PDA

View Full Version : Can't disable firewall in XP SP2


Gordoni
September 10th 04, 07:59 PM
After installing XP SP2, I'm unable to diable the
firewall. The GUI simply doesn't allow me to check
the "disable" button or uncheck the "enable" button. My
user is an admin equivalent, but I've also tried logging
in as the network admin and as the local machine admin.
None of these security contexts is able to disable the
firewall.

I've also tried using the command line to disable the
firewall (netsh firewall set opmode disable). While I
get an "OK" reply to the command, the firewall remainns
enabled.

Any suggestions?

Steve Bruce, mct
September 10th 04, 08:29 PM
I just turned mine of in the local group policy

computer > administrative templates > networking > firewall (something like
that)

This will work unless you have a domain policy that over-rides this setting.





"Gordoni" > wrote in message
...
> After installing XP SP2, I'm unable to diable the
> firewall. The GUI simply doesn't allow me to check
> the "disable" button or uncheck the "enable" button. My
> user is an admin equivalent, but I've also tried logging
> in as the network admin and as the local machine admin.
> None of these security contexts is able to disable the
> firewall.
>
> I've also tried using the command line to disable the
> firewall (netsh firewall set opmode disable). While I
> get an "OK" reply to the command, the firewall remainns
> enabled.
>
> Any suggestions?

SlowJet
September 10th 04, 09:19 PM
There is no disable or enable button to trunoff the WFW?

Go to Control Panel, Fire Wall.

Look at Advanced TAB.
If you have you own network you may have just truned off the ISP connection
which still using file and share NIC.
Go to Exceptions and click off al the boxes.
Go to General and click OFF radio button.
OK

Reboot and if Security Center comes up, tell it you have your own FW and Own
AVand it will go away.

SJ

P.S. If you are going through the network connections for a particular NIC
the same would happen, and also this is not available for AOL.
So use the FW control (which is NOT the Security Center).
"Gordoni" > wrote in message
...
> After installing XP SP2, I'm unable to diable the
> firewall. The GUI simply doesn't allow me to check
> the "disable" button or uncheck the "enable" button. My
> user is an admin equivalent, but I've also tried logging
> in as the network admin and as the local machine admin.
> None of these security contexts is able to disable the
> firewall.
>
> I've also tried using the command line to disable the
> firewall (netsh firewall set opmode disable). While I
> get an "OK" reply to the command, the firewall remainns
> enabled.
>
> Any suggestions?

Gordoni
September 11th 04, 12:38 AM
I access the FW control thru control panel which is the
same app as the one accessed from the Security Center.
The buttons are there but they are grayed out. The only
setting I can adjust is the "Don't allow exceptions"
checkbox. When I select the "advanced" tab, I am not able
to uncheck any of the connections in the 'network
connection settings' dialog box either.

I followed Steve Bruce's suggestion and tried disabling
the firewall through the group policy editor. I set the
values in both the domain and the standard folders
to 'disabled' and then rebooted. No joy. I then went to
my server (SBS2003) and made the same alterations to it
using the GP editor. I got a series of truncation
warnings when I openned the folder on the server. In any
case, disabling the firewall there also had no effect.
This is pretty screwy if you ask me.

-g
>-----Original Message-----
>There is no disable or enable button to trunoff the WFW?
>
>Go to Control Panel, Fire Wall.
>
>Look at Advanced TAB.
>If you have you own network you may have just truned off
the ISP connection
>which still using file and share NIC.
>Go to Exceptions and click off al the boxes.
>Go to General and click OFF radio button.
>OK
>
>Reboot and if Security Center comes up, tell it you have
your own FW and Own
>AVand it will go away.
>
>SJ
>
>P.S. If you are going through the network connections
for a particular NIC
>the same would happen, and also this is not available
for AOL.
>So use the FW control (which is NOT the Security Center).
>"Gordoni" > wrote in
message
...
>> After installing XP SP2, I'm unable to diable the
>> firewall. The GUI simply doesn't allow me to check
>> the "disable" button or uncheck the "enable" button.
My
>> user is an admin equivalent, but I've also tried
logging
>> in as the network admin and as the local machine admin.
>> None of these security contexts is able to disable the
>> firewall.
>>
>> I've also tried using the command line to disable the
>> firewall (netsh firewall set opmode disable). While I
>> get an "OK" reply to the command, the firewall remainns
>> enabled.
>>
>> Any suggestions?
>
>
>.
>

September 11th 04, 12:39 AM
Steve, please see my rely to "Slowjet". Thanks,

-g
>-----Original Message-----
>I just turned mine of in the local group policy
>
>computer > administrative templates > networking >
firewall (something like
>that)
>
>This will work unless you have a domain policy that over-
rides this setting.
>
>
>
>
>
>"Gordoni" > wrote in
message
...
>> After installing XP SP2, I'm unable to diable the
>> firewall. The GUI simply doesn't allow me to check
>> the "disable" button or uncheck the "enable" button.
My
>> user is an admin equivalent, but I've also tried
logging
>> in as the network admin and as the local machine admin.
>> None of these security contexts is able to disable the
>> firewall.
>>
>> I've also tried using the command line to disable the
>> firewall (netsh firewall set opmode disable). While I
>> get an "OK" reply to the command, the firewall remainns
>> enabled.
>>
>> Any suggestions?
>
>
>.
>

Torgeir Bakken \(MVP\)
September 11th 04, 12:54 AM
Gordoni wrote:

> I access the FW control thru control panel which is the
> same app as the one accessed from the Security Center.
> The buttons are there but they are grayed out. The only
> setting I can adjust is the "Don't allow exceptions"
> checkbox. When I select the "advanced" tab, I am not able
> to uncheck any of the connections in the 'network
> connection settings' dialog box either.
>
> I followed Steve Bruce's suggestion and tried disabling
> the firewall through the group policy editor. I set the
> values in both the domain and the standard folders
> to 'disabled' and then rebooted. No joy.

