How To Allow Ping Through Windows Firewall

In this guide, you will learn how to enable ping requests in Windows client and server operating systems.

I'll show y'all the steps for a unmarried computer and how to use group policy to enable ping requests for multiple computers.

By default, the Windows Firewall blocks ping requests. Blocking ping requests adds another layer of security to your network by making systems appear offline or unavailable. This helps to slow downwardly viruses, ransomware, and attackers. For these reasons it is recommended that ICMP ping requests are blocked.

I empathise blocking ping requests can cause problems with other systems and in troubleshooting network bug. Many management tools use ICMP requests to check for uptime, system status, and so on. If y'all demand to unblock ping requests try to allow it merely where needed.

Allow Ping Requests in Windows 10

Step ane: Open the Windows Firewall

Click the start button then type firewall and click on "Windows Defender Firewall with Advanced Security"

Step 2: Click on Inbound Rules

In the Firewall console click on entering rules

Step 3: Find File and Printer Sharing (Echo Asking – ICMPv4-In) Rule

In the inbound rule list coil down to notice the "File and Printer Sharing (Echo Request

If you look at the Enabled column it should say no and this is why ping requests are beingness blocked. To allow pings just pick your contour and and then click on Enabled. In this example, I will enable pings only for the domain profile.

I do not recommend enabling pings on your public profile.

With pings enabled you should now exist able to ping this system. I enabled pings on PC2 and so I'll test this from another computer.

Aye, pings are now working.

If you need to enable ping requests for multiple computers then group policy is a amend selection, see the next section for instance.

Related: 11 Windows Firewall All-time Practices

Enable Ping Request Using Grouping Policy

If yous need to enable pings on multiple computers then you should apply group policy. This volition also forestall someone from disabling it.

These GPO settings will work with Windows x, Server 2008, and subsequently versions.

Open the group policy management console.

Create and link and new GPO to an OU. In this instance, I'thou going to enable pings on all computers in my ADPRO Computers OU.

Give the GPO a name, I'll name mine "Calculator – Permit Pings"

Edit the new GPO and navigate to "Policies -> Windows Settings -> Security Settings -> Windows Defender Firewall with Advanced Security"

Click on inbound rules, right-click and select "New Rule"

Select "Predefined"

In the dropdown select "File and Printer Sharing"

Uncheck all rules except "File and Printer Sharing (Echo Request -ICMPv4-in)

Click Side by side.

Select "Allow the Connection" and click Finish.

The rule is at present created only we need to modify the profiles.

Double click the rule and click on the Advanced tab. Unselect whatever profiles you don't need. I only demand the domain profile enabled and then I will unselect "individual" and "public" and so click utilise.

This dominion will enable ping requests on any system that the GPO is applied to. It will besides prevent changing the rule on the local reckoner as it is at present controlled by grouping policy. Beneath is a screenshot of the rule on a local computer. information technology is locked downwardly and cannot be edited since it is controlled by group policy.

How to Enable Ping Requests in Server 2016

The steps are the same as a Windows ten computer. The merely difference is the firewall is called "Windows Firewall with Avant-garde Security"

Enable the "File and Printer Sharing (Repeat Request – ICMPv4-in) rule and pings will be allowed.

Allow Ping Requests and Limit Scope

For added security, y'all can utilise the telescopic settings to limit which systems tin accept and return pings. This is a nice feature equally it lets you lot enable firewall rules with added security.

For instance, I need to allow ping requests on my 2016 server but there is no reason Lenny's computer in finance should have access to ping the server. I tin can use the scope option to limit which IP addresses can ship pings to the server.

In the picture above, I added the IP addresses of the systems that my 2016 server volition have pings from.

And then if I send a ping from my PC2 (192.168.100.103) the ping fails.

Now I'll send a ping from the server (192.168.100.10)

The ping works because this IP is immune by the firewall scope settings.

This is a keen way to add together additional security using the Windows Firewall. I use this setting all the time with various rules.

Then that is how you enable ping requests in the Windows Firewall. If you liked this guide then bank check out more than of my Active Directory Security tips for Windows domain environments.

If you take questions post them in the comment section below.

Source: https://activedirectorypro.com/allow-ping-windows-firewall/

Posted by: elmorethrodgent.blogspot.com