MDB said:
I am trying to deploy Win XP SP2 using SUS.Is it possible to
automatically disable the firewall of XP SP2 while it is
deployed to machines using SUS.
Hi,
No, SUS deployment of SP2 is not able to do that.
If you have Active Directory, use Group Policy for this, more about
Windows Firewall Group Policy settings in WF_XPSP2.doc:
http://www.microsoft.com/downloads/details.aspx?familyid=4454e0e1-61fa-447a-bdcd-499f73a637d1
If Group Policy is not an option:
An alternative is to set some registry settings before or after the
SP2 installation so the FW disables itself when it finds those
registry settings.
The registry settings are:
HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\WindowsFirewall\DomainProfile
\EnableFirewall=0 (DWORD data type)
HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\WindowsFirewall\StandardProfile
\EnableFirewall=0 (DWORD data type)
(adding the registry values after SP2 is installed will also disable
the firewall at next startup)
Those registry values are documented in WF_XPSP2.doc
WF_XPSP2.doc "Deploying Windows Firewall Settings for Microsoft
Windows XP with Service Pack 2" is downloadable from
http://www.microsoft.com/downloads/details.aspx?familyid=4454e0e1-61fa-447a-bdcd-499f73a637d1
This VBScript (.vbs) creates the registry values that disables the
firewall:
'--------------------8<----------------------
Set oShell = CreateObject("WScript.Shell")
oShell.RegWrite "HKLM\SOFTWARE\Policies\Microsoft\WindowsFirewall" _
& "\DomainProfile\EnableFirewall", 0, "REG_DWORD"
oShell.RegWrite "HKLM\SOFTWARE\Policies\Microsoft\WindowsFirewall" _
& "\StandardProfile\EnableFirewall", 0, "REG_DWORD"
'--------------------8<----------------------