How to open a TCP port on Windows XP SP2 Firewall: multiple computers

Hey guys.  We are in the process of upgrading our Symantec Anti-Virus Network client on one of our servers.  Symantec tech support says that in order for us to be able to do a remote install of Symantec AV on the PCs at my work, we need to create a group policy that will open up TCP port 2967 on the firewall of each PC.  The problem is, Microsoft was unable to successfully help us do this so now we're looking at manually opening this port on each user's firewall unless you guys can find another method.

What we're looking to do is open this port by deploying some kind of program or file or something so that we don't have to visit each PC and do this manually...
Who is Participating?
I wear a lot of hats...

"The solutions and answers provided on Experts Exchange have been extremely helpful to me over the last few years. I wear a lot of hats - Developer, Database Administrator, Help Desk, etc., so I know a lot of things but not a lot about one thing. Experts Exchange gives me answers from people who do know a lot about one thing, in a easy to use platform." -Todd S.

Open the Control Panel --> Windows Firewall --> Exceptions tab --> Add Port button --> name it and specify the port number.
Try this...

Use PSEXEC ( to run NoNav.exe on the remote boxes.

Download the most current .exe or .zip file and install
This can be done with GPO. The entry is "Windows Firewall: Define program exceptions"
The Ultimate Tool Kit for Technolgy Solution Provi

Broken down into practical pointers and step-by-step instructions, the IT Service Excellence Tool Kit delivers expert advice for technology solution providers. Get your free copy for valuable how-to assets including sample agreements, checklists, flowcharts, and more!

Sorry, that was programs. This one for ports:
Windows Firewall: Define port exceptions

See article here:

Experts Exchange Solution brought to you by

Your issues matter to us.

Facing a tech roadblock? Get the help and guidance you need from experienced professionals who care. Ask your question anytime, anywhere, with no hassle.

Start your 7-day free trial
You could script this:

For a new port:
Set objFirewall = CreateObject("HNetCfg.FwMgr")
Set objPolicy = objFirewall.LocalPolicy.CurrentProfile

Set objPort = CreateObject("HNetCfg.FwOpenPort")
objPort.Port = 2967
objPort.Name = "Symantec AV"
objPort.Enabled = FALSE
Set colPorts = objPolicy.GloballyOpenPorts

errReturn = colPorts.Add(objPort)

(if the port was closed, and needs to be opened)
Set objFirewall = CreateObject("HNetCfg.FwMgr")
Set objPolicy = objFirewall.LocalPolicy.CurrentProfile
Set colPorts = objPolicy.GloballyOpenPorts

Set objPort = colPorts.Item(2967,6)
objPort.Enabled = TRUE
Forced accept.

EE Admin
It's more than this solution.Get answers and train to solve all your tech problems - anytime, anywhere.Try it for free Edge Out The Competitionfor your dream job with proven skills and certifications.Get started today Stand Outas the employee with proven skills.Start learning today for free Move Your Career Forwardwith certification training in the latest technologies.Start your trial today
Anti-Virus Apps

From novice to tech pro — start learning today.