Update II: I have gotten it to work with netfw.inf. Close/delete this topic if you will. Update: I seem to have worked it out; RealVNC is installed during a later stage (GuiRunOnce) than the firewall rules are put in place and I suppose when the .exe is not in place, the installation refuses to add an entry to Windows Firewall for it. I have done it by port which works, though I'd really prefer to do it by application and not by port, so my question becomes, can it be done that way somehow? I've googled and searched the entire forums to no avail... I'm at a loss as to what I'm doing wrong... I'm trying to add an entry in the Windows Firewall for RealVNC during unattended installation. For as far as I know it's all set up properly, yet when the installation is done, the entry does not show up in the Windows Firewall and the port is not opened. Any ideas would be appreciated. Here is my winnt.sif for reference: [Data] AutoPartition=1 MsDosInitiated=0 UnattendedInstall=Yes [Unattended] UnattendMode=FullUnattended OemSkipEula=Yes OemPreinstall=Yes OemFilesPath="\os\wxpsp2\$OEM$" UnattendSwitch=Yes WaitForReboot=No FileSystem=* DriverSigningPolicy=Ignore NonDriverSigningPolicy=Ignore TargetPath=\WINDOWS [GuiUnattended] AdminPassword=x EncryptedAdminPassword=Yes OEMSkipRegional=1 TimeZone=110 OemSkipWelcome=1 [UserData] ProductID="x" FullName="Striker Install CD" OrgName="Da Devil Crew" ComputerName=* [Networking] InstallDefaultComponents=Yes [Shell] DefaultStartPanelOff=Yes DefaultThemesOff=Yes [Identification] JoinWorkgroup=ddcrew [RegionalSettings] LanguageGroup=1 Language=00000409 [WindowsFirewall] Profiles=WindowsFirewall.Standard [WindowsFirewall.Standard] Type=1 Mode=1 Exceptions=1 AllowedPrograms=WindowsFirewall.RealVNC [WindowsFirewall.RealVNC] Program=%ProgramFiles%\RealVNC\VNC4\winvnc4.exe Name=RealVNC Mode=1 Scope=0 [GuiRunOnce] %systemdrive%\install\start.bat