<html dir="ltr" xmlns:v="urn:schemas-microsoft-com:vml" gpmc_reportInitialized="false">
<head>
<meta http-equiv="Content-Type" content="text/html; charset=UTF-16" />
<title>Disable Windows Firewall</title>
<!-- Styles -->
<style type="text/css">
                body    { background-color:#FFFFFF; border:1px solid #666666; color:#000000; font-size:68%; font-family:MS Shell Dlg; margin:0,0,10px,0; word-break:normal; word-wrap:break-word; }

                table   { font-size:100%; table-layout:fixed; width:100%; }

                td,th   { overflow:visible; text-align:left; vertical-align:top; white-space:normal; }

                .title  { background:#FFFFFF; border:none; color:#333333; display:block; height:24px; margin:0px,0px,-1px,0px; padding-top:4px; position:relative; table-layout:fixed; width:100%; z-index:5; }

                .he0_expanded    { background-color:#FEF7D6; border:1px solid #BBBBBB; color:#3333CC; cursor:hand; display:block; font-family:MS Shell Dlg; font-size:100%; font-weight:bold; height:2.25em; margin-bottom:-1px; margin-left:0px; margin-right:0px; padding-left:8px; padding-right:5em; padding-top:4px; position:relative; width:100%; }

                .he1_expanded    { background-color:#A0BACB; border:1px solid #BBBBBB; color:#000000; cursor:hand; display:block; font-family:MS Shell Dlg; font-size:100%; font-weight:bold; height:2.25em; margin-bottom:-1px; margin-left:10px; margin-right:0px; padding-left:8px; padding-right:5em; padding-top:4px; position:relative; width:100%; }

                .he1    { background-color:#A0BACB; border:1px solid #BBBBBB; color:#000000; cursor:hand; display:block; font-family:MS Shell Dlg; font-size:100%; font-weight:bold; height:2.25em; margin-bottom:-1px; margin-left:10px; margin-right:0px; padding-left:8px; padding-right:5em; padding-top:4px; position:relative; width:100%; }

                .he2    { background-color:#C0D2DE; border:1px solid #BBBBBB; color:#000000; cursor:hand; display:block; font-family:MS Shell Dlg; font-size:100%; font-weight:bold; height:2.25em; margin-bottom:-1px; margin-left:20px; margin-right:0px; padding-left:8px; padding-right:5em; padding-top:4px; position:relative; width:100%; }

                .he3    { background-color:#D9E3EA; border:1px solid #BBBBBB; color:#000000; cursor:hand; display:block; font-family:MS Shell Dlg; font-size:100%; font-weight:bold; height:2.25em; margin-bottom:-1px; margin-left:30px; margin-right:0px; padding-left:11px; padding-right:5em; padding-top:4px; position:relative; width:100%; }

                .he4    { background-color:#E8E8E8; border:1px solid #BBBBBB; color:#000000; cursor:hand; display:block; font-family:MS Shell Dlg; font-size:100%; font-weight:bold; height:2.25em; margin-bottom:-1px; margin-left:40px; margin-right:0px; padding-left:11px; padding-right:5em; padding-top:4px; position:relative; width:100%; }

                .he4h   { background-color:#E8E8E8; border:1px solid #BBBBBB; color:#000000; cursor:hand; display:block; font-family:MS Shell Dlg; font-size:100%; font-weight:bold; height:2.25em; margin-bottom:-1px; margin-left:45px; margin-right:0px; padding-left:11px; padding-right:5em; padding-top:4px; position:relative; width:100%; }

                .he4i   { background-color:#F9F9F9; border:1px solid #BBBBBB; color:#000000; display:block; font-family:MS Shell Dlg; font-size:100%; margin-bottom:-1px; margin-left:45px; margin-right:0px; padding-bottom:5px; padding-left:21px; padding-top:4px; position:relative; width:100%; }

                .he5    { background-color:#E8E8E8; border:1px solid #BBBBBB; color:#000000; cursor:hand; display:block; font-family:MS Shell Dlg; font-size:100%; font-weight:bold; height:2.25em; margin-bottom:-1px; margin-left:50px; margin-right:0px; padding-left:11px; padding-right:5em; padding-top:4px; position:relative; width:100%; }

                .he5h   { background-color:#E8E8E8; border:1px solid #BBBBBB; color:#000000; cursor:hand; display:block; font-family:MS Shell Dlg; font-size:100%; padding-left:11px; padding-right:5em; padding-top:4px; margin-bottom:-1px; margin-left:55px; margin-right:0px; position:relative; width:100%; }

                .he5i   { background-color:#F9F9F9; border:1px solid #BBBBBB; color:#000000; display:block; font-family:MS Shell Dlg; font-size:100%; margin-bottom:-1px; margin-left:55px; margin-right:0px; padding-left:21px; padding-bottom:5px; padding-top: 4px; position:relative; width:100%; }

                DIV .expando { color:#000000; text-decoration:none; display:block; font-family:MS Shell Dlg; font-size:100%; font-weight:normal; position:absolute; right:10px; text-decoration:underline; z-index: 0; }

                .he0 .expando { font-size:100%; }

                .info, .info3, .info4, .disalign  { line-height:1.6em; padding:0px,0px,0px,0px; margin:0px,0px,0px,0px; }

                .disalign TD                      { padding-bottom:5px; padding-right:10px; }

                .info TD                          { padding-right:10px; width:50%; }

                .info3 TD                         { padding-right:10px; width:33%; }

                .info4 TD, .info4 TH              { padding-right:10px; width:25%; }

                .info TH, .info3 TH, .info4 TH, .disalign TH { border-bottom:1px solid #CCCCCC; padding-right:10px; }

                .subtable, .subtable3             { border:1px solid #CCCCCC; margin-left:0px; background:#FFFFFF; margin-bottom:10px; }

                .subtable TD, .subtable3 TD       { padding-left:10px; padding-right:5px; padding-top:3px; padding-bottom:3px; line-height:1.1em; width:10%; }

                .subtable TH, .subtable3 TH       { border-bottom:1px solid #CCCCCC; font-weight:normal; padding-left:10px; line-height:1.6em;  }

                .subtable .footnote               { border-top:1px solid #CCCCCC; }

                .subtable3 .footnote, .subtable .footnote { border-top:1px solid #CCCCCC; }

                .subtable_frame     { background:#D9E3EA; border:1px solid #CCCCCC; margin-bottom:10px; margin-left:15px; }

                .subtable_frame TD  { line-height:1.1em; padding-bottom:3px; padding-left:10px; padding-right:15px; padding-top:3px; }

                .subtable_frame TH  { border-bottom:1px solid #CCCCCC; font-weight:normal; padding-left:10px; line-height:1.6em; }

                .subtableInnerHead { border-bottom:1px solid #CCCCCC; border-top:1px solid #CCCCCC; }

