Remotely disable / enable windows firewall

How can I disable / enable windows firewall remotely?
Windows XP SP2 machines connected to Active Directory domain.
bigd563Asked:
Who is Participating?
I wear a lot of hats...

"The solutions and answers provided on Experts Exchange have been extremely helpful to me over the last few years. I wear a lot of hats - Developer, Database Administrator, Help Desk, etc., so I know a lot of things but not a lot about one thing. Experts Exchange gives me answers from people who do know a lot about one thing, in a easy to use platform." -Todd S.

Aland CoonsSystems EngineerCommented:
Yes, you most definately can.

See:
Managing Windows XP Service Pack 2 Features Using Group Policy
http://www.microsoft.com/technet/prodtechnol/winxppro/maintain/mangxpsp2/mngdepgp.mspx

Disabling the Windows Firewall
http://www.utexas.edu/its/windows/resources/disable-wfw.html
(Scroll down to Method C)
0
aissimCommented:
That is definitely the best solution for a long-term fix.

Just in case you were looking to disable/enable the firewall as needed, or more of a short-term thing, Microsoft (Sysinternals) has a utility that allows you to stop or start services on a remote machine: http://www.microsoft.com/technet/sysinternals/utilities/psservice.mspx
0

Experts Exchange Solution brought to you by

Your issues matter to us.

Facing a tech roadblock? Get the help and guidance you need from experienced professionals who care. Ask your question anytime, anywhere, with no hassle.

Start your 7-day free trial
kamalgopiCommented:
hi i think the best way is to GPO so you can control it globally raher going to individual pc.
see the link below and you will understand
http://www.bookpool.com/ct/165
0
WeirdFishesCommented:
@ bigd563, aissim,

was it possible to disable a remote machines firewall with psservice? because i'm trying to and i get an error the network path was not found, it makes scence that i can't disable it as the firewall itself is blocking access. obviously when the firewall is off i can start and stop services with psservice....

i don't want to disable it through GPO yet as i've only started my new job this week and don't want to make any big changes to the network yet.

thanks in advanced..
0
Aland CoonsSystems EngineerCommented:
@WierdFishes,

You'll find that a GPO need not be applied to a large group.  The safest way is to have a test group and test machine to apply the GPO and test.  GPO is the best long term fix as per 'kamalgopi'. That said -- sysInternals tools are awesome!  But managing issues one-pc-at-a-time is a P.I.T.A. especially when (as the questions states -- you have a AD domain) and you can simply create a GPO called "no windows firewall" test first then pply it as needed.
0
It's more than this solution.Get answers and train to solve all your tech problems - anytime, anywhere.Try it for free Edge Out The Competitionfor your dream job with proven skills and certifications.Get started today Stand Outas the employee with proven skills.Start learning today for free Move Your Career Forwardwith certification training in the latest technologies.Start your trial today
Windows XP

From novice to tech pro — start learning today.