SP2 Firewall Settings for Windows XP
SOLUTIONS
Inventory Manager
Control Center
NSMC
TASK
How To configure Service Pack 2 Firewall for Windows XP in my environment.
HOW TO
Windows XP Service Pack 2
Windows XP Service Pack 2 was enhanced with security by adding in a firewall, which will block all incoming traffic. This also restricts an administrator's ability to access and manage remote system. The firewall will allow you to make additions for remote management, which allows administrator's to gain acess, but keeps unwanted users out. You will need to make modifications to the netfw.inf file, and enable remote adimistration. More information can be found at Microsoft:
Microsoft XP SP2 Firewall Settings
Example Netfw.inf
This example netfw.inf file opens up Ping and Remote Administration to the local subnet defined by scope. You can replace the scope with a number of methods to allow running the INSYSTEK solution. Refer to linked documentation for alternate scope options.
[version]
Signature= "$Windows NT$"
DriverVer=07/01/2001,5.1.2600.2096
[DefaultInstall]
AddReg=ICF.AddReg.DomainProfile
AddReg=ICF.AddReg.StandardProfile
[ICF.AddReg.DomainProfile]
HKLM,"SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\
IcmpSettings","AllowInboundEchoRequest",0x00010001,1
HKLM,"SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\
RemoteAdminSettings","Enabled",0x00010001,1
HKLM,"SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\
RemoteAdminSettings","RemoteAddresses",0x00000000,%scope%
[ICF.AddReg.StandardProfile]
HKLM,"SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile
\IcmpSettings","AllowInboundEchoRequest",0x00010001,1
HKLM,"SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile
\RemoteAdminSettings","Enabled",0x00010001,1
HKLM,"SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\
RemoteAdminSettings","RemoteAddresses",0x00000000,%scope%
[Strings]
hostlist = localsubnet
Once this file has been replace, you will need to run the command prompt: netsh firewall reset
Active Directory
You can also use a Group Policy for the similar task of setting Remote Administration for the firewall.
»
| 
