A Program in the Exceptions List Does Not Run Properly

Applies To: Windows Server 2003, Windows Server 2003 R2, Windows Server 2003 with SP1, Windows Server 2003 with SP2

Typically, this problem occurs when you add a program’s executable (.exe) file to the exceptions list and then try to run the program. Either the program will start, but then fail to run properly, or the program will not start at all.

Cause

Some programs depend on more than one .exe file. If this is the case, and the dependent .exe file is not in the exceptions list, the program will not run properly.

Solution

If you have already restarted your computer, but the problem persists, make sure that you added the correct .exe file to the exceptions list. If a program relies on more than one .exe file, you need to identify the .exe files that are associated with the program and add those .exe files to the exceptions list. You can use the tasklist command to determine whether a program relies on other .exe files.

To determine whether a program relies on more than one .exe file

  1. Start the program that you want to evaluate.

  2. At the command line, type tasklist /m, and press ENTER.

  3. If a program relies on another .exe file, you will see it in the list of modules that are associated with the program.

If a program relies on other .exe files, add those files to the exceptions list.

To add a program to the exceptions list

  1. Open Windows Firewall, and then click the Exceptions tab.

  2. On the Exceptions tab, click Add Program, and then follow the instructions that appear on your screen.

If the program still does not work properly, you might have to add ports to the exceptions list.

First, you need to identify the ports used by the program.

To determine the ports used by a program

  1. Start the program that you want to evaluate.

  2. At the command line, type tasklist, and then press ENTER.

  3. Look up the process ID (PID) that is associated with the program you are evaluating. If the program relies on more than one .exe file, be sure to look up the PID for each .exe file that the program is using.

  4. At the command line, type netstat -a -o -n, and then press ENTER.

  5. Use the program’s PID to determine the ports on which the program is listening.

Next, you need to determine which ports are enabled in the exceptions list.

To identify ports that are enabled in the exceptions list

  • At the command line, type netsh firewall show state, and then press ENTER.

    Ports that are designated as open are enabled in the Windows Firewall exceptions list.

If a program uses a port, and the port is not enabled in the exceptions list, try adding the port to the exceptions list.

To add a port to the exceptions list

  1. Open Windows Firewall, and then click the Exceptions tab.

  2. Click Add Port.

  3. In Name, type a friendly name for the port exception.

  4. In Port number, type the port number used by the program.

  5. Click either TCP or UDP to specify the type of port that corresponds to your port number.

  6. Repeat steps 2 through 5 if your program uses multiple ports and the ports are not enabled in the exceptions list.

Important

Adding a port to the exceptions list can lessen the security of your computer because the port will be open any time the computer is running. You should add ports to the exceptions list only when it is not possible to add a program to the exceptions list.