Tek-Tips is the largest IT community on the Internet today!

Members share and learn making Tek-Tips Forums the best source of peer-reviewed technical information on the Internet!

  • Congratulations Chriss Miller on being selected by the Tek-Tips community for having the most helpful posts in the forums last week. Way to Go!

I want Windows Firewall turned off!!! 1

Status
Not open for further replies.

StressedTechie

Technical User
Jul 13, 2001
367
GB
Hi

Is there a way I can turn off the Windows Firewall in Windows XP via the login script. I have some applications adversely effected by it being on.

Cheers
ST
 
Only local administrators can successfully execute scripts or custom configuration programs for firewall settings from an email message, a file share, a Web page or the logon script.

Using Group Policy

• Computer Configuration/Administrative Templates/Network/Network Connections/Windows Firewall/Domain Profile
• Windows Firewall: Protect all network connections
Disable

• Computer Configuration/Administrative Templates/Network/Network Connections/Windows Firewall/Standard profile
• Windows Firewall: Protect all network connections
Disable

When Group Policy cannot be used or is not used, you have the following options to configure Windows Firewall settings for computers running Windows XP with SP2. Because of the requirement of the user being the local administrator of the workstation, you will have to employ RUNAS or a RUNAS wrapper to push these changes. A nice RUNAS wrapper by Forum Member Greg Palmer:
Method #1: Push registry changes through the logon script or otherwise

The registry keys to add to disable Windows Firewall for both the domain and standard profiles are the following:

• HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\WindowsFirewall
\DomainProfile \EnableFirewall=0
(DWORD data type)

• HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\WindowsFirewall
\StandardProfile \EnableFirewall=0
(DWORD data type)

Method #2: Use Netsh.exe Scripting
NETSH FIREWALL set opmode mode = DISABLE profile = ALL

For Unattended installation and other options, see:
 
Thanks bcastner I used the NETSH FIREWALL set opmode mode = DISABLE profile = ALL in my login script. Works a treat.

Thanks
 
Status
Not open for further replies.

Part and Inventory Search

Sponsor

Back
Top