What is the registry key to turn off the windows firewall that comes with sp2?
I know it exists, but after about an hour of googling, have given up on finding it.
If you cannot find the registry key, what would be a simple way of
turning off the firewall from console, suppose i needed to do it on a
100 machines without having to open up services.msc on each and
disable it.


As quick as possible please.
Answer does not have to be extremely detailed, just needs to contain
what i requested.

---

Clarification of Question by gerth-ga on 31 Oct 2004 06:56 PST

If you post a solution other than the registry key, it needs to
require absolutly NO user interaction, I just need to be able to run
the file and disable the firewall, easier for me this way as i can run
the file remotely using stuff from sysinternals.

Regards.

---

Request for Question Clarification by hummer-ga on 31 Oct 2004 07:20 PST

Hi again gerth,

Please let me know if this is what you are looking for...

Turing of SP2 Firewall via registry entry?
Newsgroups: microsoft.public.windowsxp.security_admin
"There are several solutions available to disable the firewall
programmatically without extracting the SP2 EXE file.

Here are two ways:
1) Adding the registry values mentioned, this can be done either
before or after SP2 is installed

The registry key path has changed since I posted that post (it is now
WindowsFirewall instead of FirewallPolicy):

HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\WindowsFirewall\DomainProfile
          \EnableFirewall=0 (DWORD data type)

HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\WindowsFirewall\StandardProfile
          \EnableFirewall=0 (DWORD data type)

Those registry values are documented in WF_XPSP2.doc

WF_XPSP2.doc "Deploying Windows Firewall Settings for Microsoft
Windows XP with Service Pack 2" is downloadable from
http://www.microsoft.com/downloads/details.aspx?familyid=4454e0e1-61fa-447a-bdcd-499f73a637d1

If you want to disable the service as well:
sc.exe config SharedAccess start= disabled

2) The following command line will disable SP2's firewall (must be run
after SP2 is installed and at least one reboot is done):

netsh.exe firewall set opmode mode=disable profile=all
The netsh.exe syntax is also documented in WF_XPSP2.doc.

If you want to disable the service as well:
sc.exe config SharedAccess start= disabled
http://groups.google.ca/groups?hl=en&lr=&selm=e5NhVTWjEHA.536%40TK2MSFTNGP11.phx.gbl

Will look forward to hearing from you,
hummer

---

Clarification of Question by gerth-ga on 31 Oct 2004 07:28 PST

Does this disable "the security center" as well?

Regards.

---

Request for Question Clarification by hummer-ga on 31 Oct 2004 08:17 PST

Hi gerth,

No, I don't believe so. Download this Word document and see page 16:

Disabling the Use of Windows Firewall Across Your Network:
http://download.microsoft.com/download/6/8/a/68a81446-cd73-4a61-8665-8a67781ac4e8/WF_XPSP2.doc

hummer

---

Clarification of Question by gerth-ga on 31 Oct 2004 09:49 PST

I would require it to disable the windows security center as well.

Regards.

---

Request for Question Clarification by hummer-ga on 31 Oct 2004 10:39 PST

Hi gerth,

To disable the Windows XP Security Center open the Services MMC:
"Press the Windows and R keys > in the resulting window type
services.msc > in the resulting window scroll down to Security Center
and double-click on it > In the "Startup type:" box use the arrow to
scroll down to choose "Disabled" click Apply and reboot, or, click
Apply and click the button that says Stop."
http://www.tweakhound.com/xp/securitycenter/

How's that?
hummer

---

Clarification of Question by gerth-ga on 31 Oct 2004 10:51 PST

That requires user interaction, as i stated in my question this i dont want.

Regards.

---

Request for Question Clarification by hummer-ga on 31 Oct 2004 12:04 PST

Gerth, sorry for the delay but I've been out.

Looking at the information I gave you earlier, both options include this note:

If you want to disable the service as well:
sc.exe config SharedAccess start= disabled

hummer

---

Request for Question Clarification by hummer-ga on 31 Oct 2004 13:49 PST

Hi gerth, 

You can create a couple of registry values that will disable the FW.

FW_XPSP2.doc have more about this.

The following command lines will also disable SP2's firewall:

sc.exe config SharedAccess start= disabled
netsh.exe firewall set opmode mode=disable profile=all
met.exe stop SharedAccess

The netsh.exe syntax is also documented in WF_XPSP2.doc.
http://groups.google.ca/groups?hl=en&lr=&selm=ulEkptVgEHA.904%40TK2MSFTNGP09.phx.gbl

hummer

---

Request for Question Clarification by hummer-ga on 01 Nov 2004 12:03 PST

Hi gerth,

How are you making out? Did I find what you needed?  Please post an
update so I'll know to either post what I sent you as an answer or
continue to research your question.

Thank you,
hummer

Hi gerth,

I have been reading Microsoft's document WF_XPSP2.doc, and am
confident that it contains the solution you are looking for.

