Remote WMI and XP SP2 Firewall - KiXtart.org - official site

You are not logged in. [Log In] KiXtart.org website » Forums » KiXtart » Basic Scripting » Remote WMI and XP SP2 Firewall

Page 1 of 1

1

Topic Options

#128338 - 2004-10-25 02:14 AM Remote WMI and XP SP2 Firewall
Anonymous Anonymous Unregistered	I have some scripts that use remote WMI functions. Since remote clients have been upgraded to SP2 and have firewall enabled, the WMI functions fail. Does anyone know what ports could be excluded to allow the WMI to function, and if so can the port exceptions be done remotely? I can not disable the firewall, however, as a test if I do diable the firewall, the WMI scripts work. Thanks for any help aj
Top

#128339 - 2004-10-25 02:21 AM Re: Remote WMI and XP SP2 Firewall
Les Les KiX Master Registered: 2001-06-11 Posts: 12734 Loc: fortfrances.on.ca	Firewall can be managed through GPO. Turn on logging to see what is being blocked. _________________________ Give a man a fish and he will be back for more. Slap him with a fish and he will go away forever.
Top

#128340 - 2004-10-25 02:36 AM Re: Remote WMI and XP SP2 Firewall
Lonkero Lonkero KiX Master Guru Registered: 2001-06-05 Posts: 22346 Loc: OK	I can't remember the page but MS has exposed an article about "how to make things work after XP sp2 has broken them" _________________________ ! download KiXnet
Top

#128341 - 2004-10-25 02:40 AM Re: Remote WMI and XP SP2 Firewall
Sealeopard Sealeopard KiX Master Registered: 2001-04-25 Posts: 11165 Loc: Boston, MA, USA	So, XPSP2 was rolled out before properly testing the impact on the network infrastructure? _________________________ There are two types of vessels, submarines and targets.
Top

#128342 - 2004-10-25 03:21 AM Re: Remote WMI and XP SP2 Firewall
Lonkero Lonkero KiX Master Guru Registered: 2001-06-05 Posts: 22346 Loc: OK	that's normal by MS. the way all of the security fixes and stuff are pushed out. just wonder when they come to their senses. _________________________ ! download KiXnet
Top

#128343 - 2004-10-25 03:30 AM Re: Remote WMI and XP SP2 Firewall
Cybex Cybex Getting the hang of it Registered: 2004-07-21 Posts: 81 Loc: Brandon, FL.	I think sealeopard was refering to 'art w' roling it out live without testing for impact, not Micro$oft. _________________________ Common sense isn't so common.
Top

#128344 - 2004-10-25 03:44 AM Re: Remote WMI and XP SP2 Firewall
Sealeopard Sealeopard KiX Master Registered: 2001-04-25 Posts: 11165 Loc: Boston, MA, USA	Yes, Microsoft put out enough info for anybody to be very dilligient regarding testing before a company-wide rollout. Art's problems should have never occurred in the first place. _________________________ There are two types of vessels, submarines and targets.
Top

#128345 - 2004-10-25 04:20 AM Re: Remote WMI and XP SP2 Firewall
Lonkero Lonkero KiX Master Guru Registered: 2001-06-05 Posts: 22346 Loc: OK	nah. am I the only one.... well, whatever. _________________________ ! download KiXnet
Top

#128346 - 2004-10-25 02:28 PM Re: Remote WMI and XP SP2 Firewall
Anonymous Anonymous Unregistered	XP SP2 was thoroughly tested before roll out. However some of us live in a real world where we don't control all decisions made. A decision was made that the advantages of a roll out out-weighed the disadvantages of a few non-mission critical scripts breaking. I was hoping that someone in this formum would have some ideas to work around the problem. aj
Top

#128347 - 2004-10-25 02:53 PM Re: Remote WMI and XP SP2 Firewall
Les Les KiX Master Registered: 2001-06-11 Posts: 12734 Loc: fortfrances.on.ca	I gave you ideas. _________________________ Give a man a fish and he will be back for more. Slap him with a fish and he will go away forever.
Top

