Windows XP SP2 firewall setting

[Guest]

I'm trying to figure out a way to disable the firewall without using the GUI.

I've figure out I can use "netsh firewall set opmode .." to disable the
firewall,
but it would be better if I knew where the information is stored and how it is
presented with what value. I'm guessing the info is stored in the registry.
It's not stored in a .ini or .inf file, is it?

Oh~, the reason I need this info is because about 100~200 people need the
firewall setting to be disabled. Best way to do it would be by using some
kind
of script. Problem is, I don't know where the firewall info is stored.

 

[Torgeir Bakken \(MVP\)]

I'm trying to figure out a way to disable the firewall without using the GUI.

I've figure out I can use "netsh firewall set opmode .." to disable the
firewall,
but it would be better if I knew where the information is stored and how it is
presented with what value. I'm guessing the info is stored in the registry.
It's not stored in a .ini or .inf file, is it?

Oh~, the reason I need this info is because about 100~200 people need the
firewall setting to be disabled. Best way to do it would be by using some
kind
of script. Problem is, I don't know where the firewall info is stored.

Hi

If you have Active Directory, using Group Policy for this is usually
the best option.

There are several solutions available to disable the firewall
not using GPO.

Here are two ways:

1)
Adding the registry values below, this can be done either
before or after SP2 is installed:


HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\WindowsFirewall\DomainProfile
\EnableFirewall=0 (DWORD data type)

HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\WindowsFirewall\StandardProfile
\EnableFirewall=0 (DWORD data type)

Those registry values are documented in WF_XPSP2.doc

WF_XPSP2.doc "Deploying Windows Firewall Settings for Microsoft
Windows XP with Service Pack 2" is downloadable from
http://www.microsoft.com/downloads/details.aspx?familyid=4454e0e1-61fa-447a-bdcd-499f73a637d1



2)

The following command line will disable SP2's firewall (must be
run after SP2 is installed and at least one reboot is done):

netsh.exe firewall set opmode mode=disable profile=all

(this will do the same as the registry values above)

The netsh.exe syntax is also documented in WF_XPSP2.doc.


If you want to disable the firewall service as well, run this command
line (do not remove the space after start= ):

sc.exe config SharedAccess start= disabled