>>>>>> WF_XPSP2.doc 

"Deploying Windows Firewall Settings for Microsoft:
See: Disabling the Use of Windows Firewall Across Your Network:
http://download.microsoft.com/download/6/8/a/68a81446-cd73-4a61-8665-8a67781ac4e8/WF_XPSP2.doc

>>>>>> Forum

Newsgroups: microsoft.public.windowsxp.security_admin
Subject: Re: Tur[n]ing of[f] SP2 Firewall via registry entry?
"There are several solutions available to disable the firewall
programmatically without extracting the SP2 EXE file. Here are two
ways:

1) Adding the registry values mentioned, this can be done either
before or after SP2 is installed

The registry key path has changed since I posted that post (it is now
WindowsFirewall instead of FirewallPolicy):

HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\WindowsFirewall\DomainProfile
          \EnableFirewall=0 (DWORD data type)

HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\WindowsFirewall\StandardProfile
          \EnableFirewall=0 (DWORD data type)

If you want to disable the service as well:
sc.exe config SharedAccess start= disabled

2) The following command line will disable SP2's firewall (must be run
after SP2 is installed and at least one reboot is done):

netsh.exe firewall set opmode mode=disable profile=all
The netsh.exe syntax is also documented in WF_XPSP2.doc.

If you want to disable the service as well:
sc.exe config SharedAccess start= disabled
http://groups.google.ca/groups?hl=en&lr=&selm=e5NhVTWjEHA.536%40TK2MSFTNGP11.phx.gbl

>>>>>> Additional Link

Newsgroups: microsoft.public.windowsxp.security_admin
Subject: Re: Cannot turn off Post SP2 firewall

sc.exe config SharedAccess start= disabled
netsh.exe firewall set opmode mode=disable profile=all
met.exe stop SharedAccess

The netsh.exe syntax is also documented in WF_XPSP2.doc.
http://groups.google.ca/groups?hl=en&lr=&selm=ulEkptVgEHA.904%40TK2MSFTNGP09.phx.gbl

I was happy to find this for you. If you have any questions, or if
this isn't what you are looking for, please post a clarification
request *before* closing/rating my answer and I'll be happy to reply.

Thank you,
hummer

Hi Gerth,

I have found a .bat file posted in a forum of governmentsecurity:

KillFirewall.bat

CODE:

@echo off
net stop "Security Center"
net stop SharedAccess
> "%Temp%.\kill.reg" ECHO REGEDIT4
>>"%Temp%.\kill.reg" ECHO.
>>"%Temp%.\kill.reg" ECHO
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess]
>>"%Temp%.\kill.reg" ECHO "Start"=dword:00000004
>>"%Temp%.\kill.reg" ECHO.
>>"%Temp%.\kill.reg" ECHO
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wuauserv]
>>"%Temp%.\kill.reg" ECHO "Start"=dword:00000004
>>"%Temp%.\kill.reg" ECHO.
>>"%Temp%.\kill.reg" ECHO [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\wscsvc]
>>"%Temp%.\kill.reg" ECHO "Start"=dword:00000004
>>"%Temp%.\kill.reg" ECHO.
START /WAIT REGEDIT /S "%Temp%.\kill.reg"
DEL "%Temp%.\kill.reg"
DEL %0

The link is no longer available from the site, maybe it is still
working via google cache:

://www.google.es/search?q=cache:EjKTRhZb4kIJ:www.governmentsecurity.org/forum/index.php%3Fshowtopic%3D7754%26view%3Dgetlastpost+XP+SP2+regedit+disable+firewall+&hl=es

Hope it helps,

Lannaeus

Keywords in Google: "XP SP2 regedit disable firewall"

Gerth, 

Hummer has not been paid yet for the help you received, and asked,
whether the advice given was helpful, so it could be posted and Hummer
will be paid for the work done. Could you please answer Hummer's
"request for clarification" and tell us whether the advice helped, and
if so, let Hummer post it as an official answer?

This method can be used to disable firewall in domain environment
through GPO after sp2 has been installed..
there are two steps or we may say two script:
here what these scripts do......
1. add two line to netfw.inf file or copy all to(location:c:\windows\inf) 
2. run "netsh firewall reset"
----------
   copynetfw.bat
if /I %windir% EQU C:\WINDOWS copy \\yourdc\share\netfw.inf c:\windows\inf\ 
if NOT %windir% EQU C:\WINDOWS echo hi
----------------------
   reset.bat
netsh firewall reset
----------------------
how to applay gpo:run these scripts as a startup script through
computer configration
here what the content of netfw.inf is:
[version]
Signature      = "$Windows NT$"
DriverVer      =07/01/2001,5.1.2600.2132

[DefaultInstall]
AddReg=ICF.AddReg.DomainProfile
AddReg=ICF.AddReg.StandardProfile

[ICF.AddReg.DomainProfile]
HKLM,"SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\AuthorizedApplications\List","%windir%\system32\sessmgr.exe",0x00000000,"%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
HKLM,"SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile","DoNotAllowExceptions",0x00010001,0
HKLM,"SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile","EnableFirewall",0x00010001,0

[ICF.AddReg.StandardProfile]
HKLM,"SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List","%windir%\system32\sessmgr.exe",0x00000000,"%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"