Re: Turing of SP2 Firewall via registry entry?

From: Torgeir Bakken \(MVP\) (Torgeir.Bakken-spam_at_hydro.com)
Date: 08/29/04 

Date: Sun, 29 Aug 2004 03:08:49 +0200

David H. Lipman wrote:

> Togeir !
> I should have known. The man is a scripting genious.
>
> Information contained in -- WF_XPSP2.doc
>
> I read that about 2 or 3 weeks ago. Its not pretty. It needs the SP2 EXE extracted. I'd
> rather keep the EXE in its 266MB distriburtion executable so I dropped that idea. I want a
> solution to be done AFTER SP2 is installed either before rebooting the PC or something I can
> run in RunServicesOnce or RunOnce from the Registry upon the reboot.
Hi

There are several solutions available to disable the firewall
programmatically without extracting the SP2 EXE file.

Here are two ways:

1)

Adding the registry values mentioned, this can be done either
before or after SP2 is installed

The registry key path has changed since I posted that post (it
is now WindowsFirewall instead of FirewallPolicy):

HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\WindowsFirewall\DomainProfile
          \EnableFirewall=0 (DWORD data type)

HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\WindowsFirewall\StandardProfile
          \EnableFirewall=0 (DWORD data type)

Those registry values are documented in WF_XPSP2.doc

WF_XPSP2.doc "Deploying Windows Firewall Settings for Microsoft
Windows XP with Service Pack 2" is downloadable from
http://www.microsoft.com/downloads/details.aspx?familyid=4454e0e1-61fa-447a-bdcd-499f73a637d1

If you want to disable the service as well:

sc.exe config SharedAccess start= disabled

2)

The following command line will disable SP2's firewall (must be
run after SP2 is installed and at least one reboot is done):

netsh.exe firewall set opmode mode=disable profile=all

The netsh.exe syntax is also documented in WF_XPSP2.doc.

If you want to disable the service as well:

sc.exe config SharedAccess start= disabled 

-- 
torgeir, Microsoft MVP Scripting and WMI, Porsgrunn Norway
Administration scripting examples and an ONLINE version of
the 1328 page Scripting Guide:
http://www.microsoft.com/technet/scriptcenter/default.mspx

Relevant Pages

  • Re: Connect fine but no sync after SP2
    ... I looked in a couple of areas of the registry and didn't find any entries. ... This PC is within our corporate network behind our firewall so there is no ... I do NOT use the SP2 firewall. ...
    (microsoft.public.pocketpc.activesync)
  • Re: Disabling firewall with a script
    ... >> How can i disable the firewall with a script. ... >> Do I need to modify the registry? ... > This VBScript creates the registry values that disables the ... > torgeir, Microsoft MVP Scripting and WMI, Porsgrunn Norway ...
    (microsoft.public.windowsxp.general)
  • Re: Group Policy , XPSP2 Windows Firewall, 2000 Server
    ... > exceptions and Windows Firewall: ... From: Mark Williams [MSFT] ... XP SP2 ADM File-Related Fixes Available From PSS ... -- torgeir, Microsoft MVP Scripting and WMI, Porsgrunn Norway Administration scripting examples and an ONLINE version of the 1328 page Scripting Guide: ...
    (microsoft.public.win2000.group_policy)
  • Re: Messager Service for Client Administration
    ... With the install of SP2 on XP it is disabled. ... As you are protected by a good firewall and patches in a timely manner, ... -- torgeir, Microsoft MVP Scripting and WMI, Porsgrunn Norway Administration scripting examples and an ONLINE version of the 1328 page Scripting Guide: ...
    (microsoft.public.windowsxp.security_admin)
  • Re: XP SP2 disable firewall
    ... >> I need to deploy SP2 without the firewall on by default. ... but I need to be able to have SP2 ... >> to edit the install package. ... > An alternative is to set some registry settings before the SP2 ...
    (microsoft.public.windowsxp.general)