Can it be done with XP SP2 firewall ?

[Shahtech]

Hello,

Here is what I want to do:

- After installing XP SP2, I want to add a few programs to
the exception list of the Windows Firewall.Then I would
like to export the settings and create a script or
registry file which a user can just double-click and the
applications that I had in my exception list would be
added to his/her workstations's Windows Firewall.
- I understand that using group policy I can push certain
settings. But we have a very small network (25 pc's / 4
locations) and no domain setup.
- What utlity can I use or does microsoft already have a
utlitly in which I can enter the exception lite and it
will create a .reg or .msi file ?

Any help is greatly appreciated.
Thanks,
Shahtech

[Torgeir Bakken \(MVP\)]

Shahtech wrote:

> Here is what I want to do:
>
> - After installing XP SP2, I want to add a few programs to
> the exception list of the Windows Firewall.Then I would
> like to export the settings and create a script or
> registry file which a user can just double-click and the
> applications that I had in my exception list would be
> added to his/her workstations's Windows Firewall.
> - I understand that using group policy I can push certain
> settings. But we have a very small network (25 pc's / 4
> locations) and no domain setup.
> - What utlity can I use or does microsoft already have a
> utlitly in which I can enter the exception lite and it
> will create a .reg or .msi file ?
Hi

Just create a batch file that runs netsh.exe command lines to
configure the firewall (e.g. adding programs to the exception list).

Then your users can run this batch file later on to get the FW set up.


The netsh.exe syntax is documented in WF_XPSP2.doc.

WF_XPSP2.doc "Deploying Windows Firewall Settings for Microsoft
Windows XP with Service Pack 2" is downloadable from
http://www.microsoft.com/downloads/details.aspx?familyid=4454e0e1-61fa-447a-bdcd-499f73a637d1

--
torgeir, Microsoft MVP Scripting and WMI, Porsgrunn Norway
Administration scripting examples and an ONLINE version of
the 1328 page Scripting Guide:
http://www.microsoft.com/technet/scriptcenter/default.mspx

[David Beder [MSFT]]

Note that all firewall config requires admin privilages.
--
David
Microsoft Windows Networking
This posting is provided "AS IS" with no warranties, and confers no rights.


"Torgeir Bakken (MVP)" > wrote in message
...
> Shahtech wrote:
>
>> Here is what I want to do:
>>
>> - After installing XP SP2, I want to add a few programs to the exception
>> list of the Windows Firewall.Then I would like to export the settings and
>> create a script or registry file which a user can just double-click and
>> the applications that I had in my exception list would be added to
>> his/her workstations's Windows Firewall.
>> - I understand that using group policy I can push certain settings. But
>> we have a very small network (25 pc's / 4 locations) and no domain setup.
>> - What utlity can I use or does microsoft already have a utlitly in which
>> I can enter the exception lite and it will create a .reg or .msi file ?
> Hi
>
> Just create a batch file that runs netsh.exe command lines to
> configure the firewall (e.g. adding programs to the exception list).
>
> Then your users can run this batch file later on to get the FW set up.
>
>
> The netsh.exe syntax is documented in WF_XPSP2.doc.
>
> WF_XPSP2.doc "Deploying Windows Firewall Settings for Microsoft
> Windows XP with Service Pack 2" is downloadable from
> http://www.microsoft.com/downloads/details.aspx?familyid=4454e0e1-61fa-447a-bdcd-499f73a637d1
>
> --
> torgeir, Microsoft MVP Scripting and WMI, Porsgrunn Norway
> Administration scripting examples and an ONLINE version of
> the 1328 page Scripting Guide:
> http://www.microsoft.com/technet/scriptcenter/default.mspx