Windows firewall spontaneously changes profiles

[Guest]

Archived from groups: microsoft.public.windowsxp.security_admin (More info?)

I'm having a problem where both XP SP2 and Server 2003 SP1 machines
spontaneously change firewall profiles every couple weeks. The event
log entry is this:

Event Type: Success Audit
Event Source: Security
Event Category: Policy Change
Event ID: 860
User: NT AUTHORITY\SYSTEM
Computer: COMPUTERNAME
Description:
The Windows Firewall has switched the active policy profile.
Active profile: Standard

The issue being, the standard profile is stock. None of my exceptions
are listed and file sharing, network backups, antivirus updates, etc..
are disrupted.

Why is windows switching profiles? What criteria does it use to
suddenly decide not to use the domain profile? I'd hate to think a
momentary network blip could cause something unpredictable like this.

Ideally, is there a way I can can have the domain profile always in use?
Do I have to maintain both a Standard and Domain profile with
identical settings?

Thank You,

-David Carlin

 

[Guest]

Archived from groups: microsoft.public.windowsxp.security_admin (More info?)

For issues related to firewalls:

Please visit the Windows Firewall newsgroup experts:
news://msnews.microsoft.com/microsoft.public.windows.networking.firewall

--
Carey Frisch
Microsoft MVP
Windows XP - Shell/User
Microsoft Newsgroups

Get Windows XP Service Pack 2 with Advanced Security Technologies:
http://www.microsoft.com/athome/security/protect/windowsxp/choose.mspx

-------------------------------------------------------------------------------------------

"David Carlin" wrote:

| I'm having a problem where both XP SP2 and Server 2003 SP1 machines
| spontaneously change firewall profiles every couple weeks. The event
| log entry is this:
|
| Event Type: Success Audit
| Event Source: Security
| Event Category: Policy Change
| Event ID: 860
| User: NT AUTHORITY\SYSTEM
| Computer: COMPUTERNAME
| Description:
| The Windows Firewall has switched the active policy profile.
| Active profile: Standard
|
| The issue being, the standard profile is stock. None of my exceptions
| are listed and file sharing, network backups, antivirus updates, etc..
| are disrupted.
|
| Why is windows switching profiles? What criteria does it use to
| suddenly decide not to use the domain profile? I'd hate to think a
| momentary network blip could cause something unpredictable like this.
|
| Ideally, is there a way I can can have the domain profile always in use?
| Do I have to maintain both a Standard and Domain profile with
| identical settings?
|
| Thank You,
|
| -David Carlin