40 pts.
 group policy
How can I define group policy to block port 25 in windows 2003 server when ever user is log in? I have heard it can be done using login script.

ASKED: Jun 1, 2010  5:25 AM GMT
UPDATED: June 1, 2010  8:09:24 PM GMT
8,120 pts.

Answer Wiki:
You will need to utilize IPSec.

Note IPSeccmd.exe will run on Windows XP and Windows Server 2003 operating systems, but the tool is only available from the Windows XP SP2 Support Tools package.

Via a login script, you can execute the following command as an example:

(NOT TESTED)
IPSeccmd.exe -w REG -p "Block TCP 25 Filter" -r "Block Outbound TCP 25 Rule" -f 0=*:25:TCP -n BLOCK -x

Here's Microsoft link which should point you in the right direction.

http://support.microsoft.com/kb/813878
Last Wiki Answer Submitted:  Jun 1, 2010  3:00 PM (GMT)  by  Aguacer0   8,120 pts.
To see other answers submitted to the Answer Wiki View Answer History.
Discuss This Question:
_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _




 

You can also set the IPSec policy in a GPO as a system policy.

If there is a firewall in use on the server, you can explore using it. That will also be a system setting. The windows firewall is inbound only.

 3,310 pts.