Home / server / Questions / 565424
Accepted
Chris McKeown
Asked: 2014-01-07 12:56:34 +0800 CST

Disable TCP/IP Filtering via GPO

  • 772

Is it possible to disable/overwrite Windows TCP/IP filtering settings via a Group Policy object?

I have a server running 2012 R2 which I was setting up RRAS on, and I inadvertently cut myself off from remote access by allowing the wizard to secure the network connection (the server has a single NIC).

group-policy

1 Answers

  1. Best Answer

    Locked the keys in the car, eh?

    I don't believe that one is configurable via Group Policy. Periodic policy refresh isn't going to help you run a script or install software on the machine since both of those operations only occur on a synchronous policy refresh (i.e. a reboot).

    I think you're going to be stuck laying hands on the machine.

    I've forgotten what the static packet filter that gets added by that wizard contains. Something in the back of my mind says its fairly restrictive and might even limit the machine's ability to contact AD for a Group Policy refresh.

    Assuming it can access AD for Group Policy and, if you can get somebody to reboot it, you can assign a Powershell startup script with the commands Get-RemoteAccessIpFilter | Remove-RemoteAccessIpFilter that will probably do the trick (though I don't have a test box spun up right now to verify with).

    • 5