It determines this by Domain Policy. If you have the policy set correctly and install the service pack as a domain member and not logged into the domain rather than the machine it will work as designed.
Every Microsoft Conf. that I have attended in the last 8 mos has stressed that with the Firewall installed and turned on in a windows XP machine. They strongly recommend running another Firewall appliance in additon to this. Such as ISA or a Hardware solution. Or both. The firewall is designed to supliment your other security measures not replace them. The reason file sharing ports are enabled is because of complaints microsoft had recieved of the firewall breaking netbios.
This only happens when the machine is not a part of a domain. I have installed this service pack on fifteen machines both members of a domain and not members of a domain. The simple fact of the matter is that it is not an insecure practice on workgroup machines. An Administrator Account is required to install the service pack and the Administrator should be responsible enough to stay around until the service pack is completely installed.
It determines this by Domain Policy. If you have the policy set correctly and install the service pack as a domain member and not logged into the domain rather than the machine it will work as designed.
Every Microsoft Conf. that I have attended in the last 8 mos has stressed that with the Firewall installed and turned on in a windows XP machine. They strongly recommend running another Firewall appliance in additon to this. Such as ISA or a Hardware solution. Or both. The firewall is designed to supliment your other security measures not replace them. The reason file sharing ports are enabled is because of complaints microsoft had recieved of the firewall breaking netbios.
This only happens when the machine is not a part of a domain. I have installed this service pack on fifteen machines both members of a domain and not members of a domain. The simple fact of the matter is that it is not an insecure practice on workgroup machines. An Administrator Account is required to install the service pack and the Administrator should be responsible enough to stay around until the service pack is completely installed.