I need to administer machines remotely where XP SP2 needs to be
installed. Problem: once SP2 is installed, the firewall by default is
enabled and I can't reconnect to them with Dameware / Terminal Server
to continue patching on these systems. With no on-site support
available, does anyone know how I can tweak the SP2 install so the
firewall is disabled, post-install?

thanks in advance

NetButch@gmail.com wrote:

> I need to administer machines remotely where XP SP2 needs to be
> installed. Problem: once SP2 is installed, the firewall by default is
> enabled and I can't reconnect to them with Dameware / Terminal Server
> to continue patching on these systems. With no on-site support
> available, does anyone know how I can tweak the SP2 install so the
> firewall is disabled, post-install?
Hi,

To disable the firewall, you can just set two registry settings before
the SP2 installation. The FW disables itself when it finds those
registry settings.

The registry settings are:

HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Win dowsFirewall\DomainProfile
\EnableFirewall=0 (DWORD data type)

HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Win dowsFirewall\StandardProfile
\EnableFirewall=0 (DWORD data type)

(adding the registry values after SP2 is installed will also disable
the firewall at next startup)

The registry settings are documented here:

WF_XPSP2.doc "Deploying Windows Firewall Settings for Microsoft
Windows XP with Service Pack 2" is downloadable from
http://www.microsoft.com/downloads/d...d-499f73a637d1



The VBScript below sets the two registry values needed to disable
the WinXP SP2 firewall, and then it install SP2 in unattended mode.

'--------------------8<----------------------
Set oShell = CreateObject("WScript.Shell")

oShell.RegWrite "HKLM\SOFTWARE\Policies\Microsoft\WindowsFirewall" _
& "\DomainProfile\EnableFirewall", 0, "REG_DWORD"

oShell.RegWrite "HKLM\SOFTWARE\Policies\Microsoft\WindowsFirewall" _
& "\StandardProfile\EnableFirewall", 0, "REG_DWORD"

sLaunchCmd = "SP2WindowsXP-KB835935-SP2-ENU.exe /quiet /passive /norestart"
iRetVal = oShell.Run(sLaunchCmd, 1, True)

If iRetVal <> 3010 And iRetVal <> 0 Then
MsgBox "Installation was NOT successful, error code returned: " & iRetVal
End If


'--------------------8<----------------------


--
torgeir, Microsoft MVP Scripting, Porsgrunn Norway
Administration scripting examples and an ONLINE version of
the 1328 page Scripting Guide:
http://www.microsoft.com/technet/scr...r/default.mspx

thanks again, that works

Thanks again, that works.

HOLA QUE TAL PUEDO PEDIRLE QUEME DE UNA EXPLICACION MAS Extensa en Spanish de
como habilitar el Dameware en Windpws XP, ya que no puedo tomar control
remoto de otra PC con Windows XP, gracias y espero tu respuesta a mi mail

"Torgeir Bakken (MVP)" wrote:

> NetButch@gmail.com wrote:
>
> > I need to administer machines remotely where XP SP2 needs to be
> > installed. Problem: once SP2 is installed, the firewall by default is
> > enabled and I can't reconnect to them with Dameware / Terminal Server
> > to continue patching on these systems. With no on-site support
> > available, does anyone know how I can tweak the SP2 install so the
> > firewall is disabled, post-install?
> Hi,
>
> To disable the firewall, you can just set two registry settings before
> the SP2 installation. The FW disables itself when it finds those
> registry settings.
>
> The registry settings are:
>
> HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Win dowsFirewall\DomainProfile
> \EnableFirewall=0 (DWORD data type)
>
> HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Win dowsFirewall\StandardProfile
> \EnableFirewall=0 (DWORD data type)
>
> (adding the registry values after SP2 is installed will also disable
> the firewall at next startup)
>
> The registry settings are documented here:
>
> WF_XPSP2.doc "Deploying Windows Firewall Settings for Microsoft
> Windows XP with Service Pack 2" is downloadable from
> http://www.microsoft.com/downloads/d...d-499f73a637d1
>
>
>
> The VBScript below sets the two registry values needed to disable
> the WinXP SP2 firewall, and then it install SP2 in unattended mode.
>
> '--------------------8<----------------------
> Set oShell = CreateObject("WScript.Shell")
>
> oShell.RegWrite "HKLM\SOFTWARE\Policies\Microsoft\WindowsFirewall" _
> & "\DomainProfile\EnableFirewall", 0, "REG_DWORD"
>
> oShell.RegWrite "HKLM\SOFTWARE\Policies\Microsoft\WindowsFirewall" _
> & "\StandardProfile\EnableFirewall", 0, "REG_DWORD"
>
> sLaunchCmd = "SP2WindowsXP-KB835935-SP2-ENU.exe /quiet /passive /norestart"
> iRetVal = oShell.Run(sLaunchCmd, 1, True)
>
> If iRetVal <> 3010 And iRetVal <> 0 Then
> MsgBox "Installation was NOT successful, error code returned: " & iRetVal
> End If
>
>
> '--------------------8<----------------------
>
>
> --
> torgeir, Microsoft MVP Scripting, Porsgrunn Norway
> Administration scripting examples and an ONLINE version of
> the 1328 page Scripting Guide:
> http://www.microsoft.com/technet/scr...r/default.mspx
>