asked on

Disable Windows Firewall Using Netsh or GP

Hello Experts,
My problem is that the windows Firewall included in XP SP2 blocks most programs i use in my LAN where i don't have a real security danger, how can i disable it using netsh utility or Group policy in 2000 server Domain.
I louked at the MS white paper about SP2 Window Firewall and i didn't found any helpfull information.

Please Help

mmbutt

I think thats what you are trying to do.

* From the Windows XP desktop, click Start, click Run, type mmc, and then click OK.
* On the File menu, click Add/Remove Snap-in.
* On the Standalone tab, click Add.
* In the Available Standalone Snap-ins list, click Group Policy Object Editor, and then click Add.
* In the Select Group Policy Object dialog box, click Browse.
* In the Browse for a Group Policy Object, click the Group Policy object that you want to update with the new Windows Firewall settings.
* Click OK.
* Click Finish to complete the Group Policy Wizard.
* In the Add Standalone Snap-in dialog box, click Close.
* In the Add/Remove Snap-in dialog box, click OK.

* In the console tree, open Computer Configuration, Administrative Templates, Network, Network Connections, and then Windows Firewall.

Detail information
http://www.microsoft.com/downloads/details.aspx?FamilyID=4454e0e1-61fa-447a-bdcd-499f73a637d1&DisplayLang=en

alaweb

ASKER

I tried This, It work on the PCs but i don't want to go to every 80 PC and do this, if this was the case i take the easiet way : Control Pannel > Windows Firewall > Disable
I want a solution like yours but using Windows 2000 Server Group Policy or using a bat file (Netsh) that i can execute on each PC remotly,
Thanks,
Alaweb

jkr

You could use sth. like

netsh firewall set adapter Local Area Connection filtering=disable

or

netsh firewall set adapter Local Area Connection port 80=enable protocol=tcp

See e.g.

http://www.microsoft.com/technet/itsolutions/network/security/ipv6fw/hcfgv601.mspx ("To configure IPv6 Internet Connection Firewall")
http://support.microsoft.com/default.aspx?scid=kb;en-us;839980 ("How to use a script to programmatically open ports for SQL Server to use on systems that are running Windows XP Service Pack 2")

They both address different issues, but serve well as examples.

ASKER CERTIFIED SOLUTION

Worked4me

membership

This solution is only available to members.

To access this solution, you must be a member of Experts Exchange.

Start Free Trial

alaweb

ASKER

====================================================
====================================================
It works, I will now Try to deploy it around The entire network.
Thanks Expert :)
====================================================
====================================================
====================================================

Worked4me

Glad I could help.

alaweb

ASKER

For deployment accross the network i had a problem: to disable Windows firewall the user had to be an administrator i used the runas command which also had a small problem :it prompt for the password, i finally used runas+sanur a utility that complete runas :
the result was like that :
%windir%\system32\runas.exe /user:DOMAIN\AN_ADMIN_USER "the bat file" | \\SERVER\NETLOGON\sanur PASSWORD

http://www.commandline.co.uk/sanur/

Thanks
Alaweb