                .explainlink            { color:#000000; text-decoration:none; cursor:hand; }

                .explainlink:hover      { color:#0000FF; text-decoration:underline; }

                .spacer { background:transparent; border:1px solid #BBBBBB; color:#FFFFFF; display:block; font-family:MS Shell Dlg; font-size:100%; height:10px; margin-bottom:-1px; margin-left:43px; margin-right:0px; padding-top: 4px; position:relative; }

                .filler { background:transparent; border:none; color:#FFFFFF; display:block; font:100% MS Shell Dlg; line-height:8px; margin-bottom:-1px; margin-left:43px; margin-right:0px; padding-top:4px; position:relative; }

                .container { display:block; position:relative; }

                .rsopheader { background-color:#A0BACB; border-bottom:1px solid black; color:#333333; font-family:MS Shell Dlg; font-size:130%; font-weight:bold; padding-bottom:5px; text-align:center; }

                .rsopname { color:#333333; font-family:MS Shell Dlg; font-size:130%; font-weight:bold; padding-left:11px; }

                .gponame{ color:#333333; font-family:MS Shell Dlg; font-size:130%; font-weight:bold; padding-left:11px; }

                .gpotype{ color:#333333; font-family:MS Shell Dlg; font-size:100%; font-weight:bold; padding-left:11px; }

                #uri    { color:#333333; font-family:MS Shell Dlg; font-size:100%; padding-left:11px; }

                #dtstamp{ color:#333333; font-family:MS Shell Dlg; font-size:100%; padding-left:11px; text-align:left; width:30%; }

                #objshowhide { color:#000000; cursor:hand; font-family:MS Shell Dlg; font-size:100%; font-weight:bold; margin-right:0px; padding-right:10px; text-align:right; text-decoration:underline; z-index:2; word-wrap:normal; }

                #gposummary { display:block; }

                #gpoinformation { display:block; }

                @media print {

                    #objshowhide{ display:none; }

                    body    { color:#000000; border:1px solid #000000; }

                    .title  { color:#000000; border:1px solid #000000; }

                    .he0_expanded    { color:#000000; border:1px solid #000000; }

                    .he1_expanded    { color:#000000; border:1px solid #000000; }

                    .he1    { color:#000000; border:1px solid #000000; }

                    .he2    { color:#000000; background:#EEEEEE; border:1px solid #000000; }

                    .he3    { color:#000000; border:1px solid #000000; }

                    .he4    { color:#000000; border:1px solid #000000; }

                    .he4h   { color:#000000; border:1px solid #000000; }

                    .he4i   { color:#000000; border:1px solid #000000; }

                    .he5    { color:#000000; border:1px solid #000000; }

                    .he5h   { color:#000000; border:1px solid #000000; }

                    .he5i   { color:#000000; border:1px solid #000000; }

                    }

                    v\:* {behavior:url(#default#VML);}

</style>
<!-- Script 1 -->

<script language="vbscript">
<!--
'================================================================================
' String "strShowHide(0/1)"
' 0 = Hide all mode.
' 1 = Show all mode.
strShowHide = 1

'Localized strings
strShow = "show"
strHide = "hide"
strShowAll = "show all"
strHideAll = "hide all"
strShown = "shown"
strHidden = "hidden"
strExpandoNumPixelsFromEdge = "10px"


Function IsSectionHeader(obj)
    IsSectionHeader = (obj.className = "he0_expanded") Or (obj.className = "he1_expanded") Or (obj.className = "he1") Or (obj.className = "he2") Or (obj.className = "he3") Or (obj.className = "he4") Or (obj.className = "he4h") Or (obj.className = "he5") Or (obj.className = "he5h")
End Function


Function IsSectionExpandedByDefault(objHeader)
    IsSectionExpandedByDefault = (Right(objHeader.className, Len("_expanded")) = "_expanded")
End Function


' strState must be show | hide | toggle
Sub SetSectionState(objHeader, strState)
    ' Get the container object for the section.  It's the first one after the header obj.

    i = objHeader.sourceIndex
    Set all = objHeader.parentElement.document.all
    While (all(i).className <> "container")
        i = i + 1
    Wend

    Set objContainer = all(i)

    If strState = "toggle" Then
        If objContainer.style.display = "none" Then
            SetSectionState objHeader, "show"
        Else
            SetSectionState objHeader, "hide"
        End If

    Else
        Set objExpando = objHeader.children.item(1)

        If strState = "show" Then
            objContainer.style.display = "block"
            objExpando.innerText = strHide

        ElseIf strState = "hide" Then
            objContainer.style.display = "none"
            objExpando.innerText = strShow
        End If
    End If
End Sub


Sub ShowSection(objHeader)
    SetSectionState objHeader, "show"
End Sub


Sub HideSection(objHeader)
    SetSectionState objHeader, "hide"
End Sub


Sub ToggleSection(objHeader)
    SetSectionState objHeader, "toggle"
End Sub


'================================================================================
' When user clicks anywhere in the document body, determine if user is clicking 
' on a header element.
'================================================================================
Function document_onclick()
    Set strsrc    = window.event.srcElement

    While (strsrc.className = "sectionTitle" Or strsrc.className = "expando" Or strsrc.className = "vmlimage")
        Set strsrc = strsrc.parentElement
    Wend

    ' Only handle clicks on headers.
    If Not IsSectionHeader(strsrc) Then Exit Function

    ToggleSection strsrc
    
    window.event.returnValue = False
End Function

'================================================================================
' link at the top of the page to collapse/expand all collapsable elements
'================================================================================
Function objshowhide_onClick()
    Set objBody = document.body.all
    Select Case strShowHide
        Case 0
            strShowHide = 1
            objshowhide.innerText = strShowAll
            For Each obji In objBody
                If IsSectionHeader(obji) Then
                    HideSection obji
                End If
            Next
        Case 1
            strShowHide = 0
            objshowhide.innerText = strHideAll
            For Each obji In objBody
                If IsSectionHeader(obji) Then
                    ShowSection obji
                End If
            Next
    End Select
End Function

'================================================================================
' onload collapse all except the first two levels of headers (he0, he1)
'================================================================================
Function window_onload()
    ' Only initialize once.  The UI may reinsert a report into the webbrowser control,
    ' firing onLoad multiple times.
    If UCase(document.documentElement.getAttribute("gpmc_reportInitialized")) <> "TRUE" Then

        ' Initialize sections to default expanded/collapsed state.
        Set objBody = document.body.all

        For Each obji in objBody
            If IsSectionHeader(obji) Then
                If IsSectionExpandedByDefault(obji) Then
                    ShowSection obji
                Else
                    HideSection obji
                End If
            End If
        Next

        objshowhide.innerText = strShowAll
        
        document.documentElement.setAttribute "gpmc_reportInitialized", "true"
    End If
End Function

                


