Re: Enable Internet Connection Firewall

From: Torgeir Bakken \(MVP\) (Torgeir.Bakken-spam_at_hydro.com)
Date: 06/22/04 

Date: Tue, 22 Jun 2004 19:09:01 +0200

illingsk@cityofrochester.gov wrote:

> We have about fifteen hundred WinXP workstations, and no
> Windows Domain. The network is NetWare6.
>
> We would like to enable ICF on all WinXP workstations.
> However, I am unable to identify what registry settings
> are required. I haved tried using the Veritas console to
> do this, but it does not seem to handle enabling the ICF
> checkbox.
Hi

You can do it with a script (running with admin privileges).

The VBScripts in the links below demonstrates how to enable Internet
Connection Firewall on a connection, change the line
"EveryConnection.EnableInternetFirewall" to
"EveryConnection.DisableInternetFirewall" to let it disable instead
of enable.

http://groups.google.com/groups?selm=uabP%23%23QjDHA.220%40tk2msftngp13.phx.gbl
http://groups.google.com/groups?selm=uw6d%2314PEHA.2520%40TK2MSFTNGP11.phx.gbl

Here is another example:

http://groups.google.com/groups?selm=OypnPESbDHA.424%40TK2MSFTNGP10.phx.gbl

Note that when using the EnableInternetFirewall/DisableInternetFirewall
methods, a warning box will pop up where the user needs to select
between cancel or continue. A hotfix is available that changes this
behavior:

Internet Sharing Configuration Dialog Box Unexpectedly Appears
When You Programmatically Enable or Disable the ICF
http://support.microsoft.com/?kbid=814054

As the article states, you need to call Microsoft Product Support Services to
obtain it (outside the US, customers should contact their local Microsoft
subsidiary.). The support call will be be free as long as you refer to the
Knowledge Base Article number (814054) and ask for nothing more.

You will need to find the phone number from here:
http://support.microsoft.com/default.aspx?scid=fh;[LN];CNTACTMS

In the wizard, Select WinXP, and Basic, and then "It was purchased separately"

For USA, you end up here
http://support.microsoft.com/default.aspx?scid=fh;en-us;Prodoffer31

Use phone number 425-635-3311

In WinXP Service Pack 2 (currently in beta), the Firewall is enabled
as default when you install SP2.

In WinXP SP2 you can also access (list/modify) the firewall
configuration like this:

netsh.exe firewall ...

See "Appendix B" in the document in this link for more on this new netsh
interface in SP2:

http://www.microsoft.com/downloads/details.aspx?familyid=4454e0e1-61fa-447a-bdcd-499f73a637d1&displaylang=en 

-- 
torgeir, Microsoft MVP Scripting and WMI, Porsgrunn Norway
Administration scripting examples and an ONLINE version of
the 1328 page Scripting Guide:
http://www.microsoft.com/technet/community/scriptcenter/default.mspx

Relevant Pages

  • Re: Baseline script (disable services etc.)
    ... > If anyone could give me any tips (as to turning on the ICF and disabling ... Disabling of services: ... Connection Firewall on a connection, ... Note that when using the EnableInternetFirewall/DisableInternetFirewall ...
    (microsoft.public.scripting.vbscript)
  • Re: Registry Patch for XP Firewall and Windows Update
    ... You can enable XP's firewall with a script. ... Connection Firewall on a connection, ... Note that when using the EnableInternetFirewall/DisableInternetFirewall ... -- torgeir, Microsoft MVP Scripting and WMI, Porsgrunn Norway Administration scripting examples and an ONLINE version of the 1328 page Scripting Guide: ...
    (microsoft.public.windowsxp.security_admin)
  • Re: Registry patch to turn on XPs firewall?
    ... You can enable XP's firewall with a script. ... Connection Firewall on a connection, ... Note that when using the EnableInternetFirewall/DisableInternetFirewall ... -- torgeir, Microsoft MVP Scripting and WMI, Porsgrunn Norway Administration scripting examples and an ONLINE version of the 1328 page Scripting Guide: ...
    (microsoft.public.windowsxp.security_admin)
  • Re: Enable Internet Connection Firewall
    ... >Connection Firewall on a connection, ... EnableInternetFirewall/DisableInternetFirewall ... you need to call Microsoft ... >torgeir, Microsoft MVP Scripting and WMI, Porsgrunn ...
    (microsoft.public.windowsxp.security_admin)