I'm about to define the domain wide group policy settings for the windows
firewall on our Windows XP SP2 clients.

Now I want to define this at the domain level so that it will affect all
XP SP2 computers when they join the domain .. without having to be moved to a
specific OU.

I'm worried that these settings will affect the firewall on my Windows 2003
SP1 Servers ..
how do I ensure my servers are not affected and or how do I define the GP
is for Win XP clients only ..

You could either change the default container that computer accounts are
created in when a computer joins the domain as described in the link below
or configure the GPO to have deny apply permissions for a global group that
contains your Windows 2003 domain servers. If you use "filtering" make sure
that you do not configure the firewall settings on the default domain Group
Policy. --- Steve

http://support.microsoft.com/default...b;en-us;324949

"Rory Niland" <RoryNiland@discussions.microsoft.com> wrote in message
news:EBFAE26C-B5A1-4A3E-8A2C-95D6675B41CD@microsoft.com...
> I'm about to define the domain wide group policy settings for the windows
> firewall on our Windows XP SP2 clients.
>
> Now I want to define this at the domain level so that it will affect all
> XP SP2 computers when they join the domain .. without having to be moved
> to a
> specific OU.
>
> I'm worried that these settings will affect the firewall on my Windows
> 2003
> SP1 Servers ..
> how do I ensure my servers are not affected and or how do I define the GP
> is for Win XP clients only ..
>
>