Google Groups no longer supports new Usenet posts or subscriptions. Historical content remains viewable.

Dismiss

Windows Firewall Policy Exceptions Not Working

221 views

Skip to first unread message

Jay Brooker

unread,

Jul 27, 2005, 5:40:03 PM7/27/05

I'm posting this in hopes someone may have an idea about the XP SP2 Firewall
problem we are having. All of our Firewall Exceptions (program and port) work
fine for most of our programs that require it. However, the Windows Firewall
exceptions for one Computer Associates program (XCOMNT), does not seem to
propagate to the pc. CA does not have any ideas why. We have to add the port
that XCOM uses to the local Firewall exceptions for it to work. I'd prefer to
use Group Policy exceptions. Is anyone else having issues with adding certain
program or port exceptions to Windows Firewall?

Thanks.

David Beder [MSFT]

unread,

Jul 31, 2005, 12:42:10 AM7/31/05

please expand on the phrase "does not seem to propagate to the pc". It
sounds like you've added an application exception in group policy but it's
not showing up in the local machine firewall control panel?

--
David
Microsoft Windows Networking
This posting is provided "AS IS" with no warranties, and confers no rights.

"Jay Brooker" <JayBr...@discussions.microsoft.com> wrote in message
news:C512AD73-2EF5-46BA...@microsoft.com...

Jay Brooker

unread,

Aug 1, 2005, 8:40:03 AM8/1/05

Correct. Both the program and port exceptions as identified by CA have been
added to Group Policy. We have checked the syntax and it is correct. Somehow
port 8040 (TCP) works fine when entered into the Firewall manually on systems
that use the XCOMNT program but we are doing on an as needed basis. The port
entered into the Firewall Group Policy does not seem to be applying to the
desktops. All other ports we have added as exceptions are fine. We can't seem
to figure this out. Are there some programs that only work when added
locally?

Thanks!

Jay

David Beder [MSFT]

unread,

Aug 4, 2005, 3:37:12 AM8/4/05

strange. have you checked that the afflicted machines are using the same
profile (standard/domain) as the gp setting? the control panel always puts
stuff in the current profile, but maybe the gp setting is not for the
profile in use. But then, this would affect all other ports as well, which
you've said are fine....

why don't you try running RSoP.msc (the resultant set of policy mmc snap-in)
on a machine in this state and see if the setting is there, but is being
overwritten by some higher policy. if it is not being overwritten, then the
question in narrowed down to trying to figure out why it isn't being applied
for which I would need registry output for
hklm\software\policies\microsoft\windowsfirewall (where gp settings are
stored) and output from "netsh firewall show state verbose=enable"

the answer to "are there some settings that only work when entered locally"
is "no, though there are some settings that can only be set via gp".
however, in the case of program exceptions, since the path must be given,
some programs are a lot harder to configure if they aren't installed to
environment based locations like %programfiles% and %windir%.

--
David
Microsoft Windows Networking
This posting is provided "AS IS" with no warranties, and confers no rights.

"Jay Brooker" <JayBr...@discussions.microsoft.com> wrote in message

news:CAB5A1FF-6F00-4A49...@microsoft.com...

Jay Brooker

unread,

Aug 11, 2005, 12:10:47 PM8/11/05

Jay Brooker

unread,

Aug 11, 2005, 12:19:03 PM8/11/05

David,

Here is the registry output from our Firewall policy on a machine that can't
receive SAR reports through the mainframe using CA's XCOM program. We
actually open up a Host of demand TN3270 session and then the files come down
locally to the XCOM program. Port 8044 is not at this time excepted locally
in the firewall on the effected PC. The moment we add a TCP port locally for
8044, the reports that have failed with socket errors then come down the the
PC. We have even deleted and then readded the port to the Domain Firewall GPO
without success. This is the only port or program issue we have had to date.

Thanks!

Windows Registry Editor Version 5.00

[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\WindowsFirewall\DomainProfile]
"EnableFirewall"=dword:00000001
"DisableUnicastResponsesToMulticastBroadcast"=dword:00000001
"DoNotAllowExceptions"=dword:00000000
"DisableNotifications"=dword:00000000

[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\WindowsFirewall\DomainProfile\AuthorizedApplications]
"AllowUserPrefMerge"=dword:00000001
"Enabled"=dword:00000001

