Windows Firewall in the Corporate Environment (Vista+)

RTmarc

I'd say as a general rule we - we being sys- / netadmins - have disabled the Windows Firewall via GPO and gone on with our business. We didn't have much to work with in the past and it was just easier to shut it down than try to configure it. Since Vista came out the firewall is leaps and bounds better than XP; even more so with Windows 7 now. I'm curious if there is anyone leaving this enabled and using GP to modify rules and policies. If you are, how well is it working out for you? Are you running into many issues with third-party applications? Any major complaints?

For what it is worth, we are a 2008 R2 forest / domain and are transitioning from XP to Windows 7.

Devilsbane

I think it still mainly gets turned off. There isn't a ton of protection needed from workstation to workstation. Maybe leave it on any sensitive machines.