Changing Windows Firewall

[druiddk]

I spent some time figuring this out so I thought it might be useful to someone else:

Example of allowing local exe file:

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List]
"C:\\Programmer\\software\\Program.exe"="C:\\Programmer\\Software\\Program.exe:*:Enabled:Program"

Example of remote (windows share) exe file:

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List]
"\\\\data-server\\storage\\software\\Program.exe"="\\\\data-server\\storage\\software\\Program.exe:*:Enabled:Program"

Example of opening ports:

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\GloballyOpenPorts\List]
"1900:UDP"="1900:UDP:LocalSubNet:Enabled:@xpsp2res.dll,-22007"
"2869:TCP"="2869:TCP:LocalSubNet:Enabled:@xpsp2res.dll,-22008"

I wondered if this is supposed to be in regtweaks part 3 but since its not something that you can use without modifying it I decided to post it seperately.

Edited December 13, 2005 by druiddk

[cluberti]

These sorts of things can also be very easily done via a script using the netsh command:

http://www.microsoft.com/technet/prodtechn...d045f8de79.mspx

[druiddk]

Very informative!

Thank you so much for the link cluberti