Feed Icon  

Contact

  • Bryant Likes
  • Send mail to the author(s) E-mail
  • twitter
  • View Bryant Likes's profile on LinkedIn
  • del.icio.us
Get Microsoft Silverlight
by clicking "Install Microsoft Silverlight" you accept the
Silverlight license agreement

Hosting By

Dedicated Windows Server Hosting by ORCS Web

Hot Topics

Tags

.NET (12) ASP.Net/Web Services (45) Astoria (2) Avanade (25) BizTalk (23) Certifications (11) Community Server (2) Cycling (2) dasBlog (1) Deep Zoom (1) Gadgets (25) General (172) Hyper-V (1) Live Writer (4) MVC (2) Reporting Services (43) RiaServices (1) SharePoint (65) Silverlight (33) Sql and Xml (59) Sync Framework (1) Tech-Ed 2008 (1) Test-Driven Dev (12) Twitter (4) UX (3) Virtualization (3) Vista (12) Visual Studio (2) WCF (9) WF (6) Windows Mobile (15) Windows Server 2008 (2) WPF (18) WPF/E (20) Zune (1)

Open Source Projects

Archives

January, 2010 (1)
October, 2009 (3)
September, 2009 (2)
March, 2009 (5)
February, 2009 (4)
January, 2009 (4)
December, 2008 (3)
November, 2008 (3)
July, 2008 (1)
June, 2008 (8)
May, 2008 (3)
April, 2008 (2)
March, 2008 (1)
January, 2008 (10)
November, 2007 (2)
October, 2007 (1)
August, 2007 (2)
July, 2007 (1)
June, 2007 (1)
May, 2007 (3)
April, 2007 (2)
March, 2007 (4)
February, 2007 (8)
January, 2007 (8)
December, 2006 (9)
November, 2006 (7)
October, 2006 (4)
September, 2006 (11)
August, 2006 (18)
July, 2006 (5)
June, 2006 (1)
May, 2006 (3)
April, 2006 (7)
March, 2006 (7)
February, 2006 (2)
December, 2005 (5)
November, 2005 (11)
October, 2005 (3)
September, 2005 (8)
August, 2005 (7)
July, 2005 (5)
June, 2005 (11)
May, 2005 (9)
April, 2005 (14)
March, 2005 (12)
February, 2005 (17)
January, 2005 (10)
December, 2004 (9)
November, 2004 (4)
October, 2004 (10)
September, 2004 (2)
August, 2004 (4)
July, 2004 (17)
June, 2004 (11)
May, 2004 (18)
April, 2004 (13)
March, 2004 (18)
February, 2004 (16)
November, 2003 (4)
October, 2003 (20)
September, 2003 (5)

Ads

Remotely Disable Windows Firewall?

Posted in General at Monday, April 25, 2005 4:25 AM Pacific Daylight Time

Ok, so I can remotely enable remote desktop. But what about remotely disabling windows firewall? Over the weekend I setup a new server box and managed to fit it in my server closet.

But I didn't just install Windows Server 2003, I installed Windows Server 2003 SP1. So even though I remembered to enable remote desktop, I forgot about opening up a hole for it in Windows Firewall. If this can't be done then I'll probably drag a keyboard and monitor over to my closet and do this, but I'm hoping there is some way this can be done remotely (although I'm guessing there isn't since that might be a hole in Windows Firewall).

Update: I figured out last night that Windows Firewall wasn't the problem. During the Windows 2003 setup I *thought* I had assigned a static IP to the main NIC, but it turns out that I had actually assigned the static IP to the 1394 Net Adapter instead. DOH! So when I remoted in using the machine name instead of the IP everything worked. Silly me...

Related posts:
Running a Home Office Web Server with a Dynamic IP
A Year of Climbing Mountains
Resume
Font Smoothing for Windows Server 2003 RDP
How did I break Google Maps?
Speeding Up Windows Server 2008 Boot Time
Tracked by:
"OpenXML now with MSXML 3.0" (Bryant Likes's Blog) [Trackback]
Sunday, September 10, 2006 7:20:53 AM (Pacific Daylight Time, UTC-07:00)
you idiot
peter
Thursday, March 8, 2007 2:29:23 AM (Pacific Standard Time, UTC-08:00)
Don't feel bad I forgot to open a port for vnc. Now I am at work and can't get to my server.
Willie
Friday, September 21, 2007 3:22:11 AM (Pacific Daylight Time, UTC-07:00)
But, again, how can you remotely disable a windows firewall?
While working on a remote server, I enabled the firewall before checking the allowed ports. I lost all the connections with it. No RDP, no remote registries.
This server is a W2k3 server, domain controller in a network in which the master domain controller is a SBS 2003 machine.
Do you have any idea on how to disable the firewall on the remote DC?
Thanks.
Van
Friday, September 21, 2007 7:42:16 PM (Pacific Daylight Time, UTC-07:00)
netsh firewall /? will give you a list of things you can do to the firewall remotely. Of course you need an authenticated connection to it.
Dan
Friday, March 14, 2008 12:34:20 AM (Pacific Standard Time, UTC-08:00)
sc \\srvname stop sharedaccess
Daniel Cenáculo
Sunday, April 27, 2008 4:05:29 PM (Pacific Daylight Time, UTC-07:00)
you are a fool
rakesh
Friday, October 10, 2008 9:48:31 AM (Pacific Daylight Time, UTC-07:00)
psexec \\<host name>

