Hello, Currently we are struggling to get a new security policy under way. The new policy states that while a laptop is in the network(domain) the windows firewall is off, however when anywhere else it is turned on. To accomplish this we have setup a GPO as follows: Computer Configuration>Administrative Templates>Network>Networkconnectoins>Windows Firewall>Domain Profile>Windows Firewall: Protect all network connections - Disabled Computer Configuration>Administrative Templates>Network>Networkconnectoins>Windows Firewall>Standard Profile >Windows Firewall: Protect all network connetions - Enabled This seems to do what we are after however what happens when a user connects to a network outside the office and the network discovery wizard pops up and they select Work as the option. This will put them into Domain Profile and disable the firewall will it not? If so how do we stop this? The beatings will continue until moral improves!

Also what would happen when you connect to a public network so the windows firewall is on and then you VPN into the network. The firewall stays on as your Windows 7 Laptop still see's your connection as public? how do you get around this?The beatings will continue until moral improves!

Hi, Windows 7 support individual firewall profile. When the end users connect to corp network, the profile for this connection is off, the other non-domain profiles will still be on at that time. Juke Chou TechNet Community Support

Yes this is true however when you take your laptop to a public play, lets say an airport and connect to a wireless connection the network discovery wizard will prompt you and ask which kind of network you are connecting too: Work, home, public. If you select public the firewall will be on but when you VPN into the network the public profile firewall is still on, will this effect the VPN? as Windows will not switch the networks just becuase you have VPN'ed into the network The beatings will continue until moral improves!