Re: Change SP2 firewall profile from CLI
- From: "Steven L Umbach" <n9rou@xxxxxxxxxxxxxxxxxxxxxxxxxx>
- Date: Sun, 24 Sep 2006 20:39:01 -0500
Hi Jeff.
My understanding is that unless you specify a profile the default profile is
used for the option you set in set opmode mode and is not to change mode.
The possibilities are current, standard, domain, and all. So I suspect that
your command is actually setting the Windows Firewall to be enabled in the
standard profile. As far as I know the profile used can only be determined
on whether or not the operating system detects a domain controller for it's
domain on the network it is connected to and it supposed to be periodically
be determined by the network location awareness service.
Steve
"Jeff Vandervoort" <jeffv @ jrvsystems dot com> wrote in message
news:%23KhPS8D4GHA.600@xxxxxxxxxxxxxxxxxxxxxxx
Windows XP SP2 client in SBS2003 SP1 domain. XP client firewall settings
set
by GPO.
When the computer is connected to the SBS network, and logged on to with
the Administrator account, NETSH help leads me to believe that the
command...
netsh firewall set opmode mode = enable profile = standard
...should change the firewall profile from Domain to Standard.
And when I issue the command, NETSH responds with "Ok." as though it's
actually done something useful. Yet this command...
netsh firewall show opmode
...shows that the Domain profile remains the current profile.
I've also tried it with a Scheduled Task that runs in the SYSTEM account,
with the same result.
In the GPO, "Windows Firewall: Protect all network connections" is set to
Not Configured for both profiles. I can enable and disable the firewall
from the NETSH command line, just can't switch profiles.
What's up with that?
--
Jeff Vandervoort
JRVsystems
.
- Prev by Date: Re: how to restrict users
- Next by Date: Re: whats the point of windows firewall?
- Previous by thread: Re: Can not open gpedit.msc
- Next by thread: Re: Change SP2 firewall profile from CLI
- Index(es):
Relevant Pages
|