Super-Networking Blog

So continuing on the config things through the registry topic, not because I am trying to be a hardcore geek but because I need to bootleg something.

So what do you do when you only can get on a box (Server 2003 or Windows XP SP2) remotely and the firewall is enabled. Either out of shear luck or in my case shear skill, you know it, you can stop the Windows Firewall/Internet Connection Sharing (ICS) service. Then you can remote desktop into the box.

Say now that you want to enable the firewall on one of the adapters and not the other. You go into properties on the adapter - > go into Advanced - > Settings. It tells you the service is stopped and if you want to configure it you will need to start the service. If you have it start the service you will be kicked off the box with the firewall now on, back to square one.

So what you do is go into the good old registry:

HKEY_Local_Machine\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile
-or-
HKEY_Local_Machine\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile

Change the setting of firewall from on to off. 0-Being Off and 1-Being On. Now start the ICS service and you should stay connected and the firewall should stay off on the box.

Now you can go into properties on the adapter you want the firewall on - > go to Advanced - > Settings - > Click “On” in the general tab then go to the advanced tab and uncheck the adapter you want the firewall turned off on. Ok out of everything and now you have the firewall enable on the adapters you want and off on the others instead of by default all adapters go on/off together.

Best part is you didn’t have to drive to the remote location to do it.