'================================================================================
' When direction (LTR/RTL) changes, change adjust for readability
'================================================================================
Function document_onPropertyChange()
    If window.event.propertyName = "dir" Then
        Call fDetDir(UCase(document.dir))
    End If
End Function
Function fDetDir(strDir)
    strDir = UCase(strDir)
    Select Case strDir
        Case "LTR"
            Set colRules = document.styleSheets(0).rules
            For i = 0 To colRules.length -1
                Set nug = colRules.item(i)
                strClass = nug.selectorText 
                If nug.style.textAlign = "right" Then
                    nug.style.textAlign = "left"
                End If
                Select Case strClass
                    Case "DIV .expando"
                        nug.style.Left = ""
                        nug.style.right = strExpandoNumPixelsFromEdge
                    Case "#objshowhide"
                        nug.style.textAlign = "right"
                End Select
            Next
        Case "RTL"
            Set colRules = document.styleSheets(0).rules
            For i = 0 To colRules.length -1
                Set nug = colRules.item(i)
                strClass = nug.selectorText 
                If nug.style.textAlign = "left" Then
                    nug.style.textAlign = "right"
                End If
                Select Case strClass
                    Case "DIV .expando"
                        nug.style.Left = strExpandoNumPixelsFromEdge
                        nug.style.right = ""
                    Case "#objshowhide"
                        nug.style.textAlign = "left"
                End Select
            Next
    End Select
End Function

'================================================================================
'When printing reports, if a given section is expanded, let's says "shown" (instead of "hide" in the UI). 
'================================================================================
Function window_onbeforeprint()
    For Each obji In document.all
        If obji.className = "expando" Then
            If obji.innerText = strHide Then obji.innerText = strShown
            If obji.innerText = strShow Then obji.innerText = strHidden
        End If
    Next
End Function 

'================================================================================
'If a section is collapsed, change to "hidden" in the printout (instead of "show").
'================================================================================
Function window_onafterprint()
    For Each obji In document.all
        If obji.className = "expando" Then
            If obji.innerText = strShown Then obji.innerText = strHide
            If obji.innerText = strHidden Then obji.innerText = strShow
        End If
    Next
End Function

'================================================================================
' Adding keypress support for accessibility
'================================================================================
Function document_onKeyPress()
    If window.event.keyCode = "32" Or window.event.keyCode = "13" Or window.event.keyCode = "10" Then 'space bar (32) or carriage return (13) or line feed (10)
        If window.event.srcElement.className = "expando" Then Call document_onclick() : window.event.returnValue = false
        If window.event.srcElement.className = "sectionTitle" Then Call document_onclick() : window.event.returnValue = false
        If window.event.srcElement.id = "objshowhide" Then Call objshowhide_onClick() : window.event.returnValue = false
    End If
End Function
                
-->
</script>
                
<!-- Script 2 -->

<script language="javascript">
<!--
function getExplainWindowTitle()
{
        return document.getElementById("explainText_windowTitle").innerHTML;
}

function getExplainWindowStyles()
{
        return document.getElementById("explainText_windowStyles").innerHTML;
}

function getExplainWindowSettingPathLabel()
{
        return document.getElementById("explainText_settingPathLabel").innerHTML;
}

function getExplainWindowExplainTextLabel()
{
        return document.getElementById("explainText_explainTextLabel").innerHTML;
}

function getExplainWindowPrintButton()
{
        return document.getElementById("explainText_printButton").innerHTML;
}

function getExplainWindowCloseButton()
{
        return document.getElementById("explainText_closeButton").innerHTML;
}

function getNoExplainTextAvailable()
{
        return document.getElementById("explainText_noExplainTextAvailable").innerHTML;
}

function getExplainWindowSupportedLabel()
{
        return document.getElementById("explainText_supportedLabel").innerHTML;
}

function getNoSupportedTextAvailable()
{
        return document.getElementById("explainText_noSupportedTextAvailable").innerHTML;
}

function showExplainText(srcElement)
{
    var strSettingName = srcElement.getAttribute("gpmc_settingName");
    var strSettingPath = srcElement.getAttribute("gpmc_settingPath");
    var strSettingDescription = srcElement.getAttribute("gpmc_settingDescription");
    
    if (strSettingDescription == "")
    {
                strSettingDescription = getNoExplainTextAvailable();
    }
    
    var strSupported = srcElement.getAttribute("gpmc_supported");

    if (strSupported == "")
    {
        strSupported = getNoSupportedTextAvailable();
    }

    var strHtml = "<html>\n";
    strHtml += "<head>\n";
    strHtml += "<title>" + getExplainWindowTitle() + "</title>\n";
    strHtml += "<style type='text/css'>\n" + getExplainWindowStyles() + "</style>\n";
    strHtml += "</head>\n";
    strHtml += "<body>\n";
    strHtml += "<div class='head'>" + strSettingName +"</div>\n";
    strHtml += "<div class='path'><b>" + getExplainWindowSettingPathLabel() + "</b><br/>" + strSettingPath +"</div>\n";
    strHtml += "<div class='path'><b>" + getExplainWindowSupportedLabel() + "</b><br/>" + strSupported +"</div>\n";
    strHtml += "<div class='info'>\n";
    strHtml += "<div class='hdr'>" + getExplainWindowExplainTextLabel() + "</div>\n";
    strHtml += "<div class='bdy'>" + strSettingDescription + "</div>\n";
    strHtml += "<div class='btn'>";
    strHtml += getExplainWindowPrintButton();
    strHtml += getExplainWindowCloseButton();
    strHtml += "</div></body></html>";

    var strDiagArgs = "height=360px, width=630px, status=no, toolbar=no, scrollbars=yes, resizable=yes ";
    var expWin = window.open("", "expWin", strDiagArgs);
    expWin.document.write("");
    expWin.document.close();
    expWin.document.write(strHtml);
    expWin.document.close();
    expWin.focus();
    
    //cancels navigation for IE.
    if(navigator.userAgent.indexOf("MSIE") > 0)
    {
        window.event.returnValue = false;
    }
    
    return false;
}
-->
</script>
                
</head>

<body>

<!-- HTML resources -->
<div style="display:none;">
        <div id="explainText_windowTitle">Group Policy Management</div>
        <div id="explainText_windowStyles">
        
                            body  { font-size:68%;font-family:MS Shell Dlg; margin:0px,0px,0px,0px; border: 1px solid #666666; background:#F6F6F6; width:100%; word-break:normal; word-wrap:break-word; }

                            .head { font-weight:bold; font-size:160%; font-family:MS Shell Dlg; width:100%; color:#6587DC; background:#E3EAF9; border:1px solid #5582D2; padding-left:8px; height:24px; }

                            .path { margin-left: 10px; margin-top: 10px; margin-bottom:5px;width:100%; }

                            .info { padding-left:10px;width:100%; }

                            table { font-size:100%; width:100%; border:1px solid #999999; }

                            th    { border-bottom:1px solid #999999; text-align:left; padding-left:10px; height:24px; }

