Re: SP2 disabling firewall

AntoS wrote:

Is it possible to install sp2 (on windows xp professional) but with
firewall NOT activated as default.

Hi

If you have Active Directory, use Group Policy for this, more about
Windows Firewall Group Policy settings in WF_XPSP2.doc:
http://www.microsoft.com/downloads/details.aspx?familyid=4454e0e1-61fa-447a-bdcd-499f73a637d1


If Group Policy is not an option:

An alternative is to set some registry settings before the SP2
installation so the FW disables itself when it finds those registry
settings. Then, if you want to enable the FW after the SP2
installation, remote in and remove the registry values and configure
the firewall.

The registry settings are:

HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\WindowsFirewall\DomainProfile
\EnableFirewall=0 (DWORD data type)

HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\WindowsFirewall\StandardProfile
\EnableFirewall=0 (DWORD data type)

(adding the registry values after SP2 is installed will also disable
the firewall at next startup)

Those registry values are documented in WF_XPSP2.doc

WF_XPSP2.doc "Deploying Windows Firewall Settings for Microsoft
Windows XP with Service Pack 2" is downloadable from
http://www.microsoft.com/downloads/details.aspx?familyid=4454e0e1-61fa-447a-bdcd-499f73a637d1


This VBScript (.vbs) creates the registry values that disables the
firewall:

'--------------------8<----------------------
Set oShell = CreateObject("WScript.Shell")

oShell.RegWrite "HKLM\SOFTWARE\Policies\Microsoft\WindowsFirewall" _
                & "\DomainProfile\EnableFirewall", 0, "REG_DWORD"

oShell.RegWrite "HKLM\SOFTWARE\Policies\Microsoft\WindowsFirewall" _
                & "\StandardProfile\EnableFirewall", 0, "REG_DWORD"

'--------------------8<----------------------



Another option in some cases is to use netfw.inf to disable the FW as
part of the SP2 installation:

Using the Windows Firewall INF File in Microsoft Windows XP Service Pack 2
http://www.microsoft.com/downloads/details.aspx?FamilyID=cb307a1d-2f97-4e63-a581-bf25685b4c43&displaylang=en

Note that the document in the link above does not explain what to
actually do to be able to use Netfw.inf to adjust the FW settings
as part of the SP2 installation (defined as "before installation"
above).

For instructions on how to do it, take a look at this thread:

http://groups.google.co.uk/groups?threadm=eLeh52CnEHA.592%40TK2MSFTNGP11.phx.gbl



--
torgeir, Microsoft MVP Scripting and WMI, Porsgrunn Norway
Administration scripting examples and an ONLINE version of
the 1328 page Scripting Guide:
http://www.microsoft.com/technet/scriptcenter/default.mspx
.

Relevant Pages

  • OT: WinXP SP2 Release Candidate
    ... the installation takes a good long time. ... there are some new security settings. ... the firewall seems to have at least three times as many ... It seems that the graphical appearance of security warnings encountered on ...
    (microsoft.public.backoffice.smallbiz2000)
  • Re: Setup Error when connecting Xbox 360 to MCE2005 PC
    ... Do you have any services with Firewall in the name? ... the Windows Firewall service should still ... Attempt to add your Xbox 360 again via the Media Center Extender ... User used for installation has Administrator privileges. ...
    (microsoft.public.windows.mediacenter)
  • XP-SP2 - Few things to consider while installing
    ... Only disable your firewall if you have downloaded the SP ... >that you run prior to installation. ... >causes a potential conflict with the Windows firewall ... >running once SP2 installation is complete. ...
    (microsoft.public.windowsxp.general)
  • Re: XP Firewall per PGO abschalten
    ... Deploying Windows Firewall Settings With Group Policy. ... Updating Your Group Policy Objects With the New Windows Firewall Settings. ...
    (microsoft.public.de.german.windows.server.active_directory)
  • Re: Firewall turned off
    ... let me change any settings do to administration group setting. ... Use a better firewall, try this one. ... settings for the Windows Firewall. ...
    (microsoft.public.windowsxp.help_and_support)
Quantcast