Can some give me a good example what a "program exception" in the W2K3 firewall. I understand the port exceptions, but what does the program exceptions do? I have several program exceptions that are getting published to my W2K3 servers (via GPO, from a former admin) and I want to clean up the firewall exceptions. I have always been confused on what actually does a "program exception" does. My assumptions is if I set a program exception, ports that program wants to open will do so.... is this correct?