虽然我的XP工作站已连接到域,但在启动firewall.cpl报告后,它们“正在使用非域设置”.
Official literature告诉我,它的连接的DNS后缀与上一组策略更新中的DNS名称不匹配是一个问题,但这似乎不正确,因为应用gpupdate / force正确地将其修复为“使用域设置”.
如何在启动时让防火墙在域上正确检测到它？
在网上搜索后我找到了答案,并想发布我的问题并在这里回答帮助他人.
Dave Nickason wrote：
On any workstation where the firewall is showing as using the
non-domain settings,go into Services and set the Network Location
Awareness service to start automatically,and then restart the
workstation or do gpupdate /force. Setting NLA to automatic startup
should fix it permanently. The issue is that with NLA set to manual,
it starts too slowly to get the firewall to use the correct (domain)
settings.As far as I know,MS never documented this,but you’ll notice that NLA
is set to automatic by default in Vista.
谢谢戴夫！
