Windows XP Pro Windows Firewall in a Domain setting

Hey all,

Question,

We have XP Pro clients on our domain that are desktops and laptops. We have
the firewall settings turned off for all pcs and laptops via Group policy,
and i want to re enable them for the laptops. What is the best way to do
this? What i was thinking was creating a mobile users OU and have the
settings enabled there and keep the domain GP for everything else or is there
a GPO that the laptops will sense that they are not on the domain and switch
the firwall on automatically if the person is on there own home network?

any insigt would be great!

Jason

For XP SP2 you can configure separate firewall settings for computers that
are connected to the domain and for those domain computers that sense they
are not connected to the domain via Group Policy. This is done by
configuring the domain and standard profile where the standard profile is
for when the computer is not connected to the domain. The link below
explains in more detail. --- Steve

http://www.windowsecurity.com/articl...-Firewall.html

"Flames" <Flames@discussions.microsoft.com> wrote in message
news:0D10AB4D-BC2C-47A3-8CEE-7FEC94390D65@microsoft.com...
> Hey all,
>
> Question,
>
> We have XP Pro clients on our domain that are desktops and laptops. We
> have
> the firewall settings turned off for all pcs and laptops via Group policy,
> and i want to re enable them for the laptops. What is the best way to do
> this? What i was thinking was creating a mobile users OU and have the
> settings enabled there and keep the domain GP for everything else or is
> there
> a GPO that the laptops will sense that they are not on the domain and
> switch
> the firwall on automatically if the person is on there own home network?
>
> any insigt would be great!
>
> Jason

Thanks Steve!

"Steven L Umbach" wrote:

> For XP SP2 you can configure separate firewall settings for computers that
> are connected to the domain and for those domain computers that sense they
> are not connected to the domain via Group Policy. This is done by
> configuring the domain and standard profile where the standard profile is
> for when the computer is not connected to the domain. The link below
> explains in more detail. --- Steve
>
> http://www.windowsecurity.com/articl...-Firewall.html
>
> "Flames" <Flames@discussions.microsoft.com> wrote in message
> news:0D10AB4D-BC2C-47A3-8CEE-7FEC94390D65@microsoft.com...
> > Hey all,
> >
> > Question,
> >
> > We have XP Pro clients on our domain that are desktops and laptops. We
> > have
> > the firewall settings turned off for all pcs and laptops via Group policy,
> > and i want to re enable them for the laptops. What is the best way to do
> > this? What i was thinking was creating a mobile users OU and have the
> > settings enabled there and keep the domain GP for everything else or is
> > there
> > a GPO that the laptops will sense that they are not on the domain and
> > switch
> > the firwall on automatically if the person is on there own home network?
> >
> > any insigt would be great!
> >
> > Jason
>
>
>