then

netsh firewall set opmode disable

*you can download pstools and extract files into system32
nifernan
Tuesday, October 21, 2008 6:00:45 PM (Pacific Daylight Time, UTC-07:00)
not working abouve given path and command
ashok
Monday, December 1, 2008 2:45:59 PM (Pacific Standard Time, UTC-08:00)
nifernan was almost right, and got me onto the right track. What I did was the following

psexe \\<hostname> netsh

Then once netsh started on the remote host
netsh>firewall set opmode disable

Then
netsh>exit

All done! Access granted.
Thanks nifernan!

Matt
Monday, December 1, 2008 10:42:44 PM (Pacific Standard Time, UTC-08:00)
you are welcome Matt!
nifernan
Monday, March 16, 2009 4:00:49 AM (Pacific Standard Time, UTC-08:00)
If the firewall was turned on you can't remotely run psexec
Randy
Wednesday, March 18, 2009 12:02:12 AM (Pacific Standard Time, UTC-08:00)
Randy, even with the windows Firewall turned on you can run psexec remotely. You just have to make sure to include the correct credentials, such as
psexec \\<comp name> -u <username> -p <password> netsh firewall set opmode DISABLE
Jason
Monday, April 6, 2009 2:01:22 AM (Pacific Daylight Time, UTC-07:00)
Guys -- We're on the right track in theory here, but this simply does not work. I tested by applying the above command (using PStools v1.71) to a machine with the firewall disabled, and it returns the expected results. Turned the Windows Firewall on, and the command fails to execute, with a response saying the network path cannot be found.
Back to the drawing board...
Joe
Tuesday, April 14, 2009 12:47:23 AM (Pacific Daylight Time, UTC-07:00)
That's because the ports that psexec needs to connect via are, ummm, firewalled.... If there was some way to remotely disable a firewall, when the ports you'd need access to do that are firewalled, then that would be a pretty big security hole, eh ?
lansalot
Thursday, May 7, 2009 2:38:02 AM (Pacific Daylight Time, UTC-07:00)
I prefer using the registry...

HKLM,"System\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile","EnableFirewall"

HKLM,"System\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile","EnableFirewall"

1 = on
0 = off
george
Wednesday, May 13, 2009 12:20:38 AM (Pacific Daylight Time, UTC-07:00)
I am able to turnoff the firewall by following the above mentioned steps if the Block All incoming Connections is not selected in the firewall settings.
But I am unable to turnoff the firewall otherwise (if Block All incoming Connections is selected).

Please help...
Ganesh
Thursday, June 4, 2009 5:44:04 AM (Pacific Daylight Time, UTC-07:00)
I tried all options mentioned, and no good result.
having the firewall turned on:
regedit finds the remote pc, but it doesn'r connect to it,
and with psexec it doesn't connect, not even ussing admin rights.
Krlos
Friday, September 11, 2009 6:51:46 AM (Pacific Daylight Time, UTC-07:00)
I understand why you can't do this from one pc to another but I dont understand why a domain controller is blocked by a firewall.

In my opinion thats like not allowing a local administrator to make changes. Totally defeats the purpose of a domain controller.
matt
Sunday, September 20, 2009 1:57:20 AM (Pacific Daylight Time, UTC-07:00)
Go to "Manage" on a PC that you are logged into with domain administrator access. Right Click and remotely connect to the server with the MMC and then go to the services... you can disable the Windows Firewall there...

RH
Rhantson
Friday, October 2, 2009 11:06:13 AM (Pacific Daylight Time, UTC-07:00)
Only Ganesh is close . Nomatter you run psexec or any other tools its hard to disable the firewall like this .You will get the message default shares are not present or RPC server is unavialbe if Block All incoming Connections is selected .Its self explnatory ..BLOCK ALL INCOMMING CONNECTIONS ... unless you have a program in exclusion list ..

Added_flavour
Comments are closed.