SP2 disabling firewall

[AntoS]

Is it possible to install sp2 (on windows xp professional) but with firewall
NOT activated as default.

Thanks

[Shenan Stanley]

AntoS wrote:
> Is it possible to install sp2 (on windows xp professional) but with
> firewall NOT activated as default.

Stand Alone or Domain?

--
<- Shenan ->
--
The information is provided "as is", it is suggested you research for
yourself before you take any advice - you are the one ultimately
responsible for your actions/problems/solutions. Know what you are
getting into before you jump in with both feet.

[Yao Su]

After you install a copy, either just install SP2 or an SP2-intergrated one,
you'll have the chance to decide whether turn on Windows Firewall or not,
when you first logon to the newly installed system.

But it's strongly recommended that you install a 3rd party firewall in place
of Windows Firewall.

--
Regards,
Yao Su
http://blog.mvpcn.net/suyao


"AntoS" > wrote in message
...
| Is it possible to install sp2 (on windows xp professional) but with
firewall
| NOT activated as default.
|
| Thanks
|

[AntoS]

Domain.


"Shenan Stanley" wrote:

> AntoS wrote:
> > Is it possible to install sp2 (on windows xp professional) but with
> > firewall NOT activated as default.
>
> Stand Alone or Domain?
>
> --
> <- Shenan ->
> --
> The information is provided "as is", it is suggested you research for
> yourself before you take any advice - you are the one ultimately
> responsible for your actions/problems/solutions. Know what you are
> getting into before you jump in with both feet.
>
>
>

[Yves Leclerc]

SP2 will automatically return you to a SP2 security setup window. Here, you
can turn off the firewall.


"AntoS" > wrote in message
...
> Domain.
>
>
> "Shenan Stanley" wrote:
>
>> AntoS wrote:
>> > Is it possible to install sp2 (on windows xp professional) but with
>> > firewall NOT activated as default.
>>
>> Stand Alone or Domain?
>>
>> --
>> <- Shenan ->
>> --
>> The information is provided "as is", it is suggested you research for
>> yourself before you take any advice - you are the one ultimately
>> responsible for your actions/problems/solutions. Know what you are
>> getting into before you jump in with both feet.
>>
>>
>>

[AntoS]

for all computer in domain and not doing it per every single pc?



"Yves Leclerc" wrote:

> SP2 will automatically return you to a SP2 security setup window. Here, you
> can turn off the firewall.
>
>
> "AntoS" > wrote in message
> ...
> > Domain.
> >
> >
> > "Shenan Stanley" wrote:
> >
> >> AntoS wrote:
> >> > Is it possible to install sp2 (on windows xp professional) but with
> >> > firewall NOT activated as default.
> >>
> >> Stand Alone or Domain?
> >>
> >> --
> >> <- Shenan ->
> >> --
> >> The information is provided "as is", it is suggested you research for
> >> yourself before you take any advice - you are the one ultimately
> >> responsible for your actions/problems/solutions. Know what you are
> >> getting into before you jump in with both feet.
> >>
> >>
> >>
>
>
>

[Brian McMullen]

Who strongly recommends that?

-Brian
"Leythos" > wrote in message
...
> On Tue, 05 Apr 2005 18:08:31 +0800, Yao Su wrote:
>>
>> But it's strongly recommended that you install a 3rd party firewall in
>> place of Windows Firewall.
>
> Only if you are not in a domain or if you are not already in a protected
> network environment.
>
> --
>
> remove 999 in order to email me
>

[Yves Leclerc]

Each computer!


"AntoS" > wrote in message
...
> for all computer in domain and not doing it per every single pc?
>
>
>
> "Yves Leclerc" wrote:
>
>> SP2 will automatically return you to a SP2 security setup window. Here,
>> you
>> can turn off the firewall.
>>
>>
>> "AntoS" > wrote in message
>> ...
>> > Domain.
>> >
>> >
>> > "Shenan Stanley" wrote:
>> >
>> >> AntoS wrote:
>> >> > Is it possible to install sp2 (on windows xp professional) but with
>> >> > firewall NOT activated as default.
>> >>
>> >> Stand Alone or Domain?
>> >>
>> >> --
>> >> <- Shenan ->
>> >> --
>> >> The information is provided "as is", it is suggested you research for
>> >> yourself before you take any advice - you are the one ultimately
>> >> responsible for your actions/problems/solutions. Know what you are
>> >> getting into before you jump in with both feet.
>> >>
>> >>
>> >>
>>
>>
>>

[Torgeir Bakken \(MVP\)]

AntoS wrote:

> Is it possible to install sp2 (on windows xp professional) but with
> firewall NOT activated as default.
Hi

If you have Active Directory, use Group Policy for this, more about
Windows Firewall Group Policy settings in WF_XPSP2.doc:
http://www.microsoft.com/downloads/details.aspx?familyid=4454e0e1-61fa-447a-bdcd-499f73a637d1


If Group Policy is not an option:

An alternative is to set some registry settings before the SP2
installation so the FW disables itself when it finds those registry
settings. Then, if you want to enable the FW after the SP2
installation, remote in and remove the registry values and configure
the firewall.

The registry settings are:

HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Win dowsFirewall\DomainProfile
\EnableFirewall=0 (DWORD data type)

HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Win dowsFirewall\StandardProfile
\EnableFirewall=0 (DWORD data type)

(adding the registry values after SP2 is installed will also disable
the firewall at next startup)

Those registry values are documented in WF_XPSP2.doc

WF_XPSP2.doc "Deploying Windows Firewall Settings for Microsoft
Windows XP with Service Pack 2" is downloadable from
http://www.microsoft.com/downloads/details.aspx?familyid=4454e0e1-61fa-447a-bdcd-499f73a637d1


This VBScript (.vbs) creates the registry values that disables the
firewall:

'--------------------8<----------------------
Set oShell = CreateObject("WScript.Shell")

oShell.RegWrite "HKLM\SOFTWARE\Policies\Microsoft\WindowsFirewall" _
& "\DomainProfile\EnableFirewall", 0, "REG_DWORD"

oShell.RegWrite "HKLM\SOFTWARE\Policies\Microsoft\WindowsFirewall" _
& "\StandardProfile\EnableFirewall", 0, "REG_DWORD"

'--------------------8<----------------------



Another option in some cases is to use netfw.inf to disable the FW as
part of the SP2 installation:

Using the Windows Firewall INF File in Microsoft Windows XP Service Pack 2
http://www.microsoft.com/downloads/details.aspx?FamilyID=cb307a1d-2f97-4e63-a581-bf25685b4c43&displaylang=en

Note that the document in the link above does not explain what to
actually do to be able to use Netfw.inf to adjust the FW settings
as part of the SP2 installation (defined as "before installation"
above).

For instructions on how to do it, take a look at this thread:

http://groups.google.co.uk/groups?threadm=eLeh52CnEHA.592%40TK2MSFTNGP11.phx. gbl



--
torgeir, Microsoft MVP Scripting and WMI, Porsgrunn Norway
Administration scripting examples and an ONLINE version of
the 1328 page Scripting Guide:
http://www.microsoft.com/technet/scriptcenter/default.mspx