Google Groups no longer supports new Usenet posts or subscriptions. Historical content remains viewable.
Dismiss

Can't turn off Windows Firewall

2 views
Skip to first unread message

Gordon

unread,
Sep 25, 2007, 11:44:26 AM9/25/07
to
XP SP2, fully patched. using Zone Alarm. In Security settings, the "turn
off" button is grayed out. I am logged in as admin and am NOT on a domain.
All the google results I get are for domains.....
Can anyone help?


Lanwench [MVP - Exchange]

unread,
Sep 25, 2007, 3:46:10 PM9/25/07
to

Since you have ZoneAlarm, installing it should've disabled the Windows
firewall. Did it ever work? Have you tried uninstalling/reinstalling it?
Was your computer *ever* a member of a domain?
Can you stop the underlying windows service?


Gordon

unread,
Sep 25, 2007, 4:07:42 PM9/25/07
to
"Lanwench [MVP - Exchange]"
<lanw...@heybuddy.donotsendme.unsolicitedmailatyahoo.com> wrote in message
news:%23HIR7z6$HHA...@TK2MSFTNGP03.phx.gbl...

> Gordon <gbpl...@gmail.com.invalid> wrote:
>> XP SP2, fully patched. using Zone Alarm. In Security settings, the
>> "turn off" button is grayed out. I am logged in as admin and am NOT
>> on a domain. All the google results I get are for domains.....
>> Can anyone help?
>
> Since you have ZoneAlarm, installing it should've disabled the Windows
> firewall.

it doesn't seem to have

> Did it ever work?

Yes - I've only installed ZoneAlarm today as an alternatice to the Windows
Firewall...

> Have you tried uninstalling/reinstalling it?

Just going to.....

> Was your computer *ever* a member of a domain?

No, never.

> Can you stop the underlying windows service?

yes - presumably that's the Windows Firewall/ICS service in services.msc?

Lanwench [MVP - Exchange]

unread,
Sep 25, 2007, 5:18:54 PM9/25/07
to
Gordon <gbpl...@gmail.com.invalid> wrote:
> "Lanwench [MVP - Exchange]"
> <lanw...@heybuddy.donotsendme.unsolicitedmailatyahoo.com> wrote in
> message news:%23HIR7z6$HHA...@TK2MSFTNGP03.phx.gbl...
>> Gordon <gbpl...@gmail.com.invalid> wrote:
>>> XP SP2, fully patched. using Zone Alarm. In Security settings, the
>>> "turn off" button is grayed out. I am logged in as admin and am NOT
>>> on a domain. All the google results I get are for domains.....
>>> Can anyone help?
>>
>> Since you have ZoneAlarm, installing it should've disabled the
>> Windows firewall.
>
> it doesn't seem to have
>
>> Did it ever work?
>
> Yes - I've only installed ZoneAlarm today as an alternatice to the
> Windows Firewall...
>
>> Have you tried uninstalling/reinstalling it?
>
> Just going to.....
>
>> Was your computer *ever* a member of a domain?
>
> No, never.

Hmm. Anything in your event logs?
Can you see anything if you look at gpedit.msc and look for the firewall
config settings in your local policy?


>
>> Can you stop the underlying windows service?
>
> yes - presumably that's the Windows Firewall/ICS service in
> services.msc?

Yep.

Gordon

unread,
Sep 27, 2007, 9:41:24 AM9/27/07
to
"Lanwench [MVP - Exchange]"
<lanw...@heybuddy.donotsendme.unsolicitedmailatyahoo.com> wrote in message
news:OdOfJn7$HHA....@TK2MSFTNGP06.phx.gbl...


Update - I uninstalled ZoneAlarm and re-booted. Still no option to turn off
Windows Firewall in security settings. Re-installed Zonealarm - windows
Firewall appears to be still on as I got an alert from it after having
re-installed ZoneAlarm.

What now?


Lanwench [MVP - Exchange]

unread,
Sep 27, 2007, 12:07:11 PM9/27/07
to
Gordon <gbpl...@gmail.com.invalid> wrote:

<snip>

>>
>> Hmm. Anything in your event logs?
>> Can you see anything if you look at gpedit.msc and look for the
>> firewall config settings in your local policy?

<snip>

>
>
>
> Update - I uninstalled ZoneAlarm and re-booted. Still no option to
> turn off Windows Firewall in security settings. Re-installed
> Zonealarm - windows Firewall appears to be still on as I got an alert
> from it after having re-installed ZoneAlarm.
>
> What now?

