XPSP2 causing me a lot of work???

[Erik]

Let's say you are going to deploy this over 100 PC's all
sharing files and printers. By default when you install
the service pack, file and printer sharing are disabled
in the firewall, pings are blocked, our VNC connections
are all denied. To reset all of the settings on evey PC
is going to be a pain. Is there a way to modify any of
this before my SUS push? It's going to be chaos when no
one can print after all of the installs go through. All
of my PC's with network shares are going to choke too.

 

[Mike Kolitz]

Erik,

How do you manage all of these PCs? Group Policy? Logon Scripts?

 

[PA Bear]

Luck?

Erik,

How do you manage all of these PCs? Group Policy? Logon Scripts?

 

[Torgeir Bakken \(MVP\)]

Let's say you are going to deploy this over 100 PC's all
sharing files and printers. By default when you install
the service pack, file and printer sharing are disabled
in the firewall, pings are blocked, our VNC connections
are all denied. To reset all of the settings on evey PC
is going to be a pain. Is there a way to modify any of
this before my SUS push? It's going to be chaos when no
one can print after all of the installs go through. All
of my PC's with network shares are going to choke too.

Hi

As it looks like you are most concerned about the effects of the
firewall, pre-configure the computers so SP2 does not enable the
firewall as part of the installation. Then you can later on
configure the firewall to what fits your environment before you
enable it again (if that is what you want) using e.g. netsh.exe.


WF_XPSP2.doc mentions that you can create the following registry
values *before* you install SP2 so the firewall will no activate
itself as part of the SP2 installation.

HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\FirewallPolicy\DomainProfile
\EnableFirewall=0 (DWORD data type)

HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\FirewallPolicy\StandardProfile
\EnableFirewall=0 (DWORD data type)


The netsh.exe syntax is also documented in WF_XPSP2.doc.

WF_XPSP2.doc "Deploying Windows Firewall Settings for Microsoft
Windows XP with Service Pack 2" is downloadable from
http://www.microsoft.com/downloads/details.aspx?familyid=4454e0e1-61fa-447a-bdcd-499f73a637d1

 

[Ian \jwoulf\ Johnson]

Let's say you are going to deploy this over 100 PC's all
sharing files and printers. By default when you install
the service pack, file and printer sharing are disabled
in the firewall, pings are blocked, our VNC connections
are all denied. To reset all of the settings on evey PC
is going to be a pain. Is there a way to modify any of
this before my SUS push? It's going to be chaos when no
one can print after all of the installs go through. All
of my PC's with network shares are going to choke too.

Here's a quick registry tweak that will disable the firewall service,
all you will have to do is doubleclick on the .reg file after you reboot
after finishing with the SP2 installation, then reboot again.

Put the following text into a TXT file and change it's extention to .reg

Windows Registry Editor Version 5.00

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess]
"Start"=dword:00000004