[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\WindowsFirewall\DomainProfile\AuthorizedApplications\List]
" c:\\program files\\CA\\shared\\Components\\DTS\\EGC\\egc21.exe"="
c:\\program files\\CA\\shared\\Components\\DTS\\EGC\\egc21.exe"
"c:\\adp\\pcpw\\adplockmgr.exe"="c:\\adp\\pcpw\\adplockmgr.exe"
"c:\\adp\\pcpw\\pay4win.exe"="c:\\adp\\pcpw\\pay4win.exe"
"c:\\anzio126\\anzio32r.exe"="c:\\anzio126\\anzio32r.exe"
"c:\\CA_APPSW\\ccirmtd.exe"="c:\\CA_APPSW\\ccirmtd.exe"
"c:\\CA_APPSW\\quenetd.exe"="c:\\CA_APPSW\\quenetd.exe"
"c:\\cmbroot\\jdk\\jre\\bin\\java.exe"="c:\\cmbroot\\jdk\\jre\\bin\\java.exe"
"C:\\ECRM RIP 6.4\\ECRM-RIP.exe"="C:\\ECRM RIP 6.4\\ECRM-RIP.exe"
"c:\\IDEAS50CAN\\stcsiq.exe"="c:\\IDEAS50CAN\\stcsiq.exe"
"C:\\IDEAS50USA\\stcsiq.exe"="C:\\IDEAS50USA\\stcsiq.exe"
"c:\\mssql\\binn\\sqlagent.exe"="c:\\mssql\\binn\\sqlagent.exe"
"c:\\Mssql\\Binn\\sqlmangr.exe"="c:\\Mssql\\Binn\\sqlmangr.exe"
"c:\\mssql\\binn\\sqlservr.exe"="c:\\mssql\\binn\\sqlservr.exe"
"c:\\orant\\bin\\Adiqc32.exe"="c:\\orant\\bin\\Adiqc32.exe"
"c:\\orant\\bin\\fbld60.exe"="c:\\orant\\bin\\fbld60.exe"
"c:\\orant\\bin\\frun60.exe"="c:\\orant\\bin\\frun60.exe"
"c:\\orant\\bin\\GLDI9032.exe"="c:\\orant\\bin\\GLDI9032.exe"
"c:\\orant\\bin\\rwbld.exe"="c:\\orant\\bin\\rwbld.exe"
"c:\\orant\\bin\\rwrbe60.exe"="c:\\orant\\bin\\rwrbe60.exe"
"c:\\orant\\discvr4\\dis4usr.exe"="c:\\orant\\discvr4\\dis4usr.exe"
"c:\\Plusmark\\SmartTime_7.0PMI\\smartime.exe"="c:\\Plusmark\\SmartTime_7.0PMI\\smartime.exe"
"c:\\powerbuilder 9.0\\sql anywhere 8\\win32\\dbeng8.exe"="c:\\powerbuilder
9.0\\sql anywhere 8\\win32\\dbeng8.exe"
"c:\\program files\\adobe\\acrobat 5.0\\acrobat\\acrobat.exe"="c:\\program
files\\adobe\\acrobat 5.0\\acrobat\\acrobat.exe"
"c:\\Program Files\\AIM\\aim.exe"="c:\\Program Files\\AIM\\aim.exe"
"c:\\program files\\allaire\\homesite 4.5\\homesite45.exe"="c:\\program
files\\allaire\\homesite 4.5\\homesite45.exe"
"c:\\program files\\Ascent\\bin\\acsvc.exe"="c:\\program
files\\Ascent\\bin\\acsvc.exe"
"c:\\program files\\Ascent\\bin\\index.exe"="c:\\program
files\\Ascent\\bin\\index.exe"
"c:\\program files\\Ascent\\bin\\netasm\\acsvc.exe"="c:\\program
files\\Ascent\\bin\\netasm\\acsvc.exe"
"c:\\program files\\Ascent\\bin\\release.exe"="c:\\program
files\\Ascent\\bin\\release.exe"
"c:\\program files\\AT&T Global Network Client\\netclient.exe"="c:\\program
files\\AT&T Global Network Client\\netclient.exe"
"c:\\program files\\AT&T Global Network Client\\netup.exe"="c:\\program
files\\AT&T Global Network Client\\netup.exe"
"c:\\program files\\CA\\Allfusion Harvest Change
Manager\\Advantage.exe"="c:\\program files\\CA\\Allfusion Harvest Change
Manager\\Advantage.exe"
"c:\\program files\\ca\\BrightStor ARCserve
backup\\asalert.exe"="c:\\program files\\ca\\BrightStor ARCserve
backup\\asalert.exe"
"c:\\program files\\ca\\brightstor arcserve
backup\\catirpc.exe"="c:\\program files\\ca\\brightstor arcserve
backup\\catirpc.exe"
"c:\\program files\\CA\\etrust Antivirus\\inocIT.exe"="c:\\program
files\\CA\\etrust Antivirus\\inocIT.exe"
"c:\\program files\\CA\\etrust Antivirus\\inorpc.exe"="c:\\program
files\\CA\\etrust Antivirus\\inorpc.exe"
"c:\\program files\\CA\\etrust Antivirus\\realmon.exe"="c:\\program
files\\CA\\etrust Antivirus\\realmon.exe"
