SP2 - profile detection without GPO's ?

[FrankH]

To activate the correct profile (domain or standard), Windows Firewall
compares DNS suffixes from the network connections and the system that sent
the last GPO.
What if there are no GPO's (like in an NT4 domain) ? How does it know when
you're 'in the domain' ?

First tests here show that it doesn't know, and consequently activate the
standard profile on an XP client in an NT4 domain.

Any idea's how to fix this ?

[Torgeir Bakken \(MVP\)]

FrankH wrote:
> To activate the correct profile (domain or standard), Windows
> Firewall compares DNS suffixes from the network connections
> and the system that sent the last GPO.
> What if there are no GPO's (like in an NT4 domain) ? How does
> it know when you're 'in the domain' ?
>
> First tests here show that it doesn't know, and consequently
> activate the standard profile on an XP client in an NT4 domain.
>
> Any idea's how to fix this ?
Hi

As far as I know, there is no way to fix this, so you must have
Active Directory to be able to use the domain profile in the
firewall configuration.


--
torgeir, Microsoft MVP Scripting and WMI, Porsgrunn Norway
Administration scripting examples and an ONLINE version of
the 1328 page Scripting Guide:
http://www.microsoft.com/technet/scriptcenter/default.mspx

[FrankH]

Is there a registry key maybe with which I could mimic the "DNS suffix of the
last received GPO" ?

"Torgeir Bakken (MVP)" wrote:

> FrankH wrote:
> > To activate the correct profile (domain or standard), Windows
> > Firewall compares DNS suffixes from the network connections
> > and the system that sent the last GPO.
> > What if there are no GPO's (like in an NT4 domain) ? How does
> > it know when you're 'in the domain' ?
> >
> > First tests here show that it doesn't know, and consequently
> > activate the standard profile on an XP client in an NT4 domain.
> >
> > Any idea's how to fix this ?
> Hi
>
> As far as I know, there is no way to fix this, so you must have
> Active Directory to be able to use the domain profile in the
> firewall configuration.
>
>
> --
> torgeir, Microsoft MVP Scripting and WMI, Porsgrunn Norway
> Administration scripting examples and an ONLINE version of
> the 1328 page Scripting Guide:
> http://www.microsoft.com/technet/scriptcenter/default.mspx
>

[Torgeir Bakken \(MVP\)]

FrankH wrote:

> Is there a registry key maybe with which I could mimic the
> "DNS suffix of the last received GPO" ?
Hi

I don't know, but I doubt it...


--
torgeir, Microsoft MVP Scripting and WMI, Porsgrunn Norway
Administration scripting examples and an ONLINE version of
the 1328 page Scripting Guide:
http://www.microsoft.com/technet/scriptcenter/default.mspx