The best approach (imho) would be to use a GPO to set this.

Doing it remotely may or may not work with NETSH depending on how the system is currently configured.

Here is an article that discusses the many ways to change it.


http://www.windowsecurity.com/articles/Customizing-Windows-Firewall.html