"c:\\program files\\CA\\SharedComponents\\CA_LIC\\lic98rmt.exe"="c:\\program
files\\CA\\SharedComponents\\CA_LIC\\lic98rmt.exe"
"c:\\program files\\ca\\unicenter asset
management\\agents\\amagent.exe"="c:\\program files\\ca\\unicenter asset
management\\agents\\amagent.exe"
"c:\\program files\\CA\\unicenter asset
management\\sectsrv\\MSS.exe"="c:\\program files\\CA\\unicenter asset
management\\sectsrv\\MSS.exe"
"c:\\program files\\ca\\unicenter asset
management\\sectsrv\\rss.exe"="c:\\program files\\ca\\unicenter asset
management\\sectsrv\\rss.exe"
"c:\\program files\\CA\\Unicenter Software
Delivery\\BIN\\sdjexec.exe"="c:\\program files\\CA\\Unicenter Software
Delivery\\BIN\\sdjexec.exe"
"c:\\program files\\CA\\unicenter software
delivery\\bin\\triggag.exe"="c:\\program files\\CA\\unicenter software
delivery\\bin\\triggag.exe"
"c:\\program files\\carbon copy\\shellker.exe"="c:\\program files\\carbon
copy\\shellker.exe"
"c:\\Program Files\\Cellwatch\\cellwatch.exe"="c:\\Program
Files\\Cellwatch\\cellwatch.exe"
"C:\\program files\\CIS Data Collection\\cboxinq.exe"="C:\\program
files\\CIS Data Collection\\cboxinq.exe"
"c:\\program files\\cis data collection\\datacoll.exe"="c:\\program
files\\cis data collection\\datacoll.exe"
"c:\\program files\\cis data collection\\pill.exe"="c:\\program files\\cis
data collection\\pill.exe"
"c:\\program files\\cis shop floor\\cis.exe"="c:\\program files\\cis shop
floor\\cis.exe"
"c:\\program files\\cis shop floor\\dbeng8.exe"="c:\\program files\\cis shop
floor\\dbeng8.exe"
"c:\\program files\\cis shop floor\\mfgrpt.exe"="c:\\program files\\cis shop
floor\\mfgrpt.exe"
"c:\\program files\\cisco systems\\vpn client\\cvpnd.exe"="c:\\program
files\\cisco systems\\vpn client\\cvpnd.exe"
"c:\\program files\\citrix\\ica client\\wfica32.exe"="c:\\program
files\\citrix\\ica client\\wfica32.exe"
"c:\\program files\\clarity\\workbench\\bin\\npwbench.exe"="c:\\program
files\\clarity\\workbench\\bin\\npwbench.exe"
"c:\\program files\\cognos\\cer3\\bin\\impuser.exe"="c:\\program
files\\cognos\\cer3\\bin\\impuser.exe"
"c:\\program files\\cognos\\cer3\\bin\\pwrplay.exe"="c:\\program
files\\cognos\\cer3\\bin\\pwrplay.exe"
"c:\\program files\\common
files\\ca\\brightstor\\cads\\casdscsvc.exe"="c:\\program files\\common
files\\ca\\brightstor\\cads\\casdscsvc.exe"
"c:\\program files\\common files\\CMEII\\CMEsys.exe"="c:\\program
files\\common files\\CMEII\\CMEsys.exe"
"c:\\program files\\common files\\GMT.exe"="c:\\program files\\common
files\\GMT.exe"
"c:\\program files\\Fifth Third Bank\\Fifth Third Direct\\Fifth Third
Direct.exe"="c:\\program files\\Fifth Third Bank\\Fifth Third Direct\\Fifth
Third Direct.exe"
"c:\\program files\\Help Systems\\Robot CLIENT\\rclcor.exe"="c:\\program
files\\Help Systems\\Robot CLIENT\\rclcor.exe"
"c:\\program files\\HP Web JetAdmin\\hpwebjetd.exe"="c:\\program files\\HP
Web JetAdmin\\hpwebjetd.exe"
"c:\\program files\\IBM\\Client Access\\cwblmsrv.exe"="c:\\program
files\\IBM\\Client Access\\cwblmsrv.exe"
"c:\\program files\\ibm\\client access\\emulator\\pcscm.exe"="c:\\program
files\\ibm\\client access\\emulator\\pcscm.exe"
"c:\\program files\\ibm\\CM\\vic.exe"="c:\\program files\\ibm\\CM\\vic.exe"
"c:\\program files\\IBM\\IBM agent
controller\\bin\\Raserver.exe"="c:\\program files\\IBM\\IBM agent
controller\\bin\\Raserver.exe"