To *really* stop the Windows Firewall:

Start/Run --> services.msc

Find Windows Firewall in the list, double click on it, set
"Startup type" to Disabled (and press Stop if it is running).


> I then went to
> my server (SBS2003) and made the same alterations to it
> using the GP editor. I got a series of truncation
> warnings when I openned the folder on the server.

You need to install a update on your server:

"The following entry in the [strings] section is too long and has been
truncated" error message when you try to modify or to view GPOs in
Windows Server 2003, Windows XP Professional, or Windows 2000
http://support.microsoft.com/default.aspx?kbid=842933


--
torgeir, Microsoft MVP Scripting and WMI, Porsgrunn Norway
Administration scripting examples and an ONLINE version of
the 1328 page Scripting Guide:
http://www.microsoft.com/technet/scriptcenter/default.mspx

SlowJet
September 11th 04, 01:22 AM
Your welcome, :)

SJ
"Gordoni" > wrote in message
...
>I access the FW control thru control panel which is the
> same app as the one accessed from the Security Center.
> The buttons are there but they are grayed out. The only
> setting I can adjust is the "Don't allow exceptions"
> checkbox. When I select the "advanced" tab, I am not able
> to uncheck any of the connections in the 'network
> connection settings' dialog box either.
>
> I followed Steve Bruce's suggestion and tried disabling
> the firewall through the group policy editor. I set the
> values in both the domain and the standard folders
> to 'disabled' and then rebooted. No joy. I then went to
> my server (SBS2003) and made the same alterations to it
> using the GP editor. I got a series of truncation
> warnings when I openned the folder on the server. In any
> case, disabling the firewall there also had no effect.
> This is pretty screwy if you ask me.
>
> -g
>>-----Original Message-----
>>There is no disable or enable button to trunoff the WFW?
>>
>>Go to Control Panel, Fire Wall.
>>
>>Look at Advanced TAB.
>>If you have you own network you may have just truned off
> the ISP connection
>>which still using file and share NIC.
>>Go to Exceptions and click off al the boxes.
>>Go to General and click OFF radio button.
>>OK
>>
>>Reboot and if Security Center comes up, tell it you have
> your own FW and Own
>>AVand it will go away.
>>
>>SJ
>>
>>P.S. If you are going through the network connections
> for a particular NIC
>>the same would happen, and also this is not available
> for AOL.
>>So use the FW control (which is NOT the Security Center).
>>"Gordoni" > wrote in
> message
...
>>> After installing XP SP2, I'm unable to diable the
>>> firewall. The GUI simply doesn't allow me to check
>>> the "disable" button or uncheck the "enable" button.
> My
>>> user is an admin equivalent, but I've also tried
> logging
>>> in as the network admin and as the local machine admin.
>>> None of these security contexts is able to disable the
>>> firewall.
>>>
>>> I've also tried using the command line to disable the
>>> firewall (netsh firewall set opmode disable). While I
>>> get an "OK" reply to the command, the firewall remainns
>>> enabled.
>>>
>>> Any suggestions?
>>
>>
>>.
>>

September 11th 04, 09:21 AM
Awesome, thanks. I should have thought to look in
services :-p

-g
>-----Original Message-----
>Gordoni wrote:
>
>> I access the FW control thru control panel which is
the
>> same app as the one accessed from the Security Center.
>> The buttons are there but they are grayed out. The
only
>> setting I can adjust is the "Don't allow exceptions"
>> checkbox. When I select the "advanced" tab, I am not
able
>> to uncheck any of the connections in the 'network
>> connection settings' dialog box either.
>>
>> I followed Steve Bruce's suggestion and tried
disabling
>> the firewall through the group policy editor. I set
the
>> values in both the domain and the standard folders
>> to 'disabled' and then rebooted. No joy.
>
>To *really* stop the Windows Firewall:
>
>Start/Run --> services.msc
>
>Find Windows Firewall in the list, double click on it,
set
>"Startup type" to Disabled (and press Stop if it is
running).
>
>
>> I then went to
>> my server (SBS2003) and made the same alterations to
it
>> using the GP editor. I got a series of truncation
>> warnings when I openned the folder on the server.
>
>You need to install a update on your server:
>
>"The following entry in the [strings] section is too
long and has been
>truncated" error message when you try to modify or to
view GPOs in
>Windows Server 2003, Windows XP Professional, or Windows
2000
>http://support.microsoft.com/default.aspx?kbid=842933
>
>
>--
>torgeir, Microsoft MVP Scripting and WMI, Porsgrunn
Norway
>Administration scripting examples and an ONLINE version
of
>the 1328 page Scripting Guide:
>http://www.microsoft.com/technet/scriptcenter/default.msp
x
>.
>

Google