Find a list of applications that a user has blocked?

Posted on 2005-04-26
Last Modified: 2013-12-04
I'm trying to discover how I can find a list of applications a user has blocked (by accident) under WinXP SP2.  As it stands right now, there doesn't appear to be a way to remove a block that was placed on an application??  It only shows applications that are "exceptions" -- meaning they have been granted access thru the firewall -- there is NO list of applications that have been blocked??

Thanks, Rob.

Question by:RobAinscough
    LVL 32

    Expert Comment

    Are you referring to the Windows Firewall that is included with XP SP2?

    I was not aware that you could block individual applications with it.

    In any case, if you go to the Windows Firewall dialog, select Adanced, then Security Logging -> Settings maybe you can get some information there.

    Author Comment

    Yes, windows firewall that comes with XP SP2.  When an application is requesting access thru the WinXP firewall, the user is offered a prompt "Unblock" or "Block" the application -- if the user accidently clicks on "Block" then the application will NOT be permitted to communicate thru the firewall.  If the user selects "Unblock" then that application will be stored in a list that can be viewed via Control Panel | Windows Firewall | Exceptions tab -- from here you can add programs that will NOT be blocked in the future.  But what I want to see is a list of programs that are currently being blocked -- this list apparently is NOT available to the user (Admin or otherwise) of that PC.

    I'm hoping that "restore defaults" is NOT the way to remove a "blocked" application -- as I'm sure that is a blanket approach to removing ALL blocked applications.

    I'll check out the pfirewall.log and see what info it provides.

    LVL 32

    Accepted Solution

    OK, I understand now!

    That information is in the Registry, Look in:


    What you will see there is a list of all applications, Enabled as well as Disabled, but the value will tell you which is enabled or disabled.

    Note: if you plan to modify that list, also do so in:


    LVL 5

    Expert Comment

    RobAinscough, you will see the list of exceptions in the location you specified, ie, Control Panel --> Windows Firewall --> Exceptions tab, the application will be listed but without a checkmark (unchecked).
    LVL 32

    Expert Comment

    >you will see the list of exceptions in the location you specified, ie, Control Panel --> Windows Firewall --> Exceptions tab, the application will be listed but without a checkmark (unchecked).

     Yes, pazmanpro is right, and that is the much better way to see it.

    Featured Post

    What Should I Do With This Threat Intelligence?

    Are you wondering if you actually need threat intelligence? The answer is yes. We explain the basics for creating useful threat intelligence.

    Join & Write a Comment

    No security measures warrant 100% as a "silver bullet". The truth is we also cannot assume anything but a defensive and vigilance posture. Adopt no trust by default and reveal in assumption. Only assume anonymity or invisibility in the reverse. Safe…
    Our Group Policy work started with Small Business Server in 2000. Microsoft gave us an excellent OU and GPO model in subsequent SBS editions that utilized WMI filters, OU linking, and VBS scripts. These are some of experiences plus our spending a lo…
    Need more eyes on your posted question? Go ahead and follow the quick steps in this video to learn how to Request Attention to your question. *Log into your Experts Exchange account *Find the question you want to Request Attention for *Go to the e…
    Sending a Secure fax is easy with eFax Corporate ( First, Just open a new email message.  In the To field, type your recipient's fax number You can even send a secure international fax — just include t…

    728 members asked questions and received personalized solutions in the past 7 days.

    Join the community of 500,000 technology professionals and ask your questions.

    Join & Ask a Question

    Need Help in Real-Time?

    Connect with top rated Experts

    19 Experts available now in Live!

    Get 1:1 Help Now