Hi, I am currently trying to implement remote assistance environment in my Windows 7 Environment. I am trying to keep all the machines as secure as possible and only allow this action to be triggered from a number of pre-defined IP addresses, when reviewing the firewall policy have noticed that file and printer sharing ports are open to all, when the machine in using the ‘Domain’ firewall profile. I am using group policy to configure the firewall policies, I currently have set: Computer Config>Admin Temp>Network>Network Con>Win Firewall>Domain> ‘Allow inbound and file printer sharing exceptions’ set to ‘enable’ and only from our server subnet zone. However I am still able to connect to these machines from any client subnet zone. I did notice that on the Win 7 client in Network and sharing centre> Advanced sharing settings> ‘File and Printer sharing’ is turned on by default for the domain profile. Is there any way that I can turn this off by group policy or some other (no manual) way?JC

"Is there any way that I can turn this off by group policy or some other (no manual) way?" Set the Advanced Sharing for the Domain profile to disabled for both File and Print sharing, this can be done in group policy as well. Remote assistance isn't the same as File/Print sharing, they use different ports.