Arrgh! SBS Server Sux
-
Gripe of the day. Have you ever had one of those weeks where you can't get anything done? This is one of those. Actually, the last several have been - it's getting pathological. I've got a Small Business Server 2003 box here at the house. I just had to reformat it a week or two ago. Anyway, after rebuilding it as the domain controller, the lovely thing turned on the firewalls on my two XP machines. Now, I have no connectivity to anything, and I can't figure out how to turn the firewall off (or at least allow myself to configure it on the workstations). I can go to the control panel applet, but apparently there is a group policy setting that is keeping me from changing any settings on it. I remember fixing this before, but I have absolutely no idea how I did it. I know security is needed (and is a good idea), but it really stinks that working computers are broken like this and are not fixable by obvious means. What would happen if I was trying to run a business out of the house (like I did at one time) and this thing took everything down for security? The sickest part of the irony is that I already have a hardware firewall (with no ports currently open to connections from outside), am using WPA and MAC address filtering on my wireless connection, a virus scanner, multiple spyware blockers, and I actually discovered the problem while trying to get SSH to work between machines. I even use PGP to encrypt sensitive files and never use IE/OE at all. Thank you Microsoft! I would have never gotten my network secure without you! It also helps that I still can't get SQLExpress to install on there either, since it says I'm not up to date on my Service Packs. I am, according to Windows Update, so somebody doesn't know what they are talking about.
-
Gripe of the day. Have you ever had one of those weeks where you can't get anything done? This is one of those. Actually, the last several have been - it's getting pathological. I've got a Small Business Server 2003 box here at the house. I just had to reformat it a week or two ago. Anyway, after rebuilding it as the domain controller, the lovely thing turned on the firewalls on my two XP machines. Now, I have no connectivity to anything, and I can't figure out how to turn the firewall off (or at least allow myself to configure it on the workstations). I can go to the control panel applet, but apparently there is a group policy setting that is keeping me from changing any settings on it. I remember fixing this before, but I have absolutely no idea how I did it. I know security is needed (and is a good idea), but it really stinks that working computers are broken like this and are not fixable by obvious means. What would happen if I was trying to run a business out of the house (like I did at one time) and this thing took everything down for security? The sickest part of the irony is that I already have a hardware firewall (with no ports currently open to connections from outside), am using WPA and MAC address filtering on my wireless connection, a virus scanner, multiple spyware blockers, and I actually discovered the problem while trying to get SSH to work between machines. I even use PGP to encrypt sensitive files and never use IE/OE at all. Thank you Microsoft! I would have never gotten my network secure without you! It also helps that I still can't get SQLExpress to install on there either, since it says I'm not up to date on my Service Packs. I am, according to Windows Update, so somebody doesn't know what they are talking about.
On each XP machine log on with Administrative rights. Use the method below or your own to view the running services. You can use the control panel to or a dozen others.
Start Menu -> Run -> "services.msc" then click [Ok].
In the list of services find "Windows ICF Firewall" or it might be "Windows Internet Connection Firewall" and set it to disabled then stop the service. You are done.
Some assembly required. Code-frog System Architects, Inc.
-
Gripe of the day. Have you ever had one of those weeks where you can't get anything done? This is one of those. Actually, the last several have been - it's getting pathological. I've got a Small Business Server 2003 box here at the house. I just had to reformat it a week or two ago. Anyway, after rebuilding it as the domain controller, the lovely thing turned on the firewalls on my two XP machines. Now, I have no connectivity to anything, and I can't figure out how to turn the firewall off (or at least allow myself to configure it on the workstations). I can go to the control panel applet, but apparently there is a group policy setting that is keeping me from changing any settings on it. I remember fixing this before, but I have absolutely no idea how I did it. I know security is needed (and is a good idea), but it really stinks that working computers are broken like this and are not fixable by obvious means. What would happen if I was trying to run a business out of the house (like I did at one time) and this thing took everything down for security? The sickest part of the irony is that I already have a hardware firewall (with no ports currently open to connections from outside), am using WPA and MAC address filtering on my wireless connection, a virus scanner, multiple spyware blockers, and I actually discovered the problem while trying to get SSH to work between machines. I even use PGP to encrypt sensitive files and never use IE/OE at all. Thank you Microsoft! I would have never gotten my network secure without you! It also helps that I still can't get SQLExpress to install on there either, since it says I'm not up to date on my Service Packs. I am, according to Windows Update, so somebody doesn't know what they are talking about.
gantww wrote:
so somebody doesn't know what they are talking about.
Yeah, you! - Anders
-
Gripe of the day. Have you ever had one of those weeks where you can't get anything done? This is one of those. Actually, the last several have been - it's getting pathological. I've got a Small Business Server 2003 box here at the house. I just had to reformat it a week or two ago. Anyway, after rebuilding it as the domain controller, the lovely thing turned on the firewalls on my two XP machines. Now, I have no connectivity to anything, and I can't figure out how to turn the firewall off (or at least allow myself to configure it on the workstations). I can go to the control panel applet, but apparently there is a group policy setting that is keeping me from changing any settings on it. I remember fixing this before, but I have absolutely no idea how I did it. I know security is needed (and is a good idea), but it really stinks that working computers are broken like this and are not fixable by obvious means. What would happen if I was trying to run a business out of the house (like I did at one time) and this thing took everything down for security? The sickest part of the irony is that I already have a hardware firewall (with no ports currently open to connections from outside), am using WPA and MAC address filtering on my wireless connection, a virus scanner, multiple spyware blockers, and I actually discovered the problem while trying to get SSH to work between machines. I even use PGP to encrypt sensitive files and never use IE/OE at all. Thank you Microsoft! I would have never gotten my network secure without you! It also helps that I still can't get SQLExpress to install on there either, since it says I'm not up to date on my Service Packs. I am, according to Windows Update, so somebody doesn't know what they are talking about.
If you log in to the server, run Administrative tools->Group Policy Manager. Expand the forrest, expand the domains, expand your domain eg mydom.local under there are the links to group policies that control the windows firewall and the internet connection firewall. right click the policy that you want to change and select edit. After a couple of message boxes warning about truncated strings, you can edit the system policies that affect all domain computers. ie in Computer Configuration, Administrative templates, Network, NetworkConnections, Windows Firewall
-
gantww wrote:
so somebody doesn't know what they are talking about.
Yeah, you! - Anders
-
gantww wrote:
so somebody doesn't know what they are talking about.
Yeah, you! - Anders
Ummm..... Looks like you were right. Thanks for making the smart-aleck comment. I tried to dig around on Microsoft's site to find something/anything to prove I knew what I was talking about (not the best way to go about it, admittedly, but it was before I'd had any caffeine this morning). Anyway, I know better now. Server's fixed. This is why I like bouncing ideas off in the Codeproject forums. I either get an answer or at least get told where my thinking is wrong. So, thanks. Now I can code instead of dealing with admin junk.