                            td    { background:#FFFFFF; padding-left:10px; padding-bottom:10px; padding-top:10px; }

                            .btn  { width:100%; text-align:right; margin-top:16px; }

                            .hdr  { font-weight:bold; border:1px solid #999999; text-align:left; padding-top: 4px; padding-left:10px; height:24px; margin-bottom:-1px; width:100%; }

                            .bdy  { width:100%; height:182px; display:block; overflow:scroll; z-index:2; background:#FFFFFF; padding-left:10px; padding-bottom:10px; padding-top:10px; border:1px solid #999999; }

                            button { width:6.9em; height:2.1em; font-size:100%; font-family:MS Shell Dlg; margin-right:15px; }

                            @media print {

                                .bdy { display:block; overflow:visible; }

                                button { display:none; }

                                .head { color:#000000; background:#FFFFFF; border:1px solid #000000; }

                            }

                
        </div>
        <div id="explainText_settingPathLabel">Setting Path:</div>
        <div id="explainText_explainTextLabel">Explanation</div>
        <div id="explainText_printButton">
        <button name="Print" onClick="window.print()" accesskey="P"><u>P</u>rint</button>

                </div>
        <div id="explainText_closeButton">
        <button name="Close" onClick="window.close()" accesskey="C"><u>C</u>lose</button>
                
        </div>
        <div id="explainText_noExplainTextAvailable">No explanation is available for this setting.</div>
        <div id="explainText_supportedLabel">Supported On:</div>
        <div id="explainText_noSupportedTextAvailable">Not available</div>
</div><table class="title" cellpadding="0" cellspacing="0">
<tr><td colspan="2" class="gponame">Disable Windows Firewall</td></tr>
<tr>
    <td id="dtstamp">Data collected on: 8/30/2006 2:13:52 PM</td>
    <td><div id="objshowhide" tabindex="0"></div></td>
</tr>
</table>

<div class="gposummary">
<div class="he0_expanded"><span class="sectionTitle" tabindex="0">General</span><a class="expando" href="#"></a></div>
<div class="container"><div class="he1"><span class="sectionTitle" tabindex="0">Details</span><a class="expando" href="#"></a></div>
<div class="container"><div class="he4i"><table class="info" cellpadding="0" cellspacing="0">
<tr><td scope="row">Domain</td><td>netid.washington.edu</td></tr>
<tr><td scope="row">Owner</td><td>NETID\Domain Admins</td></tr>
<tr><td scope="row">Created</td><td>7/3/2006 12:09:28 PM</td></tr>
<tr><td scope="row">Modified</td><td>7/3/2006 12:09:46 PM</td></tr>
<tr><td scope="row">User Revisions</td><td>1 (AD), 1 (sysvol)</td></tr>
<tr><td scope="row">Computer Revisions</td><td>1 (AD), 1 (sysvol)</td></tr>
<tr><td scope="row">Unique ID</td><td>{F4503B12-17D2-4A8B-BD8A-D200D58BAD0D}</td></tr>
<tr><td scope="row">GPO Status</td><td>Enabled</td></tr>
</table></div></div>
<div class="filler"></div>
<div class="he1"><span class="sectionTitle" tabindex="0">Links</span><a class="expando" href="#"></a></div>
<div class="container"><div class="he4i"><table class="info3" cellpadding="0" cellspacing="0"><tr><th scope="col">Location</th><th scope="col">Enforced</th><th scope="col">Link Status</th><th scope="col">Path</th></tr>
<tr><td>Domain Controllers</td><td>No</td><td>Enabled</td><td>netid.washington.edu/Domain Controllers</td></tr>
<tr><td>Unclaimed Computers</td><td>No</td><td>Enabled</td><td>netid.washington.edu/Unclaimed Computers</td></tr>
</table>
<br/>This list only includes links in the domain of the GPO.</div></div>
<div class="filler"></div>
<div class="he1"><span class="sectionTitle" tabindex="0">Security Filtering</span><a class="expando" href="#"></a></div>
<div class="container"><div class="he4i"><b>The settings in this GPO can only apply to the following groups, users, and computers:</b></div>
<div class="he4i">
<table class="info" cellpadding="0" cellspacing="0">
<tr><th scope="col">Name</th></tr><tr><td>NT AUTHORITY\Authenticated Users</td></tr></table>
</div>
</div>
<div class="filler"></div>
<div class="he1"><span class="sectionTitle" tabindex="0">WMI Filtering</span><a class="expando" href="#"></a></div>
<div class="container"><div class="he4i"><table class="info" cellpadding="0" cellspacing="0">
<tr><td scope="row"><b>WMI Filter Name</b></td><td>None</td></tr>
<tr><td scope="row"><b>Description</b></td><td>Not applicable</td></tr>
</table></div></div>
<div class="filler"></div>
<div class="he1"><span class="sectionTitle" tabindex="0">Delegation</span><a class="expando" href="#"></a></div>
<div class="container"><div class="he4i"><b>These groups and users have the specified permission for this GPO</b></div>
<div class="he4i">
<table class="info3" cellpadding="0" cellspacing="0">
<tr><th scope="col">Name</th><th scope="col">Allowed Permissions</th><th scope="col">Inherited</th></tr>
<tr><td>NETID\Domain Admins</td><td>Edit settings, delete, modify security</td><td>No</td></tr>
<tr><td>NETID\Enterprise Admins</td><td>Edit settings, delete, modify security</td><td>No</td></tr>
<tr><td>NT AUTHORITY\Authenticated Users</td><td>Read (from Security Filtering)</td><td>No</td></tr>
<tr><td>NT AUTHORITY\ENTERPRISE DOMAIN CONTROLLERS</td><td>Read</td><td>No</td></tr>
<tr><td>NT AUTHORITY\SYSTEM</td><td>Edit settings, delete, modify security</td><td>No</td></tr>
</table>