"c:\\Program Files\\IBM\\Soft5080\\bin\\soft5080.exe"="c:\\Program
Files\\IBM\\Soft5080\\bin\\soft5080.exe"
"c:\\program files\\IBM\\websphere studio\\application
developer\\v5.1\\eclipse\\jre\\bin\\javaw.exe"="c:\\program
files\\IBM\\websphere studio\\application
developer\\v5.1\\eclipse\\jre\\bin\\javaw.exe"
"c:\\program files\\IBM\\websphere studio\\application
developer\\v5.1\\runtimes\\base_v5\\java\\bin\\javaw.exe"="c:\\program
files\\IBM\\websphere studio\\application
developer\\v5.1\\runtimes\\base_v5\\java\\bin\\javaw.exe"
"c:\\program files\\internet explorer\\iexplore.exe"="c:\\program
files\\internet explorer\\iexplore.exe"
"c:\\program files\\java\\j2re1.4.0_01\\bin\\java.exe"="c:\\program
files\\java\\j2re1.4.0_01\\bin\\java.exe"
"c:\\Program Files\\Macromedia\\Contribute\\Contribute.exe"="c:\\Program
Files\\Macromedia\\Contribute\\Contribute.exe"
"c:\\Program Files\\Macromedia\\Dreamweaver MX
2004\\Dreamweaver.exe"="c:\\Program Files\\Macromedia\\Dreamweaver MX
2004\\Dreamweaver.exe"
"c:\\program files\\mcirosoft sql server\\80\\tools\\bin"="c:\\program
files\\mcirosoft sql server\\80\\tools\\bin"
"c:\\program files\\messenger\\msmsgs.exe"="c:\\program
files\\messenger\\msmsgs.exe"
"c:\\Program Files\\Microsoft ActiveSync\\wcescomm.exe"="c:\\Program
Files\\Microsoft ActiveSync\\wcescomm.exe"
"c:\\Program Files\\Microsoft ActiveSync\\WCESMgr.exe"="c:\\Program
Files\\Microsoft ActiveSync\\WCESMgr.exe"
"C:\\Program Files\\Microsoft Application Compatibility Toolkit\\Application
Analyzer\\analyzer.exe"="C:\\Program Files\\Microsoft Application
Compatibility Toolkit\\Application Analyzer\\analyzer.exe"
"C:\\Program Files\\Microsoft Application Compatibility Toolkit\\Application
Analyzer\\merger.exe"="C:\\Program Files\\Microsoft Application Compatibility
Toolkit\\Application Analyzer\\merger.exe"
"c:\\program files\\microsoft office\\art\\msaccess.exe"="c:\\program
files\\microsoft office\\art\\msaccess.exe"
"c:\\Program Files\\Microsoft Office\\Office\\Excel.exe"="c:\\Program
Files\\Microsoft Office\\Office\\Excel.exe"
"c:\\Program Files\\Microsoft Office\\Office\\MSAccess.exe"="c:\\Program
Files\\Microsoft Office\\Office\\MSAccess.exe"
"c:\\Program Files\\Microsoft Office\\Office\\Outlook.exe"="c:\\Program
Files\\Microsoft Office\\Office\\Outlook.exe"
"c:\\Program Files\\Microsoft Office\\Office\\Powerpnt.exe"="c:\\Program
Files\\Microsoft Office\\Office\\Powerpnt.exe"
"c:\\Program Files\\Microsoft Office\\Office\\WinWord.exe"="c:\\Program
Files\\Microsoft Office\\Office\\WinWord.exe"
"c:\\program files\\microsoft sql
server\\MSSQL$Vantagetax\\binn\\sql\\sqlmangr.exe"="c:\\program
files\\microsoft sql server\\MSSQL$Vantagetax\\binn\\sql\\sqlmangr.exe"
"c:\\program files\\microsoft sql
server\\MSSQL$Vantagetax\\binn\\sqlagent.exe"="c:\\program files\\microsoft
sql server\\MSSQL$Vantagetax\\binn\\sqlagent.exe"
"c:\\program files\\microsoft sql
server\\MSSQL$Vantagetax\\binn\\sqlservr.exe"="c:\\program files\\microsoft
sql server\\MSSQL$Vantagetax\\binn\\sqlservr.exe"
"c:\\program files\\microsoft sql
server\\mssql\\$instancename\\binn\\sqlservr.exe"="c:\\program
files\\microsoft sql server\\mssql\\$instancename\\binn\\sqlservr.exe"
"c:\\program files\\microsoft sql
server\\mssql\\binn\\sqlservr.exe"="c:\\program files\\microsoft sql
