Hi Doug, I have installed SCW on a W2K3, PS4.0 and configured the ports. In fact the only one I had to add was 1494. Instead of adding the file to the exceptions, I did the following; Open gpedit.msc --> User Configuration --> Administrative Templates --> Windows Components --> Attachment Manager: 1. Default risk level for attachments = Enabled - Low Risk 2. Inclusion list for low file types = Enabled - .cmd;.exe;.bat;.vbs 3. Do not preserve zone information in attachments = Enabled HTH Toby On 12/6/05, Stratton, Doug ISMC:EX <Doug.M.Stratton@xxxxxxxxx> wrote: > > We are installing sp1 on our farm. > \We are going to turn on the windows firewall. > > We have a bunch of ports we are going to allow but are wondering if we > should use program exceptions instead/addition to opening ports? > > If exceptions are recommended which exceptions? > > Suggestions and thanks >