grant power users access to firewall controls

totoro

Distinguished
Dec 7, 2004
3
0
18,510
Archived from groups: microsoft.public.windowsxp.security_admin (More info?)

I don't want my users installing apps but they should be able to turn on and
off the firewall. is there a way to give them this ability?
 

Gordon

Distinguished
Apr 3, 2004
1,110
0
19,280
Archived from groups: microsoft.public.windowsxp.security_admin (More info?)

totoro wrote:
|| I don't want my users installing apps but they should be able to
|| turn on and off the firewall.

Why? Turning off the firewall is a security risk.

--
Gordon Burgess-Parker
Interim Systems and Management Accounting
www.gbpcomputing.co.uk
 

totoro

Distinguished
Dec 7, 2004
3
0
18,510
Archived from groups: microsoft.public.windowsxp.security_admin (More info?)

sometimes its required to troubleshoot netwrok services such as printing and
scanning images. we have a xerox large format scanner that the Firewall will
not accept as an exception. to use it the administrator has to turn off the
firewall. I would rather the user turned it on and off on demand, rather than
me deciding either I turn it off permanantly or the scanner resource (which
is unique and very useful) is no longer availalble permanently.

"Gordon" wrote:

> totoro wrote:
> || I don't want my users installing apps but they should be able to
> || turn on and off the firewall.
>
> Why? Turning off the firewall is a security risk.
>
> --
> Gordon Burgess-Parker
> Interim Systems and Management Accounting
> www.gbpcomputing.co.uk
>
>
>
 

Gordon

Distinguished
Apr 3, 2004
1,110
0
19,280
Archived from groups: microsoft.public.windowsxp.security_admin (More info?)

totoro wrote:
> sometimes its required to troubleshoot netwrok services such as
> printing and scanning images. we have a xerox large format scanner
> that the Firewall will not accept as an exception. to use it the
> administrator has to turn off the firewall. I would rather the user
> turned it on and off on demand, rather than me deciding either I turn
> it off permanantly or the scanner resource (which is unique and very
> useful) is no longer availalble permanently.
>
> "Gordon" wrote:
>
>> totoro wrote:
>>>> I don't want my users installing apps but they should be able to
>>>> turn on and off the firewall.
>>
>> Why? Turning off the firewall is a security risk.
>>

If you are talking about the Windows firewall, perhaps it's time to consider
an alternative?