server\\mssql\\binn\\sqlservr.exe"
"c:\\program files\\nai\\dsproconsolent
4.5\\program\\dsproview.exe"="c:\\program files\\nai\\dsproconsolent
4.5\\program\\dsproview.exe"
"c:\\program files\\nai\\dsproconsolent
4.5\\program\\trapcapture.exe"="c:\\program files\\nai\\dsproconsolent
4.5\\program\\trapcapture.exe"
"c:\\program files\\netmeeting\\conf.exe"="c:\\program
files\\netmeeting\\conf.exe"
"c:\\program files\\omnis727rt\\omnis7.exe"="c:\\program
files\\omnis727rt\\omnis7.exe"
"c:\\Program Files\\Palm\\hotsync.exe"="c:\\Program Files\\Palm\\hotsync.exe"
"c:\\program files\\powerlab\\photo.exe"="c:\\program
files\\powerlab\\photo.exe"
"c:\\program files\\ppw\\ppwpb.exe"="c:\\program files\\ppw\\ppwpb.exe"
"c:\\program files\\quest software\\toad\\toad.exe"="c:\\program
files\\quest software\\toad\\toad.exe"
"c:\\program files\\qwits4\\qwits.exe"="c:\\program files\\qwits4\\qwits.exe"
"c:\\program files\\REDD\\APPL\\red.exe"="c:\\program
files\\REDD\\APPL\\red.exe"
"c:\\program files\\REDD\\Reports\\staf_rpt.exe"="c:\\program
files\\REDD\\Reports\\staf_rpt.exe"
"c:\\program files\\reflection\\rx.exe"="c:\\program
files\\reflection\\rx.exe"
"c:\\program files\\research in
motion\\blackberry\\Desktopmgr.exe"="c:\\program files\\research in
motion\\blackberry\\Desktopmgr.exe"
"c:\\program files\\sharedcomponents\\dts\\bin\\tngdts.exe"="c:\\program
files\\sharedcomponents\\dts\\bin\\tngdts.exe"
"c:\\program files\\simply\\cbwrun.exe"="c:\\program
files\\simply\\cbwrun.exe"
"c:\\program files\\sqllib\\bin\\db2jds.exe"="c:\\program
files\\sqllib\\bin\\db2jds.exe"
"c:\\program files\\tactics9\\tactics9.exe"="c:\\program
files\\tactics9\\tactics9.exe"
"C:\\program files\\tivoli\\tsm\\baclient\\dsm.exe"="C:\\program
files\\tivoli\\tsm\\baclient\\dsm.exe"
"c:\\program files\\tivoli\\tsm\\baclient\\dsmcad.exe"="c:\\program
files\\tivoli\\tsm\\baclient\\dsmcad.exe"
"c:\\program files\\tms\\prod\\appl\\tms.exe"="c:\\program
files\\tms\\prod\\appl\\tms.exe"
"c:\\program files\\tridiaVNC\\VNCviewer.exe"="c:\\program
files\\tridiaVNC\\VNCviewer.exe"
"c:\\SmartTime_7.0PMI\\smartime.exe"="c:\\SmartTime_7.0PMI\\smartime.exe"
"c:\\sybase\\SQL Advantage\\SQLADV.exe"="c:\\sybase\\SQL
Advantage\\SQLADV.exe"
"c:\\tngsd\\bin\\triggag.exe"="c:\\tngsd\\bin\\triggag.exe"
"c:\\vast60\\bin\\abt.exe"="c:\\vast60\\bin\\abt.exe"
"c:\\windows\\downloaded program
files\\shellker.exe"="c:\\windows\\downloaded program files\\shellker.exe"
"c:\\windows\\pchealth\\helpctr\\binaries\\helpctr.exe"="c:\\windows\\pchealth\\helpctr\\binaries\\helpctr.exe"
"c:\\windows\\pchealth\\helpctr\\binaries\\helphost.exe"="c:\\windows\\pchealth\\helpctr\\binaries\\helphost.exe"
"c:\\windows\\pchealth\\helpctr\\binaries\\helpsvc.exe"="c:\\windows\\pchealth\\helpctr\\binaries\\helpsvc.exe"
"c:\\windows\\plaxo\\installstub.exe"="c:\\windows\\plaxo\\installstub.exe"
"c:\\windows\\system32\\dmadmin.exe"="c:\\windows\\system32\\dmadmin.exe"
"c:\\windows\\system32\\dmremote.exe"="c:\\windows\\system32\\dmremote.exe"
"c:\\windows\\system32\\javaw.exe"="c:\\windows\\system32\\javaw.exe"
"c:\\windows\\system32\\mmc.exe"="c:\\windows\\system32\\mmc.exe"
"c:\\xcomnt\\cato3xpi.dll"="c:\\xcomnt\\cato3xpi.dll"
"c:\\xcomnt\\xcomnt.exe"="c:\\xcomnt\\xcomnt.exe"
"C:\\xcomnt\\xcomtcp.exe"="C:\\xcomnt\\xcomtcp.exe"

