> Also, in order to allow the c$ share and manage machines remotely
>>> (access remote machines with right-click my computer > Manage) do I put
>>> my exceptions in the Define port exceptions setting?
>>>
>>> Thanks.
>>
>> Is this the wrong group to ask this question in? I just ask because I
>> have not received a reply.
>>
>> Thank you.
>
>

Paul Bergson [MVP-DS] wrote:
> I did a brief search and this may help you out.
> http://technet.microsoft.com/en-us/l.../bb490626.aspx
>

Hi Paul and thanks for your reply. My question was for info a bit more
specific than provided at the the link you posted. As a matter of fact,
I was following the direction from the page link above before posting
here, and my question was directed at a piece of info the page was not
providing.

As recommended by you, I will wait for the "sharp gpo folks who
monitor this group". :)

"Paul Bergson [MVP-DS]" <pbbergs@no_spammsn.com> wrote in message
news:%230noYS%23fKHA.3792@TK2MSFTNGP02.phx.gbl...
> > This is the correct group, there are a couple of sharp gpo folks who
> > monitor this group but they must be away right now. I haven't used
gpo for firewall management so I don't want to try and answer a
question > >I'm not qualified to answer.
> >
> >
> > "Kapibarra" <me3@privacy.net> wrote in message
> > news:hgdva9$22a$1@aioe.org...
>> >> Kapibarra wrote:
>>> >>> I'm trying to find the correlation between the settings I have
defined on the WinXP SP3 clients and where/what those would be in Group
>>> >>> policy/organizational units (sorry, I'm lacking in terminology
here).
>>> >>>
>>> >>> I have the windows firewall enabled, but there are 2 programs
that I need to let through for functionality.
>>> >>>
>>> >>> In the MMC, I have browsed to Computer Configuration,
Administrative Templates, Network, Network Connections, and then Windows
Firewall. In define program exceptions, what is the string I put in
there to specify these 2 programs to get through the firewall?
"program.exe"
>>> >>>
>>> >>> Also, in order to allow the c$ share and manage machines
remotely (access remote machines with right-click my computer > Manage)
do I put my exceptions in the Define port exceptions setting?
>>> >>>
>>> >>> Thanks.
>> >>
>> >> Is this the wrong group to ask this question in? I just ask
because I have not received a reply.
>> >>
>> >> Thank you.
> >
> >

I did use this link and have since allowed a Trend Server Protect exe
through via gpo.

I fear that since you haven't heard back from anyone that this has aged out.
What in this article doesn't specifically answer your question.

"and my question was directed at a piece of info the page was not
providing."

--
Paul Bergson
MVP - Directory Services
MCTS, MCT, MCSE, MCSA, Security+, BS CSci
2008, 2003, 2000 (Early Achiever), NT4
Microsoft's Thrive IT Pro of the Month - June 2009

http://www.pbbergs.com

Please no e-mails, any questions should be posted in the NewsGroup This
posting is provided "AS IS" with no warranties, and confers no rights.

