Solved

Modifying netfw.inf for XP sp2 install

Posted on 2004-08-16
1
201 Views
Last Modified: 2007-12-19
I have downloaded and extracted XP sp2.  I want to modify the netfw.in_ file before I roll the service pack out to my LAN XP users.  I uncompressed the netfw.in_ file by using the "extract" command and produced the netfw.inf file.  I made the desired changes to the netfw.inf file and used the "compress" command to recreate the newly modified netfw.in_ file.  I did this for the netfw.in_ file under the "ip" and "ic" directories.

When I run XP2 update executable "i386\update\update.exe", the service pack starts to install but fails trying to install i386\ip\netfw.inf.  Any ideas on what I've overlooked?

JSTOLL2  
0
Comment
Question by:jstoll2
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
1 Comment
 
LVL 17

Accepted Solution

by:
Eagle6990 earned 500 total points
ID: 11816830
Just to recap.  It might be best to start over and modify from the beginning.


http://www.microsoft.com/downloads/details.aspx?FamilyID=4454e0e1-61fa-447a-bdcd-499f73a637d1&DisplayLang=en

Appendix F: Example of Using the Netfw.inf File
You can use the Netfw.inf file to implement custom Windows Firewall settings when performing an interactive installation of Windows XP SP2 from a central file share that contains all of the Windows XP SP2 files.
The default contents of the Netfw.inf file are the following:
[version]
Signature      = "$Windows NT$"
DriverVer      =07/01/2001,5.1.2600.2132

[DefaultInstall]
AddReg=ICF.AddReg.DomainProfile
AddReg=ICF.AddReg.StandardProfile

[ICF.AddReg.DomainProfile]
HKLM,"SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\AuthorizedApplications\List","%windir%\system32\sessmgr.exe",0x00000000,"%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"

[ICF.AddReg.StandardProfile]
HKLM,"SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List","%windir%\system32\sessmgr.exe",0x00000000,"%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"  
The first two sections of Netfw.inf contain versioning and configuration information and do not need to be modified. The sections that are significant for modifying the default configuration for Windows Firewall are the following:
•     ICF.AddReg.DomainProfile – Defines changes to Windows Firewall’s default configuration when a computer is connected to a network that contains domain controllers for the domain of which the computer is a member.
•     ICF.AddReg.StandardProfile – Defines changes to Windows Firewall’s default configuration when a computer is not connected to a network that contains domain controllers for the domain of which the computer is a member. If a computer is not a member of a domain, Windows Firewall uses the configuration stored in the standard profile.  
For example, to modify the default Netfw.inf file to contain a setting to disable the use of Windows Firewall for the domain profile because another host firewall is being used, you would add the following line to the ICF.AddReg.DomainProfile section:
HKLM,"SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile","EnableFirewall",0x00010001,0
For more information about using the Netfw.inf file, see Using the Windows Firewall INF File in Microsoft Windows XP Service Pack 2.
0

Featured Post

Free Tool: Postgres Monitoring System

A PHP and Perl based system to collect and display usage statistics from PostgreSQL databases.

One of a set of tools we are providing to everyone as a way of saying thank you for being a part of the community.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Ok I have been working on this for some time having learned and gained certification in XenDesktop 4 along came version 5 which was released last month. Since then I have been working to deploy XenDesktop 5 in a small environment with only 2 virt…
Sometimes people don't understand why download speed shows differently for Windows than Linux.Specially, this article covers and shows the solution for throughput difference for Windows than a Linux machine. For this, I arranged a test scenario.I…
Two types of users will appreciate AOMEI Backupper Pro: 1 - Those with PCIe drives (and haven't found cloning software that works on them). 2 - Those who want a fast clone of their boot drive (no re-boots needed) and it can clone your drive wh…
Attackers love to prey on accounts that have privileges. Reducing privileged accounts and protecting privileged accounts therefore is paramount. Users, groups, and service accounts need to be protected to help protect the entire Active Directory …

733 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question