Endpoint Protection

I have 4 users running windows <st1:place w:st="on">Vista</st1:place> and EP11; eveyone else is XP Pro.

We have a group policy applied through AD on a 2003 Windows Domain that turns off the windows firewall and grays out the option to turn back on. One of the 4 users claims that yesterday, EP11 ran some sort of update and turned on her windows firewall back on.

I think it was off and a windows update was applied that turned it back on, which has happened in the past in our environment.

My actual question here is.............is it possible that EP11 could have turned the windows firewall back on?

No It should not be the case. EP should not make any changes to windows Firewall.
You are correct the windows update should have done it.

if you install Proactive network protection and network protection Windows firewall be disabled.
On the Sep manager you can see client tabs (change view) Firewall enabled disabled or not status.
By the why you must to restart the computer for sep firewall will active.
I have vista and Xp clients and Windows firewall is disabled in them.
I didn't see sep firewall back on. Can users do that themself?
Thanks.

SEP cannot turn on the firewall on the machine . It can turn off the firewall when NTP is installed. But vice versa is just not possible.

In recent times there has been strange behavoiur of WSC , even this could have alos been one of them ,

What is the SP for vista?

The laptop I am speaking of is running Windows Vista - Enterprise Service Pack 1
It looks as if her system was not effected by the GP in AD. Thus giving her the ability of turning on or off the firewall in windows.

Try doing a GPRESULT in a command prompt window on that laptop to see if group policies are being applied.

Hi Cullyt
as RickJDS said you can check Gpresult in dos prompt. and you can update policy gpudate /force command.
Thanks.

Remember that Vista's GP firewall settings are applied from a different (and much easier and more powerful) node than XP/2003 firewall settings in Administrative Templates. Windows 6.x firewall settings are in Computer Configuration/Policies/Windows Settings/Windows Firewall with Advanced Security. If you haven't set it there, this Vista computer has no GP firewall settings at all.

If that's not the problem, run a GPMC Results report against the problem computer; you may get some insight as to why GP is not being applied.