The MS way to disable DEP works great but requires a modification of the boot.ini on ALL computers.
Just creating one new boot.ini and copying it to all clients would be easier imho.

This should do. !! WARNING: NOT TESTED !!

Code:

$Local = GetFileTime ("c:\boot.ini")
$Remote = GetFileTime ("\\server\share\boot.ini")
If
	$Local <> $Remote
		;copy the original boot.ini file for backup.
		Copy "c:\boot.ini" "c:\bootini.old" /h
		;copy new boot.ini file to client.
		Copy "\\server\share\boot.ini" "c:\boot.ini" /h
EndIf


For the XPSP2 firewall there is a UDF to en/disable it here.

Edited by Mart (2005-08-11 04:47 PM)
_________________________
Mart

- Chuck Norris once sold ebay to ebay on ebay.