From the newsgroup: Microsoft.public.softwareupdatesvcs: Anthony wrote: > Hello, > I would like to deploy SP2 using my SUS on my 100PC network. One > thing that I definatly need to do is disable the firewall on all > machines. We do not need a firewall on each machine as all machine > are shielded by our main firewall. > > Does anyone have an idea as to how I can disable the firewall? We > have 1000 machines and I need to disable the firewall. Hi SUS will not be able to do this for you. If you have Active Directory, use a Group Policy for this. There are several solutions available to disable the firewall not using GPO. Here are two ways: 1) Adding the registry values below, this can be done either before or after SP2 is installed: HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\WindowsFirewall\DomainPro file \EnableFirewall=0 (DWORD data type) HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\WindowsFirewall\StandardP rofile \EnableFirewall=0 (DWORD data type) Those registry values are documented in WF_XPSP2.doc WF_XPSP2.doc "Deploying Windows Firewall Settings for Microsoft Windows XP with Service Pack 2" is downloadable from http://www.microsoft.com/downloads/details.aspx?familyid=4454e0e1-61fa-4 47a-bdcd-499f73a637d1 2) The following command line will disable SP2's firewall (must be run after SP2 is installed and at least one reboot is done): netsh.exe firewall set opmode mode=disable profile=all (this will do the same as the registry values above) The netsh.exe syntax is also documented in WF_XPSP2.doc. If you want to disable the firewall service as well, run this command line (do not remove the space after start= ): sc.exe config SharedAccess start= disabled -- torgeir, Microsoft MVP Scripting and WMI, Porsgrunn Norway Administration scripting examples and an ONLINE version of the 1328 page Scripting Guide: http://www.microsoft.com/technet/scriptcenter/default.mspx Jonathan Jesse Network+, Linux+, A+ MCSA Network Specialist Founders Trust Personal Bank This page and any accompanying documents contain confidential information intended for a specific individual and purpose. If you are not the intended recipient, you are hereby notified that any disclosure, copying, distribution, or use of the information contained herein (including any reliance thereon) is strictly prohibited. If you received this transmission in error, please immediately contact the sender and destroy the material in its entirety, whether in electronic or hard copy format. -----Original Message----- From: windows2000-bounce@xxxxxxxxxxxxx [mailto:windows2000-bounce@xxxxxxxxxxxxx] On Behalf Of Freitas, Eduardo Sent: Friday, September 17, 2004 1:59 PM To: windows2000@xxxxxxxxxxxxx Subject: [windows2000] Win XP SP2 modification Hello everyone! I was wondering if anyone knows how to modify WindowsXP-KB835935-SP2-ENU.exe and pack it back into the executable. I wanted to modify the netfw.inf to change the firewall settings before installing it on a machine... Best Regards, Eduardo ******************************************************** This Weeks Sponsor StressedPuppy.com Games Feeling stressed out? Check out our games to relieve your stress. http://www.StressedPuppy.com ******************************************************** To Unsubscribe, set digest or vacation mode or view archives use the below link. http://thethin.net/win2000list.cfm ******************************************************** This Weeks Sponsor StressedPuppy.com Games Feeling stressed out? Check out our games to relieve your stress. http://www.StressedPuppy.com ******************************************************** To Unsubscribe, set digest or vacation mode or view archives use the below link. http://thethin.net/win2000list.cfm