Export (0) Print
Expand All

Specify Which Profile You Are Configuring

Updated: March 28, 2005

Applies To: Windows Server 2003, Windows Server 2003 R2, Windows Server 2003 with SP1, Windows Server 2003 with SP2

This procedure is useful when you are configuring Windows Firewall settings and you want to configure the settings in a specific profile.

Administrative Credentials

To perform this procedure, you must be a member of the Administrators group on the local computer, or you must have been delegated the appropriate authority. If the computer is joined to a domain, members of the Domain Admins group might be able to perform this procedure.

To specify which profile you are configuring

This procedure can be performed using the graphical user interface, the command prompt, and Group Policy.

Using the graphical user interface

To specify which profile you are configuring
  1. Open Windows Firewall.

  2. If Windows Firewall is not currently using the profile that you want to configure, do one of the following:

    If Windows Firewall is using the domain profile and you want to configure settings in the standard profile, remove the computer from the domain or disconnect the computer from the network. This will force Windows Firewall to use the standard profile.

    If Windows Firewall is using the standard profile and you want to configure settings in the domain profile, join your computer to the domain in which its computer account resides.

If a Windows Firewall setting appears dimmed in the graphical user interface, and on the General tab, you see For your security, some settings are controlled by Group Policy, the setting might be managed by Group Policy. If all Windows Firewall settings appear dimmed, and on the General tab, you see You must be a computer administrator to change these settings, you do not have administrative rights to configure Windows Firewall.

Using the command prompt

To specify which profile you are configuring
  • Use the following netsh firewall commands:

    netsh firewall set allowedprogram profile = profile

    netsh firewall set icmpsetting profile = profile

    netsh firewall set multicastbroadcastresponse profile = profile

    netsh firewall set notifications profile = profile

    netsh firewall set opmode profile = profile

    netsh firewall set portopening profile = profile

    netsh firewall set service profile = profile

The profile parameter can have any of the following values:

 

Value Description

current

Specifies that you want to configure settings in the profile that Windows Firewall is currently using.

domain

Specifies that you want to configure settings in the domain profile.

standard

Specifies that you want to configure settings in the standard profile.

all

Specifies that you want to configure settings in the standard and domain profiles.

If you get an "Access Denied" message when you run a command, you do not have administrative rights to configure Windows Firewall. If you get an "Ok" message but the command does not take effect, the setting might be managed by Group Policy.

Using Group Policy

To specify which profile you are configuring
  1. Open the Group Policy Object Editor snap-in to edit the Group Policy object (GPO) that is used to manage Windows Firewall settings in your organization.

  2. Open Computer Configuration, open Administrative Templates, open Network, open Network Connections, and then open Windows Firewall.

  3. To configure settings in the domain profile, open Domain Profile. To configure settings in the standard profile, open Standard Profile.

Notes

  • To start Windows Firewall, click Start, point to Control Panel, and then click Windows Firewall.

  • To open a command prompt, click Start, point to All programs, point to Accessories, and then click Command Prompt.

  • Windows Firewall is not included in the original release of the Windows Server 2003 operating systems.

See Also

Was this page helpful?
(1500 characters remaining)
Thank you for your feedback

Community Additions

ADD
Show:
© 2014 Microsoft