Re: WMI and WinXP SP2?

From: Torgeir Bakken \(MVP\) (Torgeir.Bakken-spam_at_hydro.com)
Date: 01/06/05


Date: Thu, 06 Jan 2005 19:00:17 +0100

Gerry Hickman wrote:

> Hi,
>
>> Look at article Q875605
>
> Thanks. If DCOM is changed, how do you fix it network wide? The article
> suggests "click on blah blah blah", but surely you are not expected to
> go to every computer to do this?
>
Hi

Using netsh.exe, you can configure the "Allow for remote administration"
setting from command line as well, like this:

netsh.exe firewall set service type=remoteadmin mode=enable scope=subnet
profile=domain

If not a domain computer, you need to change to 'profile=standard'
(or 'profile=all'). Scope can also be set to 'custom' and then you
can add ip ranges to the command line as well.

The netsh.exe syntax is documented in WF_XPSP2.doc.

WF_XPSP2.doc "Deploying Windows Firewall Settings for Microsoft
Windows XP with Service Pack 2" is downloadable from
http://www.microsoft.com/downloads/details.aspx?familyid=4454e0e1-61fa-447a-bdcd-499f73a637d1

If You have Active Directory:

As long as you have updated the domain controller with the .adm files
that comes with WinXP SP2, you will find it as a ordinary Group Policy
setting as well.

Policy path:
Computer Configuration\Administrative Templates\Network\
Network Connections\Windows Firewall\<Domain|Standard> Profile\

Policy name:
Windows Firewall: Allow remote administration exception

-- 
torgeir, Microsoft MVP Scripting and WMI, Porsgrunn Norway
Administration scripting examples and an ONLINE version of
the 1328 page Scripting Guide:
http://www.microsoft.com/technet/scriptcenter/default.mspx


Relevant Pages

  • Re: DEFINING Port Execptions Through Group Policy
    ... Excerts from the policy follow. ... exceptions list defined by Group Policy. ... port is blocked by another policy setting, such as the "Windows Firewall: ...
    (microsoft.public.windows.server.sbs)
  • Re: Windows Firewall (WindowsXP SP2)
    ... I've got exactly the same problem with finding the Network settings. ... > for the domain for the Windows Firewall settings under [Computer ... Now we've brought another building online w/ a new subnet. ... opened the group policy - But now those options are nowhere to ...
    (microsoft.public.win2000.group_policy)
  • Re: WMI and XP SP2 remote connection problem !!
    ... >> There is a Group Policy setting to open for Microsoft Management ... >> Windows Firewall: Allow remote administration exception ... >> disabling this policy setting does not block TCP port 445, ...
    (microsoft.public.win32.programmer.wmi)
  • Re: How to Allow Local Control of Windows Firewall on a Particular PC
    ... Sure, the Windows Firewall GPO can configured in Computer Configuration, ... Open "Group Policy Management" in the Administrative Tools. ... "Group Policy Infrastructure failed due to the error listed below. ...
    (microsoft.public.windows.server.sbs)
  • Re: How to Allow Local Control of Windows Firewall on a Particular PC
    ... Sure, the Windows Firewall GPO can configured in Computer Configuration, ... Open "Group Policy Management" in the Administrative Tools. ... "Group Policy Infrastructure failed due to the error listed below. ...
    (microsoft.public.windows.server.sbs)