Firewall settings greyed out for Administrators for domain-connected computers

our domain-connected windows 7 computers running windows firewall turned off. administrators want able turn firewall on when connected 1 specific vlan, used public-access computers. so, admins want protection afforded windows firewall while connected vlan. however, option turn firewall on under 'domain network location settings' greyed out, settings home , public networks.
 
when open windows firewall 'customize settings' window, message appears @ top: security, settings managed system administrator.
 
have group policy domain user accounts turns firewall off while connected domain , on when computer off domain. need configure group policy administrators can turn firewall off or on @ will, regardless of whether computer on or off of domain?

hi,

> have group policy domain user accounts turns firewall off while connected domain
> , on when computer off domain. need configure group policy that
> administrators can turn firewall off or on @ will, regardless of whether computer on or off of the
> domain?

group policy has feature “be recognized application”. in other words, display of configuration item under control of gp policy setting unavailable through user interface. graying out configuration item on menu, not displaying dialog box, or providing pop-up message explaining current feature under administrator control used inform user can't configure option.

so design. can configure customized firewall settings through group policy meet network requirement, or unlink firewall gpo let users control firewall themselves.

for more information please refer following ms articles:

gp policy vs. preference vs. gp preferences
http://blogs.technet.com/b/grouppolicy/archive/2008/03/04/gp-policy-vs-preference-vs-gp-preferences.aspx
managing windows firewall advanced security using group policy
http://technet.microsoft.com/en-us/library/cc753955(v=ws.10).aspx
windows firewall advanced security
http://technet.microsoft.com/en-us/library/cc754274(v=ws.10).aspx

---

lawrence

technet community support

Windows Server  >  Group Policy