Remove Windows Firewall Exceptions

[Neily]

I'm configuring our network to use the Windows Firewall in conjunction with our hardware firewalls.

At present they are all turned off on the desktops, but I want to configure them using Group Policy.

Some programs have already added exceptions, which I'd like to remove.

Is there a script or GPO that I can run to do this to every machine, and thus only have them with my GP exceptions?

THANKS

 

[JFBouchard]

Hi, since the firewall policy is located in the registry:
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services
\SharedAccess\Parameters\FirewallPolicy

You can easily clean up everything through system policies and replace the values with your standards settings.


Hope this helps. Please let know if this resolve your issue

Jeff

 

[linney]

Anything here?

Using the Windows Firewall INF File in Microsoft Windows XP Service Pack 2

http://www.microsoft.com/downloads/...1d-2f97-4e63-a581-bf25685b4c43&displaylang=en

Deploying Windows Firewall Settings for Microsoft Windows XP with Service Pack 2

http://www.microsoft.com/downloads/...e1-61fa-447a-bdcd-499f73a637d1&displaylang=en

Managing Windows XP Service Pack 2 Features Using Group Policyeploying Group Policy Settings in SP2

http://www.microsoft.com/technet/prodtechnol/winxppro/maintain/mangxpsp2/mngdepgp.mspx

 

[bcastner]

This would require at most one line to the Netsh.exe "Firewall Helper Service" command line utility native to XP SP2:

http://support.microsoft.com/default.aspx?kbid=875357

netsh firewall reset