#128348 - 2004-10-25 03:07 PM Re: Remote WMI and XP SP2 Firewall
Lonkero Lonkero KiX Master Guru Registered: 2001-06-05 Posts: 22346 Loc: OK	some non-critical? lol. there is no advantage in using sp2 whatsoever as I see it. so, after math = no good things - breaking some apps from working - breaking some script = nothing but useless crap. just like XP in general. _________________________ ! download KiXnet
Top

#128349 - 2004-10-25 03:11 PM Re: Remote WMI and XP SP2 Firewall
Chris S. Chris S. MM club member Registered: 2002-03-18 Posts: 2368 Loc: Earth	Here is an article on Microsoft's MSDN website: Connecting Through Windows Firewall
Top

#128350 - 2004-10-25 07:50 PM Re: Remote WMI and XP SP2 Firewall
NTDOC NTDOC Administrator Registered: 2000-07-28 Posts: 11634 Loc: Space	As Les stated a few posts back. The firewall can be manipulated via GPO. Open up the ports to allow WMI or other applications you need to run. Nothing wrong with rolling it out, but it is not broken and has not broken anything. The firewall is doing its job. You just need to modify it a little to allow you to do your scripting.
Top

#128351 - 2004-10-25 07:53 PM Re: Remote WMI and XP SP2 Firewall
ShaneEP ShaneEP MM club member Registered: 2002-11-29 Posts: 2127 Loc: Tulsa, OK	You can also take a look at the netsh.exe cmd that comes with xp sp2. It now included many more options to modify the firewall settings from a command prompt.
Top

#128352 - 2004-10-25 07:58 PM Re: Remote WMI and XP SP2 Firewall
NTDOC NTDOC Administrator Registered: 2000-07-28 Posts: 11634 Loc: Space	Yes it does CitrixMan, but who is going to run out to 5,000 machines and manually do that? As far as I can tell, only some type of startup script is going to be able to modify the firewall settings once it has been deployed.
Top

#128353 - 2004-10-25 08:14 PM Re: Remote WMI and XP SP2 Firewall
ShaneEP ShaneEP MM club member Registered: 2002-11-29 Posts: 2127 Loc: Tulsa, OK	You are correct. I was thinking more like being able to do it in a login script.
Top

#128354 - 2004-10-25 09:04 PM Re: Remote WMI and XP SP2 Firewall
NTDOC NTDOC Administrator Registered: 2000-07-28 Posts: 11634 Loc: Space	If the users had local admin rights you might be able to do that, but many Companies don't allow normal users to have local admin rights. That is why GPO would be the preferred method.
Top

#128355 - 2004-10-25 09:37 PM Re: Remote WMI and XP SP2 Firewall
ShaneEP ShaneEP MM club member Registered: 2002-11-29 Posts: 2127 Loc: Tulsa, OK	Again, I agree. GPO would be the much cleaner, easier to implement and manage method. Just trying to throw out all of the options.
Top

#128356 - 2004-11-05 09:13 PM Re: Remote WMI and XP SP2 Firewall
Radimus Radimus Moderator Registered: 2000-01-06 Posts: 5187 Loc: Tampa, FL	netsh firewall set service remoteadmin enable {subnet} _________________________ How to ask questions the smart way <-----------> Before you ask
Top

Page 1 of 1

1

Previous Topic

Previous Topic View All Topics

View All Topics

Index Next Topic

Next Topic

Moderator: Jochen, Allen, Radimus, Glenn Barnas, ShaneEP, Ruud van Velsen, Arend_, Mart

Hop to:

Shout Box

Who's Online

1 registered (mole) and 1300 anonymous users online.

Newest Members

Viginette, ManuvdWielNL, Sir_Barrington, batdk82, StuTheCoder
17888 Registered Users

Generated in 0.037 seconds in which 0.014 seconds were spent on a total of 12 queries. Zlib compression enabled.

click tracking