</div></div></div>
<div class="filler"></div>
</div>
<div class="he0_expanded"><span class="sectionTitle" tabindex="0">Computer Configuration (Enabled)</span><a class="expando" href="#"></a></div>
<div class="container"><div class="he1_expanded"><span class="sectionTitle" tabindex="0">Administrative Templates</span><a class="expando" href="#"></a></div>
<div class="container"><div class="he3"><span class="sectionTitle" tabindex="0">Network/Network Connections</span><a class="expando" href="#"></a></div>
<div class="container"><div class="he4i"><table class="info" cellpadding="0" cellspacing="0">
<tr><th scope="col">Policy</th><th scope="col">Setting</th></tr>
<tr><td><a class="explainlink" href="javascript:void();" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Prohibit use of Internet Connection Firewall on your DNS domain network" gpmc_settingPath="Computer Configuration/Administrative Templates/Network/Network Connections" gpmc_settingDescription="Prohibits use of Internet Connection Firewall on your DNS domain network.&lt;br/&gt;&lt;br/&gt;Determines whether users can enable the Internet Connection Firewall feature on a connection, and if the Internet Connection Firewall service can run on a computer.&lt;br/&gt;&lt;br/&gt;Important: This setting is location aware. It only applies when a computer is connected to the same DNS domain network it was connected to when the setting was refreshed on that computer. If a computer is connected to a DNS domain network other than the one it was connected to when the setting was refreshed, this setting does not apply.&lt;br/&gt;&lt;br/&gt;The Internet Connection Firewall is a stateful packet filter for home and small office users to protect them from Internet network security threats.&lt;br/&gt;&lt;br/&gt;If you enable this setting, Internet Connection Firewall cannot be enabled or configured by users (including administrators), and the Internet Connection Firewall service cannot run on the computer. The option to enable the Internet Connection Firewall through the Advanced tab is removed. In addition, the Internet Connection Firewall is not enabled for remote access connections created through the Make New Connection Wizard. The Network Setup Wizard is disabled.&lt;br/&gt;&lt;br/&gt;Note: If you enable the &amp;quot;Windows Firewall: Protect all network connections&amp;quot; policy setting, the &amp;quot;Prohibit use of Internet Connection Firewall on your DNS domain network&amp;quot; policy setting has no effect on computers that are running Windows Firewall, which replaces Internet Connection Firewall when you install Windows XP Service Pack 2.&lt;br/&gt;&lt;br/&gt;If you disable this setting or do not configure it, the Internet Connection Firewall is disabled when a LAN Connection or VPN connection is created, but users can use the Advanced tab in the connection properties to enable it. The Internet Connection Firewall is enabled by default on the connection for which Internet Connection Sharing is enabled. In addition, remote access connections created through the Make New Connection Wizard have the Internet Connection Firewall enabled." gpmc_supported="At least Microsoft Windows XP Professional or Windows Server 2003 family">Prohibit use of Internet Connection Firewall on your DNS domain network</a></td><td>Enabled</td></tr>
</table>
</div></div><div class="he3"><span class="sectionTitle" tabindex="0">Network/Network Connections/Windows Firewall/Domain Profile</span><a class="expando" href="#"></a></div>
<div class="container"><div class="he4i"><table class="info" cellpadding="0" cellspacing="0">
<tr><th scope="col">Policy</th><th scope="col">Setting</th></tr>
<tr><td><a class="explainlink" href="javascript:void();" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Windows Firewall: Allow local port exceptions" gpmc_settingPath="Computer Configuration/Administrative Templates/Network/Network Connections/Windows Firewall/Domain Profile" gpmc_settingDescription="Allows administrators to use the Windows Firewall component in Control Panel to define a local port exceptions list. Windows Firewall uses two port exceptions lists; the other is defined by the &amp;quot;Windows Firewall: Define port exceptions&amp;quot; policy setting.&lt;br/&gt;&lt;br/&gt;If you enable this policy setting, the Windows Firewall component in Control Panel allows administrators to define a local port exceptions list.&lt;br/&gt;&lt;br/&gt;If you disable this policy setting, the Windows Firewall component in Control Panel does not allow administrators to define a local port exceptions list.&lt;br/&gt;&lt;br/&gt;If you do not configure this policy setting, the ability of administrators to define a local port exceptions list depends on the configuration of the &amp;quot;Windows Firewall: Define port exceptions&amp;quot; policy setting. If that setting is not configured, administrators can define a local port exceptions list. If it is enabled or disabled, administrators cannot define a local port exceptions list." gpmc_supported="At least Microsoft Windows XP Professional with SP2">Windows Firewall: Allow local port exceptions</a></td><td>Disabled</td></tr>
<tr><td><a class="explainlink" href="javascript:void();" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Windows Firewall: Allow local program exceptions" gpmc_settingPath="Computer Configuration/Administrative Templates/Network/Network Connections/Windows Firewall/Domain Profile" gpmc_settingDescription="Allows administrators to use the Windows Firewall component in Control Panel to define a local program exceptions list. Windows Firewall uses two program exceptions lists; the other is defined by the &amp;quot;Windows Firewall: Define program exceptions&amp;quot; policy setting.&lt;br/&gt;&lt;br/&gt;If you enable this policy setting, the Windows Firewall component in Control Panel allows administrators to define a local program exceptions list.&lt;br/&gt;&lt;br/&gt;If you disable this policy setting, the Windows Firewall component in Control Panel does not allow administrators to define a local program exceptions list.&lt;br/&gt;&lt;br/&gt;If you do not configure this policy setting, the ability of administrators to define a local program exceptions list depends on the configuration of the &amp;quot;Windows Firewall: Define program exceptions&amp;quot; policy setting. If that setting is not configured, administrators can define a local program exceptions list. If it is enabled or disabled, administrators cannot define a local program exceptions list." gpmc_supported="At least Microsoft Windows XP Professional with SP2">Windows Firewall: Allow local program exceptions</a></td><td>Disabled</td></tr>
