I have default domain policy that disables the Windows firewall (Administrative Templates/Network/Network Connections/Windows Firewall/Domain Profile: Windows Firewall: Protect all network connections: Disabled).
We are running AD2003 w/2008R2 servers, 2003 functional level. I have inherited a spaghetti mix of various GPOs and am sifting through them to cut out non-essential, duplicated policy settings.
I have various GPOs that have entries such as:
Computer Configuration/Administrative Templates/Network/Network Connections/Windows Firewall/Domain Profile: Windows Firewall: Allow ICMP exceptions - Disabled
Do these have any affect since the firewall is already turned off? Even if it weren't set to the default setting, if I'm thinking logically about this, these settings would not have any affect and can be removed from the GP object.
Am I correct to believe that these (and other similar entries) can be removed?
Thanks!