[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\WindowsFirewall\DomainProfile\GloballyOpenPorts]
"AllowUserPrefMerge"=dword:00000001
"Enabled"=dword:00000001

[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\WindowsFirewall\DomainProfile\GloballyOpenPorts\List]
"1024:TCP:\"*\":enabled:AMO"="1024:TCP:\"*\":enabled:AMO"
"1024:UDP:\"*\":enabled:AMO"="1024:UDP:\"*\":enabled:AMO"
"1080:TCP:\"*\":enabled:Reflection"="1080:TCP:\"*\":enabled:Reflection"
"1080:UDP:\"*\":enabled:Reflection"="1080:UDP:\"*\":enabled:Reflection"
"135:TCP:\"*\":enabled:AMO"="135:TCP:\"*\":enabled:AMO"
"137:TCP:\"*\":enabled:AMO"="137:TCP:\"*\":enabled:AMO"
"138:TCP:\"*\":enabled:AMO"="138:TCP:\"*\":enabled:AMO"
"139:TCP:\"*\":enabled:AMO"="139:TCP:\"*\":enabled:AMO"
"1433:TCP:\"*\":enabled:AMO"="1433:TCP:\"*\":enabled:AMO"
"1434:TCP:\"*\":enabled:SQL"="1434:TCP:\"*\":enabled:SQL"
"1530:TCP:\"*\":enabled:Reflection"="1530:TCP:\"*\":enabled:Reflection"
"1531:TCP:\"*\":enabled:Reflection"="1531:TCP:\"*\":enabled:Reflection"
"1532:TCP:\"*\":enabled:Reflection"="1532:TCP:\"*\":enabled:Reflection"
"1533:TCP:\"*\":enabled:Reflection"="1533:TCP:\"*\":enabled:Reflection"
"1534:TCP:\"*\":enabled:Reflection"="1534:TCP:\"*\":enabled:Reflection"
"1535:TCP:\"*\":enabled:Reflection"="1535:TCP:\"*\":enabled:Reflection"
"1536:TCP:\"*\":enabled:Reflection"="1536:TCP:\"*\":enabled:Reflection"
"1537:TCP:\"*\":enabled:Reflection"="1537:TCP:\"*\":enabled:Reflection"
"161:TCP:\"*\":enabled:NSM"="161:TCP:\"*\":enabled:NSM"
"162:TCP:\"*\":enabled:NSM"="162:TCP:\"*\":enabled:NSM"
"162:UDP:\"*\":enabled:NSM"="162:UDP:\"*\":enabled:NSM"
"1721:TCP:\"*\":enabled:NSM"="1721:TCP:\"*\":enabled:NSM"
"177:TCP:\"*\":enabled:Reflection"="177:TCP:\"*\":enabled:Reflection"
"177:UDP:\"*\":enabled:Reflection"="177:UDP:\"*\":enabled:Reflection"
"20:TCP:\"*\":enabled:Reflection"="20:TCP:\"*\":enabled:Reflection"
"21:TCP:\"*\":enabled:Reflection"="21:TCP:\"*\":enabled:Reflection"
"22:TCP:\"*\":enabled:Reflection"="22:TCP:\"*\":enabled:Reflection"
"4104:TCP:\"*\":enabled:NSM"="4104:TCP:\"*\":enabled:NSM"
"4104:UDP:\"*\":enabled:AMO"="4104:UDP:\"*\":enabled:AMO"
"4105:TCP:\"*\":enabled:AMO"="4105:TCP:\"*\":enabled:AMO"
"41508:TCP:\"*\":enabled:UAM"="41508:TCP:\"*\":enabled:UAM"
"41523:TCP:\"*\":enabled:ARCserve"="41523:TCP:\"*\":enabled:ARCserve"
"41524:TCP:\"*\":enabled:ARCserve"="41524:TCP:\"*\":enabled:ARCserve"
"42:TCP:\"*\":enabled:Reflection"="42:TCP:\"*\":enabled:Reflection"
"42508:upd:\"*\":enabled:InoculateIT71"="42508:upd:\"*\":enabled:InoculateIT71"
"42509:TCP:\"*\":enabled:AV"="42509:TCP:\"*\":enabled:AV"
"42509:UDP:\"*\":enabled:InoculateIT71"="42509:UDP:\"*\":enabled:InoculateIT71"
"42510:TCP:\"*\":enabled:AV"="42510:TCP:\"*\":enabled:AV"
"443:TCP:\"*\":enabled:Reflection"="443:TCP:\"*\":enabled:Reflection"
"443:UDP:\"*\":enabled:Reflection"="443:UDP:\"*\":enabled:Reflection"
"445:TCP:\"*\":enabled:AppCenter"="445:TCP:\"*\":enabled:AppCenter"
"4718:TCP:\"*\":enabled:USD"="4718:TCP:\"*\":enabled:USD"
"4720:TCP:\"*\":enabled:USD"="4720:TCP:\"*\":enabled:USD"
"4721:TCP:\"*\":enabled:USD"="4721:TCP:\"*\":enabled:USD"
"4722:TCP:\"*\":enabled:USD"="4722:TCP:\"*\":enabled:USD"
"4723:TCP:\"*\":enabled:USD"="4723:TCP:\"*\":enabled:USD"
