Lansweeper logo
Home Download Features Demo Buy now Help Support forum
 
    Most requested support articles:
  Lansweeper troubleshooting guide.
  The RPC server is unavailable. (Exception from HRESULT: 0x800706BA)
  WMI Access is denied. (Exception from HRESULT: 0x80070005 (E_ACCESSDENIED))
  How to configure the windows firewall using group policies.
  Support:  
 support@lansweeper.com  
Skype: Lansweeper  
  Mo-Fri 9h-17h CET  
Welcome Guest Search | Active Topics | Log In | Register

Untag as favorite
Remotely force group policies refresh
Options
Previous Topic Next Topic
BullGates
#1 Posted : Wednesday, September 23, 2009 4:10:12 PM

Rank: Premium user

Groups: Member, Premium Users
Posts: 205
Location: PT
Get this tool:
http://www.gpoguy.com/Fr...pertyID/83/Default.aspx
Add this action:
Code:
cmd.exe /K \\server\share$\Lansweeper\RGPrefresh.exe /m:{computer}


Before I could use psexec and gpupdate command, but this tools supports remote policy refresh wich is much better :-)

Regards,
Paulo
Back to top
BLOG
Lansweeper
#2 Posted : Wednesday, September 23, 2009 4:56:43 PM

Rank: Administration

Groups: Administration, Premium Users
Posts: 10,369
This is a cool action, but most people's problem is that they want to refresh to policy that turns of the firewall (which won't in this case because the workstation is firewalled)
Back to top
BullGates
#3 Posted : Wednesday, September 23, 2009 5:07:21 PM

Rank: Premium user

Groups: Member, Premium Users
Posts: 205
Location: PT
Well but you can disable firewall remotely before, it's not that hard I believe. Our security is not client based so we don't use windows firewall - I can't test it quickly.

Please try to create an action with:
Code:
psexec \\<computer> netsh firewall set opmode DISABLE
Back to top
BLOG
| Edit by user
Lansweeper
#4 Posted : Wednesday, September 23, 2009 6:19:00 PM

Rank: Administration

Groups: Administration, Premium Users
Posts: 10,369
You can't psexec or any other tool because the workstation is firewalled
Back to top
BullGates
#5 Posted : Wednesday, September 23, 2009 7:10:49 PM

Rank: Premium user

Groups: Member, Premium Users
Posts: 205
Location: PT
Can you access the remote computer registry in any way (HKLM)? Or using mmc can you remotely access services and stop the firewall service?
Back to top
BLOG
| Edit by user
Lansweeper
#6 Posted : Wednesday, September 23, 2009 8:12:31 PM

Rank: Administration

Groups: Administration, Premium Users
Posts: 10,369
No, when the firewall is on you can't do anything, it's like there is no computer on the other side
Back to top
BullGates
#7 Posted : Thursday, September 24, 2009 10:41:06 AM

Rank: Premium user

Groups: Member, Premium Users
Posts: 205
Location: PT
We have policy enforced not to use firewall in our domain, and I'm a Linux user at home so I can't test these small things...

By creating a policy, in the computer context it's possible to run a startup script to stop the firewall service or to run the command I've specified:
Code:
netsh firewall set opmode DISABLE
Back to top
BLOG
mtaggart
#8 Posted : Saturday, April 24, 2010 7:09:45 PM
Rank: Freeware Advanced Member

Groups: Member
Posts: 56
Specops Software has a free tool for this http://www.specopssoft.c...b/specops-gpupdate.aspx
Back to top
Users browsing this topic
Guest
Untag as favorite
Forum Jump  
You cannot post new topics in this forum.
You cannot reply to topics in this forum.
You cannot delete your posts in this forum.
You cannot edit your posts in this forum.
You cannot create polls in this forum.
You cannot vote in polls in this forum.

Contact: E-mail Lansweeper - Skype : Lansweeper
Copyright 2004 - 2011 © Hemoco bvba