Solved

SP2 Firewall

Posted on 2004-10-21
252 Views
Last Modified: 2013-12-04
We will be rolling out SP2 Enterprise Wide at some point over the next several months.  Once all our systems are running SP2 how can I turn off the Firewall, which is on by default?  Is there some registry hack I can push out?  Thx in advance.
0
Question by:psych0naut
    8 Comments
     
    LVL 6

    Expert Comment

    by:nihlcat
    That was answered recently by this article, using GPOs :

    http://www.microsoft.com/technet/prodtechnol/winxppro/maintain/mangxpsp2/mngdepgp.mspx
    0
     
    LVL 8

    Expert Comment

    by:KerryG
    Using the above information, I would recommend not turning it off, but instead, using GPO's to only enable the ports that need to be open. By completely turning off the firewall, you are shutting down a big piece of the network security features.
    0
     
    LVL 6

    Expert Comment

    by:nihlcat
    A very good thought.
    0
     
    LVL 27

    Expert Comment

    by:Asta Cu
    0
     
    LVL 27

    Accepted Solution

    by:
    FREE Microsoft XP SP2 support
    http://support.microsoft.com/oas/default.aspx?gprid=6794
    Windows XP Service Pack 2 (SP2) for IT Professionals
    http://support.microsoft.com/gp/windowsxpsp2it
    ":0)  Asta

    P.S.  If you want walkthroughs... let us know.
    0
     
    LVL 27

    Expert Comment

    by:Asta Cu
    How to install Windows XP Service Pack 2 (SP2) by using Systems Management Server
    http://support.microsoft.com/kb/842844
    Back to work, good luck on your adventure.
    ":0) Asta
    0
     
    LVL 3

    Expert Comment

    by:Gargantubrain
    If you find you can't use GPO without a Windows 2003 server, you can still set firewall options via a login script...

    Put a line in the login script like:

    netsh -f \\servername\netlogon\xpfw.nsh

    Then put the xpfw.nsh file in the sysvol's scripts directory with entries like:

    firewall set portopening protocol = ALL port = 497 name = "Retrospect Backup" mode = ENABLE scope = SUBNET profile = DOMAIN
    firewall set portopening protocol = TCP port = 139 name = "File and Printer Sharing" mode = ENABLE scope = SUBNET profile = DOMAIN
    firewall set portopening protocol = TCP port = 445 name = "File and Printer Sharing" mode = ENABLE scope = SUBNET profile = DOMAIN
    firewall set portopening protocol = UDP port = 137 name = "File and Printer Sharing" mode = ENABLE scope = SUBNET profile = DOMAIN
    firewall set portopening protocol = UDP port = 138 name = "File and Printer Sharing" mode = ENABLE scope = SUBNET profile = DOMAIN

    Read all about the netsh command in sites like:

    http://www.microsoft.com/downloads/details.aspx?familyid=4454e0e1-61fa-447a-bdcd-499f73a637d1
    or
    http://www.jsiinc.com/SUBP/tip7900/rh7908.htm
    or
    http://www.newsarch.com/archive/newsgroup/microsoft/public/windowsxp/general/msg116275.html
    or google for your own!
    0
     
    LVL 27

    Expert Comment

    by:Asta Cu
    Thank you.  Did you get the solution you needed or would you like to discuss further?  It definitely would add value to this question thread for others if you can provide some information on the solution now that it has moved to our PAQ (Previously Asked Questions database).

    I've used the Free XP SP2 support Tech Chat interface a few times and have a current issue working; they've been GREAT.  I feel this benefits us all in the long run, since some of the issues resulted in new additions to the Microsoft Knowledge Base for other to find and hopefully will be fixed incorporated in the next Service Pack or Windows release.  In all, a win/win scenario.

    Asta
    0

    Write Comment

    Please enter a first name

    Please enter a last name

    We will never share this with anyone.

    Featured Post

    Course: Foundations of Front-End Development

    Jump-start a lucrative career in front-end web development, with zero previous coding experience required. This course covers the basic programming concepts and languages required for creating engaging websites from scratch.

    In a recent article here at Experts Exchange (http://www.experts-exchange.com/articles/18880/PaperPort-14-in-Windows-10-A-First-Look.html), I discussed my nine-month sandbox testing of the Windows 10 Technical Preview, specifically with respect to r…
    This is a short article about OS X KeRanger, and what people can do to get rid of it.
    Excel styles will make formatting consistent and let you apply and change formatting faster. In this tutorial, you'll learn how to use Excel's built-in styles, how to modify styles, and how to create your own. You'll also learn how to use your custo…
    In this seventh video of the Xpdf series, we discuss and demonstrate the PDFfonts utility, which lists all the fonts used in a PDF file. It does this via a command line interface, making it suitable for use in programs, scripts, batch files — any pl…

    933 members asked questions and received personalized solutions in the past 7 days.

    Join the community of 500,000 technology professionals and ask your questions.

    Join & Ask a Question

    Need Help in Real-Time?

    Connect with top rated Experts

    11 Experts available now in Live!

    Get 1:1 Help Now