Automated Enable of XP Firewall after Sysprep

[Christopher Hota]

Hello all-

It seems that, after sysprepping, Windows turns off the internet connection
firewall, which we use quite extensively here at UW-Milwaukee. However, we
want to roll out Windows XP to our campus computer labs.

Is there a way, either through GPO, VBScripting a WMI call, or some other
magic that will let us re-enable this?

Also, are there ways to programmatically control the firewall (such as add
new rules, enable or disable existing rules, etc.)?

Thanks,

chris.

/ Chris Hota ([email protected])
| ITPS Supervisor - (R&D)
| CSC/IT Purchasing & Support
| I&MT/Student Technology Services
| UW-Milwaukee
| Bolton 218 - (414)229-3186
\ Cell Phone - (414)840-4682

 

[Ryan Anderson [MSFT]]

Hello Christopher,

You can enable ICF using group policy. In a Windows 2000 domain, you will
not see these new XP settings. In order to use them, see the "Using Windows
XP Group Policy Settings in a Windows 2000 Domain" section of the following
document:
http://www.microsoft.com/technet/tr...chnet/prodtechnol/winxppro/deploy/hmnetgp.asp

Hope this helps,

--

Ryan Anderson MCSE
Directory Services
=====================================================
When responding to posts, please "Reply to Group" via
your newsreader so that others may learn and benefit
from your issue. Please do not send e-mail directly to this
alias. This alias is for newsgroup purposes only.
=====================================================
This posting is provided "AS IS" with no warranties, and confers no rights.

 

[Christopher Hota]

Hi Ryan-

In short, this doesn't work. When I followed the instructions, I get only
the followinng policies in the GPO editor:

Prohibit use of Internet Connection Sharing on your DNS domain network
Prohibit use of Internet Connection Firewall on your DNS domain network
Prohibit installation and configuration of Network Bridge on your DNS domain
network
IEEE 802.1x Certificate Authority for Machine Authentication

None of these *enables* the ICF, the best these offer me is to disallow
turning it on.

Thoughts?

chris.