Group policy changes to the Windows firewall

To avoid a device being discovered by a probe as "Other" or unclassified, you can make changes to the group policy. This ensures that discovered devices are properly identified for management in N-able N-central. N-able recommends creating a new group policy object (GPO) specific for a deployment to ensure that the changes are deployed to the devices.

Devices that have already been discovered as "Other" can be reclassified at any time, as described in Manage devices classified as "other".

See troubleshooting tips for Devices discovered and classed as "Other" device class.

  1. Log into the client environment and click Start > Programs > Administrative Tools > Group Policy Management.
  2. Right-click the required domain name, and click Create a GPO in this domain and link it here.
  3. Enter a Name and click OK.
  4. Right-click the new GPO and click Enforced > Edit.
  5. In the right-hand pane tree, click Computer Configuration > Administrative Templates > Network > Network Connections > Windows Firewall > Domain Profile.

    6. Some of these path names described below may differ in your environment. In steps below, you can enter an asterisk (*) in the All unsolicited incoming messages from these IP addresses field to allow messages from any network, or enter the IP of a specific probe.

  6. Double-click Allow inbound file and print sharing exception, select Enabled and click OK.
  7. Double-click Allow ICMP exceptions, select Enabled and Allow inbound echo request, and click OK.
  8. Double-click Allow inbound remote administration exception, select Enabled and click OK.
  9. Close the Group Policy Object.

Group Policy changes are not immediate. To perform an immediate update by issue the command gpupdate /force.