winnt.sif firewall settings

[nothinking]

[WindowsFirewall.Standard]
Type = 1
Mode = 1
Exceptions = 1
Notifications = 1
MulticastBroadcastResponse = 1
AllowedPrograms = WindowsFirewall.RemoteAssistance, WindowsFirewall.app, WindowsFirewall.app, WindowsFirewall.prog, WindowsFirewall.example
Services = WindowsFirewall.RemoteDesktop
PortOpenings = WindowsFirewall.RPC
IcmpSettings = WindowsFirewall.EchoRequest

for the allowed programs part does anyone know what delimiter I need to use I keep getting not a valid sif file and I am not sure if it is this but it is the only thing I see as could be the problem.

[nothinking]

nevermind I fixed it had like 30 errors due to spaces and stuff. Thanks anyways

[Bastian_W]

what delimiter have you used now?

I can´t find something on the MS site...

so whats correct?

AllowedPrograms = WindowsFirewall.RemoteAssistance, WindowsFirewall.app

AllowedPrograms = WindowsFirewall.RemoteAssistance; WindowsFirewall.app

AllowedPrograms = WindowsFirewall.RemoteAssistance WindowsFirewall.app

[Bastian_W]

hm... it seamed we must use a "," in the allowedPrograms section like:

AllowedPrograms = WindowsFirewall.RemoteAssistance, WindowsFirewall.example1, WindowsFirewall.example2, WindowsFirewall.example3

[pmkochie]

I tried:

AllowedPrograms=WindowsFirewall.program1,WindowsFirewall.program2

comma without spaces and that did NOT work for me.

[pmkochie]

I ended up using the netsh command to add firewall exceptions.

Here is my exceptions.cmd file to add firewall exceptions for ZenWorks Remote Control and then Novell Distributed Print Services

cls

if EXIST %SystemDrive%\Novell\ZENRC\wuser32.exe netsh firewall add allowedprogram PROGRAM="%SystemDrive%\Novell\ZENRC\wuser32.exe" NAME="Remote Management" MODE=ENABLE PROFILE=ALL

if EXIST %windir%\System32\dpmw32.exe netsh firewall add allowedprogram PROGRAM="%windir%\System32\dpmw32.exe" NAME=NDPS MODE=ENABLE PROFILE=ALL

exit