XP SP2 deploying

G

Guest

Hi

I am trying to deploy Win XP SP2 using SUS.Is it possible to automatically
disable the firewall of XP SP2 while it is deployed to machines using SUS.

Thanks&Regard

Salim C A
 
T

Torgeir Bakken \(MVP\)

MDB said:
I am trying to deploy Win XP SP2 using SUS.Is it possible to
automatically disable the firewall of XP SP2 while it is
deployed to machines using SUS.
Hi,

No, SUS deployment of SP2 is not able to do that.


If you have Active Directory, use Group Policy for this, more about
Windows Firewall Group Policy settings in WF_XPSP2.doc:
http://www.microsoft.com/downloads/details.aspx?familyid=4454e0e1-61fa-447a-bdcd-499f73a637d1


If Group Policy is not an option:

An alternative is to set some registry settings before or after the
SP2 installation so the FW disables itself when it finds those
registry settings.

The registry settings are:

HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\WindowsFirewall\DomainProfile
\EnableFirewall=0 (DWORD data type)

HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\WindowsFirewall\StandardProfile
\EnableFirewall=0 (DWORD data type)

(adding the registry values after SP2 is installed will also disable
the firewall at next startup)

Those registry values are documented in WF_XPSP2.doc

WF_XPSP2.doc "Deploying Windows Firewall Settings for Microsoft
Windows XP with Service Pack 2" is downloadable from
http://www.microsoft.com/downloads/details.aspx?familyid=4454e0e1-61fa-447a-bdcd-499f73a637d1


This VBScript (.vbs) creates the registry values that disables the
firewall:

'--------------------8<----------------------
Set oShell = CreateObject("WScript.Shell")

oShell.RegWrite "HKLM\SOFTWARE\Policies\Microsoft\WindowsFirewall" _
& "\DomainProfile\EnableFirewall", 0, "REG_DWORD"

oShell.RegWrite "HKLM\SOFTWARE\Policies\Microsoft\WindowsFirewall" _
& "\StandardProfile\EnableFirewall", 0, "REG_DWORD"

'--------------------8<----------------------
 

Ask a Question

Want to reply to this thread or ask your own question?

You'll need to choose a username for the site, which only take a couple of moments. After that, you can post your question and our members will help you out.

Ask a Question

Top