"4724:TCP:\"*\":enabled:USD"="4724:TCP:\"*\":enabled:USD"
"4725:TCP:\"*\":enabled:USD"="4725:TCP:\"*\":enabled:USD"
"4725:UDP:\"*\":enabled:USD"="4725:UDP:\"*\":enabled:USD"
"512:TCP:\"*\":enabled:Reflection"="512:TCP:\"*\":enabled:Reflection"
"513:TCP:\"*\":enabled:Reflection"="513:TCP:\"*\":enabled:Reflection"
"514:TCP:\"*\":enabled:Reflection"="514:TCP:\"*\":enabled:Reflection"
"515:TCP:\"*\":enabled:Reflection"="515:TCP:\"*\":enabled:Reflection"
"53:TCP:\"*\":enabled:Reflection"="53:TCP:\"*\":enabled:Reflection"
"53:UDP:\"*\":enabled:Reflection"="53:UDP:\"*\":enabled:Reflection"
"6000:TCP:\"*\":enable\"Reflection"="6000:TCP:\"*\":enable\"Reflection"
"6050:TCP:\"*\":enabled:ARCserve"="6050:TCP:\"*\":enabled:ARCserve"
"6051:TCP:\"*\":enabled:ARCserve"="6051:TCP:\"*\":enabled:ARCserve"
"6055:TCP:\"*\":enabled:ARCserve"="6055:TCP:\"*\":enabled:ARCserve"
"6060:TCP:\"*\":enabled:ARCserve"="6060:TCP:\"*\":enabled:ARCserve"
"6061:TCP:\"*\":enabled:ARCserve"="6061:TCP:\"*\":enabled:ARCserve"
"6065:TCP:\"*\":enabled:ARCserve"="6065:TCP:\"*\":enabled:ARCserve"
"6066:TCP:\"*\":enabled:ARCserve"="6066:TCP:\"*\":enabled:ARCserve"
"6070:TCP:\"*\":enabled:ARCserve"="6070:TCP:\"*\":enabled:ARCserve"
"6162:TCP:\"*\":enabled:ARCserve"="6162:TCP:\"*\":enabled:ARCserve"
"6502:TCP:\"*\":enabled:ARCserve"="6502:TCP:\"*\":enabled:ARCserve"
"6503:TCP:\"*\":enabled:ARCserve"="6503:TCP:\"*\":enabled:ARCserve"
"6504:TCP:\"*\":enabled:ARCserve"="6504:TCP:\"*\":enabled:ARCserve"
"6665:TCP:\"*\":enabled:NSM"="6665:TCP:\"*\":enabled:NSM"
"7001:TCP:\"*\":enabled:NSM"="7001:TCP:\"*\":enabled:NSM"
"7003:TCP:\"*\":enabled:UAM"="7003:TCP:\"*\":enabled:UAM"
"7004:TCP:\"*\":enabled:UAM"="7004:TCP:\"*\":enabled:UAM"
"749:TCP:\"*\":enabled:Reflection"="749:TCP:\"*\":enabled:Reflection"
"749:UDP:\"*\":enabled:Reflection"="749:UDP:\"*\":enabled:Reflection"
"7774:TCP:\"*\":enabled:NSM"="7774:TCP:\"*\":enabled:NSM"
"80:TCP:\"*\":enabled:Reflection"="80:TCP:\"*\":enabled:Reflection"
"8044:TCP:\"*\":enabled:XCOM"="8044:TCP:\"*\":enabled:XCOM"
"8044:UDP:\"*\":enabled:XCOM"="8044:UDP:\"*\":enabled:XCOM"
"8196:TCP:\"*\":enabled:UAM"="8196:TCP:\"*\":enabled:UAM"
"8198:TCP:\"*\":enabled:UAM"="8198:TCP:\"*\":enabled:UAM"
"8200:TCP:\"*\":enabled:UAM"="8200:TCP:\"*\":enabled:UAM"
"8222:TCP:\"*\":enabled:UAM"="8222:TCP:\"*\":enabled:UAM"
"8223:TCP:\"*\":enabled:UAM"="8223:TCP:\"*\":enabled:UAM"
"8224:TCP:\"*\":enabled:UAM"="8224:TCP:\"*\":enabled:UAM"
"8225:TCP:\"*\":enabled:UAM"="8225:TCP:\"*\":enabled:UAM"
"8230:TCP:\"*\":enabled:USD"="8230:TCP:\"*\":enabled:USD"
"8231:TCP:\"*\":enabled:USD"="8231:TCP:\"*\":enabled:USD"
"8232:TCP:\"*\":enabled:USD"="8232:TCP:\"*\":enabled:USD"
"8233:TCP:\"*\":enabled:USD"="8233:TCP:\"*\":enabled:USD"
"8234:TCP:\"*\":enabled:USD"="8234:TCP:\"*\":enabled:USD"
"8235:TCP:\"*\":enabled:USD"="8235:TCP:\"*\":enabled:USD"
"8300:TCP:\"*\":enabled:UAM"="8300:TCP:\"*\":enabled:UAM"
"88:TCP:\"*\":enabled:Reflection"="88:TCP:\"*\":enabled:Reflection"
"88:UDP:\"*\":enabled:Reflection"="88:UDP:\"*\":enabled:Reflection"
"992:TCP:\"*\":enabled:Reflection"="992:TCP:\"*\":enabled:Reflection"
"9990:TCP:\"*\":enabled:NSM"="9990:TCP:\"*\":enabled:NSM"
"9991:TCP:\"*\":enabled:NSM"="9991:TCP:\"*\":enabled:NSM"

