Start a discussion

1 replies

Firewall policy changes in 2016?

In the past year, we've done several SBS upgrades to 2016 Essentials or 2016 Full w/Essentials Role installed (all of these moved Exchange to 365).

Something I can't explain and can't find any documentation on, however, is that when we bring online NEW Windows 10 workstations into the domain, we cannot PING them or see file-sharing services. Yet... all the migrated Windows 10 computers are fine (ping/file sharing). I can't find anything on this anywhere and am wondering if the policies between 2008/2011 changed and are the rules no longer being added? If so - does anyone have a list of what the rules "should" be to allow servers to fully communicate with workstations (this includes pushing software out - which I also discovered today that the remote registry service is now disabled by default - just set a GPO to change that to manual so at least we can push out software again).

Any advice/pointers would be appreciated. Thank you.

Shawn Lemay Shawn Lemay
Published 11/28/2018 21:43
  • Windows Firewall
  • Group Policy
  • Windows 10
  • Exchange Server 2016
  • Windows Server Essentials 2016
  • Essentials Experience Role
Add Comment
Mariette Knap

The migrated clients probably have the SBS client computer stuff installed and that also opens ports. I will have a new Group Policy ready with the migration guide that migrated WSE 2016 to Windows Server 2019 + Admin Center. That policy will take care of all the stuff you really want and need as an admin.

replied 01/14/2019 13:53
Last Activity 01/14/2019 13:53