<tr><td><a class="explainlink" href="javascript:void();" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Windows Firewall: Allow remote administration exception" gpmc_settingPath="Computer Configuration/Administrative Templates/Network/Network Connections/Windows Firewall/Domain Profile" gpmc_settingDescription="Allows remote administration of this computer using administrative tools such as the Microsoft Management Console (MMC) and Windows Management Instrumentation (WMI). To do this, Windows Firewall opens TCP ports 135 and 445. Services typically use these ports to communicate using remote procedure calls (RPC) and Distributed Component Object Model (DCOM). This policy setting also allows SVCHOST.EXE and LSASS.EXE to receive unsolicited incoming messages and allows hosted services to open additional dynamically-assigned ports, typically in the range of 1024 to 1034.&lt;br/&gt;&lt;br/&gt;If you enable this policy setting, Windows Firewall allows the computer to receive the unsolicited incoming messages associated with remote administration. You must specify the IP addresses or subnets from which these incoming messages are allowed.&lt;br/&gt;&lt;br/&gt;If you disable or do not configure this policy setting, Windows Firewall does not open TCP port 135 or 445. Also, Windows Firewall prevents SVCHOST.EXE and LSASS.EXE from receiving unsolicited incoming messages, and prevents hosted services from opening additional dynamically-assigned ports. Because disabling this policy setting does not block TCP port 445, it does not conflict with the &amp;quot;Windows Firewall: Allow file and printer sharing exception&amp;quot; policy setting.&lt;br/&gt;&lt;br/&gt;Note: Malicious users often attempt to attack networks and computers using RPC and DCOM. We recommend that you contact the manufacturers of your critical programs to determine if they are hosted by SVCHOST.exe or LSASS.exe or if they require RPC and DCOM communication. If they do not, then do not enable this policy setting.&lt;br/&gt;&lt;br/&gt;Note: If any policy setting opens TCP port 445, Windows Firewall allows inbound ICMP echo request messages (the message sent by the Ping utility), even if the &amp;quot;Windows Firewall: Allow ICMP exceptions&amp;quot; policy setting would block them. Policy settings that can open TCP port 445 include &amp;quot;Windows Firewall: Allow file and printer sharing exception,&amp;quot; &amp;quot;Windows Firewall: Allow remote administration exception,&amp;quot; and &amp;quot;Windows Firewall: Define port exceptions.&amp;quot;" gpmc_supported="At least Microsoft Windows XP Professional with SP2">Windows Firewall: Allow remote administration exception</a></td><td>Enabled</td></tr>
<tr><td colspan="2"><table class="subtable_frame" cellpadding="0" cellspacing="0">
<tr><td>Allow unsolicited incoming messages from:</td><td>*</td></tr>
<tr><td colspan="2">Syntax:</td></tr><tr><td colspan="2">Type &quot;*&quot; to allow messages from any network, or</td></tr><tr><td colspan="2">else type a comma-separated list that contains</td></tr><tr><td colspan="2">any number or combination of these:</td></tr><tr><td colspan="2">   IP addresses, such as 10.0.0.1</td></tr><tr><td colspan="2">   Subnet descriptions, such as 10.2.3.0/24</td></tr><tr><td colspan="2">   The string &quot;localsubnet&quot;</td></tr><tr><td colspan="2">Example: to allow messages from 10.0.0.1,</td></tr><tr><td colspan="2">10.0.0.2, and from any system on the</td></tr><tr><td colspan="2">local subnet or on the 10.3.4.x subnet,</td></tr><tr><td colspan="2">type the following:</td></tr><tr><td colspan="2">  10.0.0.1,10.0.0.2,localsubnet,10.3.4.0/24</td></tr></table></td></tr><tr><th scope="col">Policy</th><th scope="col">Setting</th></tr>
<tr><td><a class="explainlink" href="javascript:void();" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Windows Firewall: Allow Remote Desktop exception" gpmc_settingPath="Computer Configuration/Administrative Templates/Network/Network Connections/Windows Firewall/Domain Profile" gpmc_settingDescription="Allows this computer to receive Remote Desktop requests. To do this, Windows Firewall opens TCP port 3389. &lt;br/&gt;&lt;br/&gt;If you enable this policy setting, Windows Firewall opens this port so that this computer can receive Remote Desktop requests. You must specify the IP addresses or subnets from which these incoming messages are allowed. In the Windows Firewall component of Control Panel, the &amp;quot;Remote Desktop&amp;quot; check box is selected and administrators cannot clear it. &lt;br/&gt;&lt;br/&gt;If you disable this policy setting, Windows Firewall blocks this port, which prevents this computer from receiving Remote Desktop requests. If an administrator attempts to open this port by adding it to a local port exceptions list, Windows Firewall does not open the port. In the Windows Firewall component of Control Panel, the &amp;quot;Remote Desktop&amp;quot; check box is cleared and administrators cannot select it.&lt;br/&gt;&lt;br/&gt;If you do not configure this policy setting, Windows Firewall does not open this port. Therefore, the computer cannot receive Remote Desktop requests unless an administrator uses other policy settings to open the port. In the Windows Firewall component of Control Panel, the &amp;quot;Remote Desktop&amp;quot; check box is cleared. Administrators can change this check box." gpmc_supported="At least Microsoft Windows XP Professional with SP2">Windows Firewall: Allow Remote Desktop exception</a></td><td>Enabled</td></tr>
<tr><td colspan="2"><table class="subtable_frame" cellpadding="0" cellspacing="0">
<tr><td>Allow unsolicited incoming messages from:</td><td>*</td></tr>
<tr><td colspan="2">Syntax:</td></tr><tr><td colspan="2">Type &quot;*&quot; to allow messages from any network, or</td></tr><tr><td colspan="2">else type a comma-separated list that contains</td></tr><tr><td colspan="2">any number or combination of these:</td></tr><tr><td colspan="2">   IP addresses, such as 10.0.0.1</td></tr><tr><td colspan="2">   Subnet descriptions, such as 10.2.3.0/24</td></tr><tr><td colspan="2">   The string &quot;localsubnet&quot;</td></tr><tr><td colspan="2">Example: to allow messages from 10.0.0.1,</td></tr><tr><td colspan="2">10.0.0.2, and from any system on the</td></tr><tr><td colspan="2">local subnet or on the 10.3.4.x subnet,</td></tr><tr><td colspan="2">type the following:</td></tr><tr><td colspan="2">  10.0.0.1,10.0.0.2,localsubnet,10.3.4.0/24</td></tr></table></td></tr><tr><th scope="col">Policy</th><th scope="col">Setting</th></tr>
<tr><td><a class="explainlink" href="javascript:void();" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Windows Firewall: Do not allow exceptions" gpmc_settingPath="Computer Configuration/Administrative Templates/Network/Network Connections/Windows Firewall/Domain Profile" gpmc_settingDescription="Specifies that Windows Firewall blocks all unsolicited incoming messages. This policy setting overrides all other Windows Firewall policy settings that allow such messages.&lt;br/&gt;&lt;br/&gt;If you enable this policy setting, in the Windows Firewall component of Control Panel, the &amp;quot;Don't allow exceptions&amp;quot; check box is selected and administrators cannot clear it. You should also enable the &amp;quot;Windows Firewall: Protect all network connections&amp;quot; policy setting; otherwise, administrators who log on locally can work around the &amp;quot;Windows Firewall: Do not allow exceptions&amp;quot; policy setting by turning off the firewall.&lt;br/&gt;&lt;br/&gt;If you disable this policy setting, Windows Firewall applies other policy settings that allow unsolicited incoming messages. In the Windows Firewall component of Control Panel, the &amp;quot;Don't allow exceptions&amp;quot; check box is cleared and administrators cannot select it.&lt;br/&gt;&lt;br/&gt;If you do not configure this policy setting, Windows Firewall applies other policy settings that allow unsolicited incoming messages. In the Windows Firewall component of Control Panel, the &amp;quot;Don't allow exceptions&amp;quot; check box is cleared by default, but administrators can change it." gpmc_supported="At least Microsoft Windows XP Professional with SP2">Windows Firewall: Do not allow exceptions</a></td><td>Enabled</td></tr>
