Modify firewall configuration by command line.

[oli_tpalm]

Hello,

i need to modify (by cmd line) the configuration of WXP SP1 firewall
and add a specific application (VNC f.i.). The software is installed in
silent mode by a script with administrators rights, i found the
solution with SP2 (just add the .reg containing concerned application)
but no way for XP SP1, the registry is too different. Someone can help
me, please ??

 

[Doug Knox MS-MVP]

The NETSH FIREWALL command is not supported in SP1 systems. This was added for SP2.

 

[oli_tpalm]

Hi, thanks for your quick answer. So there is no solution with sp1 ? I
have about 200 computers to verify in Belgium !!! Do i need to install
sp2 on all computers ? Is there no alternative ?

 

[Torgeir Bakken \(MVP\)]

Hello,

i need to modify (by cmd line) the configuration of WXP SP1 firewall
and add a specific application (VNC f.i.). The software is installed in
silent mode by a script with administrators rights, i found the
solution with SP2 (just add the .reg containing concerned application)
but no way for XP SP1, the registry is too different. Someone can help
me, please ??

Hi,

You can use e.g. a JScript to open ports in the WinXP SP1 firewall:

Adding and Removing Port Mappings (JScript)
http://msdn.microsoft.com/library/e...emoving_port_mappings_jscript_.asp?frame=true

 

[Doug Knox MS-MVP]

There is no command line interface for configuring the SP1 firewall. You could use tools such as RegMon and FileMon from www.sysinternals.com to track the changes that are made to the Registry and re-create the needed REG file. For command line configuration, you'll have to update to SP2 or go with a 3rd party firewall.