"Kapibarra" <me3@privacy.net> wrote in message news:hgog9b$r4f$1@aioe.org...
> Paul Bergson [MVP-DS] wrote:
>> I did a brief search and this may help you out.
>> http://technet.microsoft.com/en-us/l.../bb490626.aspx
>>
>
> Hi Paul and thanks for your reply. My question was for info a bit more
> specific than provided at the the link you posted. As a matter of fact, I
> was following the direction from the page link above before posting here,
> and my question was directed at a piece of info the page was not
> providing.
>
> As recommended by you, I will wait for the "sharp gpo folks who
> monitor this group". :)
>
> "Paul Bergson [MVP-DS]" <pbbergs@no_spammsn.com> wrote in message
> news:%230noYS%23fKHA.3792@TK2MSFTNGP02.phx.gbl...
> > > This is the correct group, there are a couple of sharp gpo folks who
> > > monitor this group but they must be away right now. I haven't used
> gpo for firewall management so I don't want to try and answer a question
> > >I'm not qualified to answer.
> > >
> > >
> > > "Kapibarra" <me3@privacy.net> wrote in message
> > > news:hgdva9$22a$1@aioe.org...
> >> >> Kapibarra wrote:
> >>> >>> I'm trying to find the correlation between the settings I have
> defined on the WinXP SP3 clients and where/what those would be in Group
> >>> >>> policy/organizational units (sorry, I'm lacking in terminology
> here).
> >>> >>>
> >>> >>> I have the windows firewall enabled, but there are 2 programs
> that I need to let through for functionality.
> >>> >>>
> >>> >>> In the MMC, I have browsed to Computer Configuration,
> Administrative Templates, Network, Network Connections, and then Windows
> Firewall. In define program exceptions, what is the string I put in there
> to specify these 2 programs to get through the firewall? "program.exe"
> >>> >>>
> >>> >>> Also, in order to allow the c$ share and manage machines
> remotely (access remote machines with right-click my computer > Manage) do
> I put my exceptions in the Define port exceptions setting?
> >>> >>>
> >>> >>> Thanks.
> >> >>
> >> >> Is this the wrong group to ask this question in? I just ask
> because I have not received a reply.
> >> >>
> >> >> Thank you.
> > >
> > >
>
>

Paul Bergson [MVP-DS] wrote:
> I did use this link and have since allowed a Trend Server Protect exe
> through via gpo.
>
> I fear that since you haven't heard back from anyone that this has aged out.
> What in this article doesn't specifically answer your question.
>
> "and my question was directed at a piece of info the page was not
> providing."
>

Hi Paul, and thank you again for your reply. Here are my questions:

In the MMC, I have browsed to Computer Configuration, Administrative
Templates, Network, Network Connections, and then Windows Firewall. In
define program exceptions, what is the string I put in there to specify
these 2 programs to get through the firewall?
"program.exe"?

Also, in order to allow the c$ share and manage machines remotely
(access remote machines with right-click my computer > Manage) do I put
my exceptions in the Define port exceptions setting?

For the program to get through the firewall (My experience on this and other
types like this) you will need to have the path and executable on the
machine that you are building the policy for. So when I added a policy for
Trend Server Protect, I jumped on a 2008 machine that had Trend on it and
loaded the gpo tools and updated the policy. Does that make sense for you?
Worked perfectly for me.

I can't answer the manage piece since we already can and we didn't modify
any firewall settings (Using 2003 though), but that does bring up a good
point. I'm surprised we didn't need to set that up.

--
Paul Bergson
MVP - Directory Services
MCTS, MCT, MCSE, MCSA, Security+, BS CSci
2008, 2003, 2000 (Early Achiever), NT4
Microsoft's Thrive IT Pro of the Month - June 2009

http://www.pbbergs.com

Please no e-mails, any questions should be posted in the NewsGroup This
posting is provided "AS IS" with no warranties, and confers no rights.

"Kapibarra" <me3@privacy.net> wrote in message news:hgr1kc$tkj$1@aioe.org...
> Paul Bergson [MVP-DS] wrote:
>> I did use this link and have since allowed a Trend Server Protect exe
>> through via gpo.
>>
>> I fear that since you haven't heard back from anyone that this has aged
>> out. What in this article doesn't specifically answer your question.
>>
>> "and my question was directed at a piece of info the page was not
>> providing."
>>
>
> Hi Paul, and thank you again for your reply. Here are my questions:
>
> In the MMC, I have browsed to Computer Configuration, Administrative
> Templates, Network, Network Connections, and then Windows Firewall. In
> define program exceptions, what is the string I put in there to specify
> these 2 programs to get through the firewall?
> "program.exe"?
>
> Also, in order to allow the c$ share and manage machines remotely (access
> remote machines with right-click my computer > Manage) do I put my
> exceptions in the Define port exceptions setting?