<tr><td><a class="explainlink" href="javascript:void();" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Windows Firewall: Protect all network connections" gpmc_settingPath="Computer Configuration/Administrative Templates/Network/Network Connections/Windows Firewall/Domain Profile" gpmc_settingDescription="Turns on Windows Firewall, which replaces Internet Connection Firewall on all computers that are running Windows XP Service Pack 2.&lt;br/&gt;&lt;br/&gt;If you enable this policy setting, Windows Firewall runs and ignores the &amp;quot;Computer Configuration\Administrative Templates\Network\Network Connections\Prohibit use of Internet Connection Firewall on your DNS domain network&amp;quot; policy setting.&lt;br/&gt;&lt;br/&gt;If you disable this policy setting, Windows Firewall does not run. This is the only way to ensure that Windows Firewall does not run and administrators who log on locally cannot start it.&lt;br/&gt;&lt;br/&gt;If you do not configure this policy setting, administrators can use the Windows Firewall component in Control Panel to turn Windows Firewall on or off, unless the &amp;quot;Prohibit use of Internet Connection Firewall on your DNS domain network&amp;quot; policy setting overrides." gpmc_supported="At least Microsoft Windows XP Professional with SP2">Windows Firewall: Protect all network connections</a></td><td>Disabled</td></tr>
</table>
</div></div><div class="he3"><span class="sectionTitle" tabindex="0">Network/Network Connections/Windows Firewall/Standard Profile</span><a class="expando" href="#"></a></div>
<div class="container"><div class="he4i"><table class="info" cellpadding="0" cellspacing="0">
<tr><th scope="col">Policy</th><th scope="col">Setting</th></tr>
<tr><td><a class="explainlink" href="javascript:void();" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Windows Firewall: Allow local port exceptions" gpmc_settingPath="Computer Configuration/Administrative Templates/Network/Network Connections/Windows Firewall/Standard Profile" gpmc_settingDescription="Allows administrators to use the Windows Firewall component in Control Panel to define a local port exceptions list. Windows Firewall uses two port exceptions lists; the other is defined by the &amp;quot;Windows Firewall: Define port exceptions&amp;quot; policy setting.&lt;br/&gt;&lt;br/&gt;If you enable this policy setting, the Windows Firewall component in Control Panel allows administrators to define a local port exceptions list.&lt;br/&gt;&lt;br/&gt;If you disable this policy setting, the Windows Firewall component in Control Panel does not allow administrators to define a local port exceptions list.&lt;br/&gt;&lt;br/&gt;If you do not configure this policy setting, the ability of administrators to define a local port exceptions list depends on the configuration of the &amp;quot;Windows Firewall: Define port exceptions&amp;quot; policy setting. If that setting is not configured, administrators can define a local port exceptions list. If it is enabled or disabled, administrators cannot define a local port exceptions list." gpmc_supported="At least Microsoft Windows XP Professional with SP2">Windows Firewall: Allow local port exceptions</a></td><td>Disabled</td></tr>
<tr><td><a class="explainlink" href="javascript:void();" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Windows Firewall: Allow local program exceptions" gpmc_settingPath="Computer Configuration/Administrative Templates/Network/Network Connections/Windows Firewall/Standard Profile" gpmc_settingDescription="Allows administrators to use the Windows Firewall component in Control Panel to define a local program exceptions list. Windows Firewall uses two program exceptions lists; the other is defined by the &amp;quot;Windows Firewall: Define program exceptions&amp;quot; policy setting.&lt;br/&gt;&lt;br/&gt;If you enable this policy setting, the Windows Firewall component in Control Panel allows administrators to define a local program exceptions list.&lt;br/&gt;&lt;br/&gt;If you disable this policy setting, the Windows Firewall component in Control Panel does not allow administrators to define a local program exceptions list.&lt;br/&gt;&lt;br/&gt;If you do not configure this policy setting, the ability of administrators to define a local program exceptions list depends on the configuration of the &amp;quot;Windows Firewall: Define program exceptions&amp;quot; policy setting. If that setting is not configured, administrators can define a local program exceptions list. If it is enabled or disabled, administrators cannot define a local program exceptions list." gpmc_supported="At least Microsoft Windows XP Professional with SP2">Windows Firewall: Allow local program exceptions</a></td><td>Disabled</td></tr>
<tr><td><a class="explainlink" href="javascript:void();" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Windows Firewall: Allow remote administration exception" gpmc_settingPath="Computer Configuration/Administrative Templates/Network/Network Connections/Windows Firewall/Standard Profile" gpmc_settingDescription="Allows remote administration of this computer using administrative tools such as the Microsoft Management Console (MMC) and Windows Management Instrumentation (WMI). To do this, Windows Firewall opens TCP ports 135 and 445. Services typically use these ports to communicate using remote procedure calls (RPC) and Distributed Component Object Model (DCOM). This policy setting also allows SVCHOST.EXE and LSASS.EXE to receive unsolicited incoming messages and allows hosted services to open additional dynamically-assigned ports, typically in the range of 1024 to 1034.&lt;br/&gt;&lt;br/&gt;If you enable this policy setting, Windows Firewall allows the computer to receive the unsolicited incoming messages associated with remote administration. You must specify the IP addresses or subnets from which these incoming messages are allowed.&lt;br/&gt;&lt;br/&gt;If you disable or do not configure this policy setting, Windows Firewall does not open TCP port 135 or 445. Also, Windows Firewall prevents SVCHOST.EXE and LSASS.EXE from receiving unsolicited incoming messages, and prevents hosted services from opening additional dynamically-assigned ports. Because disabling this policy setting does not block TCP port 445, it does not conflict with the &amp;quot;Windows Firewall: Allow file and printer sharing exception&amp;quot; policy setting.&lt;br/&gt;&lt;br/&gt;Note: Malicious users often attempt to attack networks and computers using RPC and DCOM. We recommend that you contact the manufacturers of your critical programs to determine if they are hosted by SVCHOST.exe or LSASS.exe or if they require RPC and DCOM communication. If they do not, then do not enable this policy setting.&lt;br/&gt;&lt;br/&gt;Note: If any policy setting opens TCP port 445, Windows Firewall allows inbound ICMP echo request messages (the message sent by the Ping utility), even if the &amp;quot;Windows Firewall: Allow ICMP exceptions&amp;quot; policy setting would block them. Policy settings that can open TCP port 445 include &amp;quot;Windows Firewall: Allow file and printer sharing exception,&amp;quot; &amp;quot;Windows Firewall: Allow remote administration exception,&amp;quot; and &amp;quot;Windows Firewall: Define port exceptions.&amp;quot;" gpmc_supported="At least Microsoft Windows XP Professional with SP2">Windows Firewall: Allow remote administration exception</a></td><td>Enabled</td></tr>
