Group Policy is a ane of the most useful tools establish inward the Windows 2000 too after Active Directory infrastructure. Group Policy tin post away last used to fix File too Printer Sharing on all computers joined to the domain. If the estimator is joined to a domain, members of the Domain Admins grouping powerfulness last able to perform this procedure. The next representative uses Windows 2003 Server. The physical care for for 2008 is near precisely the same.
- Log on to your domain controller.
- Click Start, click Administrative Tools, too therefore click Active Directory Users too Computers.
Note |
You require to produce upward one's heed what grouping of machines your policy is going to last applied to. Some organizations volition receive got computers nether many unlike OUs. The simplest method is to alter the grouping policy for the entire domain. |
- Right-click on the domain shout too therefore click Properties
- Select the Group Policy tab
- Select the policy you lot desire to edit (In our representative it is the Default Domain Policy)
- Click edit.
- As this is a estimator policy (It volition apply to computers…not specific users), In the Group Policy Management Editor navigation pane, expand Computer Configuration, expand Administrative Templates, expand Network, expand Network Connections, too therefore expand Windows Firewall.
You volition reveal ii sections nether this area. Influenza A virus subtype H5N1 domain profile, too a criterion profile. Influenza A virus subtype H5N1 machine volition automatically produce upward one's heed which profile it should operate past times the type of network it is connected to. Microsoft defines it inward this way:
- Domain profile The domain profile is the fix of Windows Firewall settings that are needed when the estimator is connected to the managed network. For example, the domain profile powerfulness incorporate settings for excepted traffic for the applications too services needed past times a managed estimator inward an firm network.
- Standard profile The criterion profile is the fix of Windows Firewall settings that are needed when the estimator is connected to unopen to other network. Influenza A virus subtype H5N1 adept representative is when an arrangement laptop estimator is taken on the route too connects to the Internet using a populace broadband or wireless Internet service provider. Because the arrangement laptop estimator is straight connected to the Internet, the criterion profile should incorporate to a greater extent than restrictive settings than the domain profile.
Note |
For safety reasons, you lot should solely making these changes to the Domain Profile every bit you lot don’t desire users exterior the part to hookup to unopen to other network amongst their file too printer sharing fully accessible. |
- Expand Domain Profile
- In the details pane, double-click Windows Firewall: Allow file too printer sharing exception
- On the Setting tab, click Enabled.
- In Allow unsolicited incoming messages from, type *. This value allows whatsoever estimator to connect.
- Click OK to salve your changes.
After configuring an of import policy of unopen to kind, nosotros would sometimes similar GP processing to occur at in ane lawsuit on customer computers. The work is that past times default, the therefore called background processing “only” happens every ninety to 120 minutes (randomized) – if nosotros desire to strength updates to occur correct away nosotros are on our own.
Allow unopen to fourth dimension (90 to 120 minutes) for the grouping policy processing to occur on customer computers. To strength updates to occur correct away, you lot tin post away teach to the command occupation on the server too type:
GPUPDATE /force
To verify the policy is applied, teach to a workstation too banking company gibe the "Windows Firewall Settings" to run across that it has accepted the policy.