OK, but what about the answers to my previous questions?


Gordon

unread,
Sep 27, 2007, 1:52:03 PM9/27/07
to
"Lanwench [MVP - Exchange]"
<lanw...@heybuddy.donotsendme.unsolicitedmailatyahoo.com> wrote in message
news:eRp15SSA...@TK2MSFTNGP03.phx.gbl...

> Gordon <gbpl...@gmail.com.invalid> wrote:
>
> <snip>
>
>>>
>>> Hmm. Anything in your event logs?

Not that I can see - plenty of activity in windows defender but nothing
related to Windows Firewall at all.


>>> Can you see anything if you look at gpedit.msc and look for the
>>> firewall config settings in your local policy?

here are the settings I exported:

Setting State
Windows Firewall: Protect all network connections Not configured
Windows Firewall: Do not allow exceptions Not configured
Windows Firewall: Define program exceptions Not configured
Windows Firewall: Allow local program exceptions Not configured
Windows Firewall: Allow remote administration exception Not configured
Windows Firewall: Allow file and printer sharing exception Not configured
Windows Firewall: Allow ICMP exceptions Not configured
Windows Firewall: Allow Remote Desktop exception Not configured
Windows Firewall: Allow UPnP framework exception Not configured
Windows Firewall: Prohibit notifications Not configured
Windows Firewall: Allow logging Not configured
Windows Firewall: Prohibit unicast response to multicast or broadcast
requests Not configured
Windows Firewall: Define port exceptions Not configured
Windows Firewall: Allow local port exceptions Not configured

Lanwench [MVP - Exchange]

unread,
Oct 1, 2007, 10:06:01 AM10/1/07
to

Weird. I don't work with many standalone workstations, so I don't know if
this will work, but what about rsop.msc?


Gordon

unread,
Oct 1, 2007, 10:56:37 AM10/1/07
to
"Lanwench [MVP - Exchange]"
<lanw...@heybuddy.donotsendme.unsolicitedmailatyahoo.com> wrote in message
news:eIQJaYDB...@TK2MSFTNGP03.phx.gbl...


Got that up, what am I looking for?


Lanwench [MVP - Exchange]

unread,
Oct 1, 2007, 11:58:36 AM10/1/07
to

Expand through til you get to the same place/settings.

another thought....what happens if you log into this computer as the
built-in Administrator account?


Gordon

unread,
Oct 1, 2007, 12:58:12 PM10/1/07
to
"Lanwench [MVP - Exchange]"
<lanw...@heybuddy.donotsendme.unsolicitedmailatyahoo.com> wrote in message
>>>
>>> Weird. I don't work with many standalone workstations, so I don't
>>> know if this will work, but what about rsop.msc?
>>>
the only entry relating to firewall that I can find is in Computer
Configuration-Windows settings-Security settings-System services and says
Windows firewall/Internet Connection service not defined.

>
> another thought....what happens if you log into this computer as the
> built-in Administrator account?
>

Exactly the same - no option to turn the Windows firewall off, even though
ZoneAlarm has loaded...

Shenan Stanley

unread,
Oct 1, 2007, 1:18:48 PM10/1/07
to
Entire conversation here:
http://groups.google.com/group/microsoft.public.windowsxp.security_admin/browse_thread/thread/fb1c6ffa52f71da5/d017bb04e9cbd8e5?lnk=st&q=&rnum=1#d017bb04e9cbd8e5


Gordon wrote:
<snipped>

Lanwench [MVP - Exchange] wrote:
<snipped>

Gordon,

Try the following:
http://windowsxp.mvps.org/resetfwpol.htm
(I believe Lanwench may have walked you through this somewhat already...)


If that does not work...
http://windowsxp.mvps.org/sharedaccess.htm

I realize it does *not* describe your issue exactly - but resetting many of
the firewall settings just may be what you need to do. Particularly:

CMD /K NETSH FIREWALL RESET
Reboot

or

rundll32 setupapi,InstallHinfSection Ndi-Steelhead 132
%windir%\inf\netrass.inf
Reboot
CMD /K NETSH FIREWALL RESET
Reboot

It's worth a shot and cannot hurt in your current situation.

--
Shenan Stanley
MS-MVP
--
How To Ask Questions The Smart Way
http://www.catb.org/~esr/faqs/smart-questions.html


0 new messages