XP SP2 Firewall + Unattended problems

[StrikerNL]

Update II: I have gotten it to work with netfw.inf. Close/delete this topic if you will.

Update: I seem to have worked it out; RealVNC is installed during a later stage (GuiRunOnce) than the firewall rules are put in place and I suppose when the .exe is not in place, the installation refuses to add an entry to Windows Firewall for it. I have done it by port which works, though I'd really prefer to do it by application and not by port, so my question becomes, can it be done that way somehow?

I've googled and searched the entire forums to no avail... I'm at a loss as to what I'm doing wrong...

I'm trying to add an entry in the Windows Firewall for RealVNC during unattended installation. For as far as I know it's all set up properly, yet when the installation is done, the entry does not show up in the Windows Firewall and the port is not opened.

Any ideas would be appreciated.

Here is my winnt.sif for reference:

[Data]
AutoPartition=1
MsDosInitiated=0
UnattendedInstall=Yes

[Unattended]
UnattendMode=FullUnattended 
OemSkipEula=Yes
OemPreinstall=Yes
OemFilesPath="\os\wxpsp2\$OEM$"
UnattendSwitch=Yes
WaitForReboot=No
FileSystem=*
DriverSigningPolicy=Ignore
NonDriverSigningPolicy=Ignore
TargetPath=\WINDOWS

[GuiUnattended]
AdminPassword=x
EncryptedAdminPassword=Yes
OEMSkipRegional=1
TimeZone=110
OemSkipWelcome=1

[UserData]
ProductID="x"
FullName="Striker Install CD"
OrgName="Da Devil Crew"
ComputerName=*

[Networking]
InstallDefaultComponents=Yes

[Shell]
DefaultStartPanelOff=Yes
DefaultThemesOff=Yes

[Identification]
JoinWorkgroup=ddcrew

[RegionalSettings]
LanguageGroup=1
Language=00000409

[WindowsFirewall]
Profiles=WindowsFirewall.Standard

[WindowsFirewall.Standard]
Type=1
Mode=1
Exceptions=1
AllowedPrograms=WindowsFirewall.RealVNC

[WindowsFirewall.RealVNC]
Program=%ProgramFiles%\RealVNC\VNC4\winvnc4.exe
Name=RealVNC
Mode=1
Scope=0

[GuiRunOnce]
%systemdrive%\install\start.bat

[Radimus]

as a bat file in runonceex

@echo Off

netsh firewall reset

netsh firewall set service fileandprint enable

netsh firewall set service remoteadmin enable

netsh firewall set service remotedesktop enable

netsh firewall set icmpsetting 8 enable

netsh firewall add allowedprogram "%programfiles%\netmeeting\conf.exe" NetMeeting enable

netsh firewall add allowedprogram "%windir%\system32\r_server.exe" RAdmin enable