?
Solved

Modifying netfw.inf for XP sp2 install

Posted on 2004-08-16
1
Medium Priority
?
211 Views
Last Modified: 2007-12-19
I have downloaded and extracted XP sp2.  I want to modify the netfw.in_ file before I roll the service pack out to my LAN XP users.  I uncompressed the netfw.in_ file by using the "extract" command and produced the netfw.inf file.  I made the desired changes to the netfw.inf file and used the "compress" command to recreate the newly modified netfw.in_ file.  I did this for the netfw.in_ file under the "ip" and "ic" directories.

When I run XP2 update executable "i386\update\update.exe", the service pack starts to install but fails trying to install i386\ip\netfw.inf.  Any ideas on what I've overlooked?

JSTOLL2  
0
Comment
Question by:jstoll2
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
1 Comment
 
LVL 17

Accepted Solution

by:
Eagle6990 earned 1500 total points
ID: 11816830
Just to recap.  It might be best to start over and modify from the beginning.


http://www.microsoft.com/downloads/details.aspx?FamilyID=4454e0e1-61fa-447a-bdcd-499f73a637d1&DisplayLang=en

Appendix F: Example of Using the Netfw.inf File
You can use the Netfw.inf file to implement custom Windows Firewall settings when performing an interactive installation of Windows XP SP2 from a central file share that contains all of the Windows XP SP2 files.
The default contents of the Netfw.inf file are the following:
[version]
Signature      = "$Windows NT$"
DriverVer      =07/01/2001,5.1.2600.2132

[DefaultInstall]
AddReg=ICF.AddReg.DomainProfile
AddReg=ICF.AddReg.StandardProfile

[ICF.AddReg.DomainProfile]
HKLM,"SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\AuthorizedApplications\List","%windir%\system32\sessmgr.exe",0x00000000,"%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"

[ICF.AddReg.StandardProfile]
HKLM,"SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List","%windir%\system32\sessmgr.exe",0x00000000,"%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"  
The first two sections of Netfw.inf contain versioning and configuration information and do not need to be modified. The sections that are significant for modifying the default configuration for Windows Firewall are the following:
•     ICF.AddReg.DomainProfile – Defines changes to Windows Firewall’s default configuration when a computer is connected to a network that contains domain controllers for the domain of which the computer is a member.
•     ICF.AddReg.StandardProfile – Defines changes to Windows Firewall’s default configuration when a computer is not connected to a network that contains domain controllers for the domain of which the computer is a member. If a computer is not a member of a domain, Windows Firewall uses the configuration stored in the standard profile.  
For example, to modify the default Netfw.inf file to contain a setting to disable the use of Windows Firewall for the domain profile because another host firewall is being used, you would add the following line to the ICF.AddReg.DomainProfile section:
HKLM,"SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile","EnableFirewall",0x00010001,0
For more information about using the Netfw.inf file, see Using the Windows Firewall INF File in Microsoft Windows XP Service Pack 2.
0

Featured Post

On Demand Webinar - Networking for the Cloud Era

This webinar discusses:
-Common barriers companies experience when moving to the cloud
-How SD-WAN changes the way we look at networks
-Best practices customers should employ moving forward with cloud migration
-What happens behind the scenes of SteelConnect’s one-click button

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Can I legally transfer my OEM version of Windows to another PC?  (AKA - Can I put a new systemboard in my OEM PC?) Few of us are both IT and legal experts but we all have our own views of Microsoft's licensing rules and how they apply.  There are…
This article provides a convenient collection of links to Microsoft provided Security Patches for operating systems that have reached their End of Life support cycle. Included operating systems covered by this article are Windows XP,  Windows Server…
Two types of users will appreciate AOMEI Backupper Pro: 1 - Those with PCIe drives (and haven't found cloning software that works on them). 2 - Those who want a fast clone of their boot drive (no re-boots needed) and it can clone your drive wh…
How to fix incompatible JVM issue while installing Eclipse While installing Eclipse in windows, got one error like above and unable to proceed with the installation. This video describes how to successfully install Eclipse. How to solve incompa…
Suggested Courses

765 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question