<tr><td colspan="2"><table class="subtable_frame" cellpadding="0" cellspacing="0">
<tr><td>Allow unsolicited incoming messages from:</td><td>*</td></tr>
<tr><td colspan="2">Syntax:</td></tr><tr><td colspan="2">Type &quot;*&quot; to allow messages from any network, or</td></tr><tr><td colspan="2">else type a comma-separated list that contains</td></tr><tr><td colspan="2">any number or combination of these:</td></tr><tr><td colspan="2">   IP addresses, such as 10.0.0.1</td></tr><tr><td colspan="2">   Subnet descriptions, such as 10.2.3.0/24</td></tr><tr><td colspan="2">   The string &quot;localsubnet&quot;</td></tr><tr><td colspan="2">Example: to allow messages from 10.0.0.1,</td></tr><tr><td colspan="2">10.0.0.2, and from any system on the</td></tr><tr><td colspan="2">local subnet or on the 10.3.4.x subnet,</td></tr><tr><td colspan="2">type the following:</td></tr><tr><td colspan="2">  10.0.0.1,10.0.0.2,localsubnet,10.3.4.0/24</td></tr></table></td></tr><tr><th scope="col">Policy</th><th scope="col">Setting</th></tr>
<tr><td><a class="explainlink" href="javascript:void();" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Windows Firewall: Allow Remote Desktop exception" gpmc_settingPath="Computer Configuration/Administrative Templates/Network/Network Connections/Windows Firewall/Standard Profile" gpmc_settingDescription="Allows this computer to receive Remote Desktop requests. To do this, Windows Firewall opens TCP port 3389. &lt;br/&gt;&lt;br/&gt;If you enable this policy setting, Windows Firewall opens this port so that this computer can receive Remote Desktop requests. You must specify the IP addresses or subnets from which these incoming messages are allowed. In the Windows Firewall component of Control Panel, the &amp;quot;Remote Desktop&amp;quot; check box is selected and administrators cannot clear it. &lt;br/&gt;&lt;br/&gt;If you disable this policy setting, Windows Firewall blocks this port, which prevents this computer from receiving Remote Desktop requests. If an administrator attempts to open this port by adding it to a local port exceptions list, Windows Firewall does not open the port. In the Windows Firewall component of Control Panel, the &amp;quot;Remote Desktop&amp;quot; check box is cleared and administrators cannot select it.&lt;br/&gt;&lt;br/&gt;If you do not configure this policy setting, Windows Firewall does not open this port. Therefore, the computer cannot receive Remote Desktop requests unless an administrator uses other policy settings to open the port. In the Windows Firewall component of Control Panel, the &amp;quot;Remote Desktop&amp;quot; check box is cleared. Administrators can change this check box." gpmc_supported="At least Microsoft Windows XP Professional with SP2">Windows Firewall: Allow Remote Desktop exception</a></td><td>Enabled</td></tr>
<tr><td colspan="2"><table class="subtable_frame" cellpadding="0" cellspacing="0">
<tr><td>Allow unsolicited incoming messages from:</td><td>*</td></tr>
<tr><td colspan="2">Syntax:</td></tr><tr><td colspan="2">Type &quot;*&quot; to allow messages from any network, or</td></tr><tr><td colspan="2">else type a comma-separated list that contains</td></tr><tr><td colspan="2">any number or combination of these:</td></tr><tr><td colspan="2">   IP addresses, such as 10.0.0.1</td></tr><tr><td colspan="2">   Subnet descriptions, such as 10.2.3.0/24</td></tr><tr><td colspan="2">   The string &quot;localsubnet&quot;</td></tr><tr><td colspan="2">Example: to allow messages from 10.0.0.1,</td></tr><tr><td colspan="2">10.0.0.2, and from any system on the</td></tr><tr><td colspan="2">local subnet or on the 10.3.4.x subnet,</td></tr><tr><td colspan="2">type the following:</td></tr><tr><td colspan="2">  10.0.0.1,10.0.0.2,localsubnet,10.3.4.0/24</td></tr></table></td></tr><tr><th scope="col">Policy</th><th scope="col">Setting</th></tr>
<tr><td><a class="explainlink" href="javascript:void();" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Windows Firewall: Do not allow exceptions" gpmc_settingPath="Computer Configuration/Administrative Templates/Network/Network Connections/Windows Firewall/Standard Profile" gpmc_settingDescription="Specifies that Windows Firewall blocks all unsolicited incoming messages. This policy setting overrides all other Windows Firewall policy settings that allow such messages.&lt;br/&gt;&lt;br/&gt;If you enable this policy setting, in the Windows Firewall component of Control Panel, the &amp;quot;Don't allow exceptions&amp;quot; check box is selected and administrators cannot clear it. You should also enable the &amp;quot;Windows Firewall: Protect all network connections&amp;quot; policy setting; otherwise, administrators who log on locally can work around the &amp;quot;Windows Firewall: Do not allow exceptions&amp;quot; policy setting by turning off the firewall.&lt;br/&gt;&lt;br/&gt;If you disable this policy setting, Windows Firewall applies other policy settings that allow unsolicited incoming messages. In the Windows Firewall component of Control Panel, the &amp;quot;Don't allow exceptions&amp;quot; check box is cleared and administrators cannot select it.&lt;br/&gt;&lt;br/&gt;If you do not configure this policy setting, Windows Firewall applies other policy settings that allow unsolicited incoming messages. In the Windows Firewall component of Control Panel, the &amp;quot;Don't allow exceptions&amp;quot; check box is cleared by default, but administrators can change it." gpmc_supported="At least Microsoft Windows XP Professional with SP2">Windows Firewall: Do not allow exceptions</a></td><td>Enabled</td></tr>
<tr><td><a class="explainlink" href="javascript:void();" onclick="javascript:showExplainText(this); return false;" gpmc_settingName="Windows Firewall: Protect all network connections" gpmc_settingPath="Computer Configuration/Administrative Templates/Network/Network Connections/Windows Firewall/Standard Profile" gpmc_settingDescription="Turns on Windows Firewall, which replaces Internet Connection Firewall on all computers that are running Windows XP Service Pack 2.&lt;br/&gt;&lt;br/&gt;If you enable this policy setting, Windows Firewall runs and ignores the &amp;quot;Computer Configuration\Administrative Templates\Network\Network Connections\Prohibit use of Internet Connection Firewall on your DNS domain network&amp;quot; policy setting.&lt;br/&gt;&lt;br/&gt;If you disable this policy setting, Windows Firewall does not run. This is the only way to ensure that Windows Firewall does not run and administrators who log on locally cannot start it.&lt;br/&gt;&lt;br/&gt;If you do not configure this policy setting, administrators can use the Windows Firewall component in Control Panel to turn Windows Firewall on or off, unless the &amp;quot;Prohibit use of Internet Connection Firewall on your DNS domain network&amp;quot; policy setting overrides." gpmc_supported="At least Microsoft Windows XP Professional with SP2">Windows Firewall: Protect all network connections</a></td><td>Disabled</td></tr>
</table>
</div></div></div></div>
<div class="filler"></div>
<div class="he0_expanded"><span class="sectionTitle" tabindex="0">User Configuration (Enabled)</span><a class="expando" href="#"></a></div>
<div class="container"><div class="he4i">No settings defined.</div></div>
</body></html>