Can't Disable Firewall

Alias · External Since: Sep 27, 2005 Posts: 12

Hello,

I had to reinstall WinXP Pro SP2 and now I noticed that I can no longer
disable Windows Firewall on my host machine.

The buttons that read: On [recommended], Off [not recommended] are both
greyed out. The button that reads "Don't allow exceptions" is the only button
that is active.

Is there a way to fix this problem?

-Alias

Manuel · External Since: Oct 24, 2005 Posts: 13

Hi,

This Pc may have added to a domain where a group policy does not allow you
to change the firewall settings.

You need to be the administrator user in order to be able to change the
firewall. Go to the registry

HKEY_LOCALMACHINE; SOFTWARE; MICROSOFT right click on property and see the
permissions.

Format PC in the worst of the cases

"Alias" <Alias.TakeThisOut@discussions.microsoft.com> wrote in message
news:BE8012B2-5C6B-4B42-9673-4D4136EC7CFE@microsoft.com...
> Hello,
>
> I had to reinstall WinXP Pro SP2 and now I noticed that I can no longer
> disable Windows Firewall on my host machine.
>
> The buttons that read: On [recommended], Off [not recommended] are both
> greyed out. The button that reads "Don't allow exceptions" is the only
> button
> that is active.
>
> Is there a way to fix this problem?
>
> -Alias

Alias · External Since: Sep 27, 2005 Posts: 12

Manuel,

I tried changing that reg key and the Windows Firewall reg key but still
have the same problem. That's ok though because I installed the Outpost
Firewall and disabled the Windows Firewall.

Thanks for your help on this. It's a mystery what happened to Windows
Firewall though.

"Manuel" wrote:

> Hi,
>
> This Pc may have added to a domain where a group policy does not allow you
> to change the firewall settings.
>
> You need to be the administrator user in order to be able to change the
> firewall. Go to the registry
>
> HKEY_LOCALMACHINE; SOFTWARE; MICROSOFT right click on property and see the
> permissions.
>
> Format PC in the worst of the cases
>
>
> "Alias" <Alias.TakeThisOut@discussions.microsoft.com> wrote in message
> news:BE8012B2-5C6B-4B42-9673-4D4136EC7CFE@microsoft.com...
> > Hello,
> >
> > I had to reinstall WinXP Pro SP2 and now I noticed that I can no longer
> > disable Windows Firewall on my host machine.
> >
> > The buttons that read: On [recommended], Off [not recommended] are both
> > greyed out. The button that reads "Don't allow exceptions" is the only
> > button
> > that is active.
> >
> > Is there a way to fix this problem?
> >
> > -Alias
>
>
>

gharryh · Joined: Nov 28, 2005 Posts: 1

I have, had the same problem even being a administrator on the server and the local computer.

After changing the key's in the registery i was not able to disable the firewall and connect to the outside network using VPN.

I solved this by disconecting the computer from the network, restart and afterwards reconnecting to the network.

But the queastion remains why being a administrator i cant disable the computers firewall. I must be a setiing on the server but witch one.

MisterL · Joined: Nov 30, 2005 Posts: 5 Location: Germany, Wiesbaden

Hello, the most common way to set up the Firewall so that an Administrator cant change settings is by Policy ( wether Group Policy or lokal policy ). First I would suggest running the RSOP from the mmc and find out if the Client reveives Policy settings. Open a new mmc by typing mmc under Start / RUN. After that add a new Snap In. RsOP and run it. In the Result look up the ComputerSettings \ Administratve Templates \ Network \ Network Conections\ Windows Firewall\ here you should look up the settings for Domain Profil or Standard Profile. If Settings are applied here corect them to what you desire and type gpupdate /force from the command line and Reboot your client.
If that does not work lookup the following Key in your Regsitry and delete it (!) HKLM\Software\Policies. By deleting the Policy Key, your Client will drop all Policy Settings applied. If you are in a Domain Invironment the will come Back after the next reboot (so dont worry). If you Firewall still does not work after deleting this key, your Problem is not relatet to GPO Settings. In this case contact me and I will help