Welcome to MSDN Blogs Sign in | Join | Help

Michael Howard's Web Log

A Simple Software Security Guy at Microsoft!
More XPSP2 Goodies

<Waiting to present to a bunch of Game Developers about writing secure games!>

As you probably all know the firewall is enabled by default in Windows XPSP2, which is goodness.

Of course, it would not be goodness if the it was deployed to a zillion desktops, and it could not be centrally managed. In fact, I was sent an email this morning about this issue after a VERY large client read this article “Companies brace for Windows upgrade“ at http://www.msnbc.msn.com/id/5458669/. The line which caught his eye was this: “because it could be a nightmare to manage things like personal firewalls on thousands of desktops.

We realized this would be an issue very early, and that's why the Windows Firewall is hooked into Group Policy, so a central policy can be pushed to all your corporate desktops easily.

You can read more about it here: http://www.microsoft.com/downloads/details.aspx?FamilyID=4454e0e1-61fa-447a-bdcd-499f73a637d1&DisplayLang=en

<Still waiting to present - but in the meantime, I had a little chat with one of the developers of Unreal Tournament Server - very interesting>

Posted: Wednesday, July 28, 2004 2:43 PM by michael_HOWARD
Filed under:

Comments

Henry said:

I'm thinking of doing a project for my final year at university on secure games over the internet and was interested about your presentation on writing secure games and if you could give me some helpful links.
Thanks
Henry
(e-mail hmpbar {a-t) essex.ac.uk)
# July 28, 2004 6:49 PM

Michael Howard said:

I'll email you the slides
# July 28, 2004 10:17 PM

Jerry Pisk said:

<irony>Thanks a lot</irony>, now I won't be able to override our idiotic IT department on my firewall either. It's not enough that they disable password lockout and length and complexity requirements, now they will also be allowed to disable my firewall. Thanks a lot, really.

Now - is there a way to override domain group policy? Short of leaving the domain, because I won't be able to use my domain account which I need.
# July 28, 2004 11:44 PM
New Comments to this post are disabled
Page view tracker