[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\WindowsFirewall\DomainProfile\IcmpSettings]
"AllowOutboundDestinationUnreachable"=dword:00000000
"AllowOutboundSourceQuench"=dword:00000000
"AllowRedirect"=dword:00000000
"AllowInboundEchoRequest"=dword:00000000
"AllowInboundRouterRequest"=dword:00000000
"AllowOutboundTimeExceeded"=dword:00000000
"AllowOutboundParameterProblem"=dword:00000000
"AllowInboundTimestampRequest"=dword:00000000
"AllowInboundMaskRequest"=dword:00000000
"AllowOutboundPacketTooBig"=dword:00000000

[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\WindowsFirewall\DomainProfile\RemoteAdminSettings]
"Enabled"=dword:00000001
"RemoteAddresses"=""

[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\WindowsFirewall\DomainProfile\Services]

[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\WindowsFirewall\DomainProfile\Services\FileAndPrint]
"Enabled"=dword:00000001
"RemoteAddresses"="\"*\""

[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\WindowsFirewall\DomainProfile\Services\RemoteDesktop]
"Enabled"=dword:00000001
"RemoteAddresses"=""

[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\WindowsFirewall\DomainProfile\Services\UPnPFramework]
"Enabled"=dword:00000000

David Beder [MSFT]

unread,

Aug 12, 2005, 7:34:47 PM8/12/05

yeah, your syntax is wrong.
the program exceptions are missing the scope and enabled settings
the port settings fell prey to too-literal reading of the global scope
character. one shouldn't type in the quotes. the help text just had quotes
around the asterix to say that you had to type that literal character.

here's an example of what I'd expected to see:

[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\WindowsFirewall\DomainProfile\AuthorizedApplications\List]
" c:\\program

files\\CA\\shared\\Components\\DTS\\EGC\\egc21.exe:*:enabled:eTrust EGC"="
c:\\program
files\\CA\\shared\\Components\\DTS\\EGC\\egc21.exe:*:enabled:eTrust EGC"

[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\WindowsFirewall\DomainProfile\GloballyOpenPorts\List]
"1024:TCP:*:enabled:AMO"="1024:TCP:*:enabled:AMO"

--
David
Microsoft Windows Networking
This posting is provided "AS IS" with no warranties, and confers no rights.

"Jay Brooker" <JayBr...@discussions.microsoft.com> wrote in message

news:5D1BBFEE-84BE-4C7F...@microsoft.com...

0 new messages