(Unattended Installation)
Applies To: Windows Server 2003, Windows Server 2003 R2, Windows Server 2003 with SP1, Windows Server 2003 with SP2
The [WindowsFirewall.profile_name] section contains entries for configuring the Windows Firewall.
Windows Firewall maintains two sets of configurations known as profiles. The Domain profile is used when a computer is a member of a domain, while the Standard profile is used when a computer is not connected to a domain. The [WindowsFirewall.profile_name] section is a user-defined section that is referenced by the [WindowsFirewall] section to make changes to Windows Firewall's default configuration. You must include the [WindowsFirewall] and [WindowsFirewall.profile_name] sections in your answer file to configure the Windows Firewall in unattended Setup. You may specify a domain type of profile, a standard type, or a profile that applies to both domain and standard.
The [WindowsFirewall.profile_name] section contains entries for specifying a domain type of profile, a standard type, or a profile that applies to both domain and standard.
Answer File Entries for the [WindowsFirewall. profile_name ] Section
Entry | Description |
---|---|
Type |
Specifies the type of profile to use for changing the default configuration of the Windows Firewall. |
Mode |
Specifies whether to enable or disable Windows Firewall. |
Exceptions |
Specifies whether to enable or disable the Windows Firewall Exceptions list. Windows Firewall blocks all unsolicited, incoming traffic, except traffic that matches entries in the exceptions list. |
Notifications |
Specifies whether to enable or disable notifications. |
MulticastBroadcastResponse |
Specifies whether to enable or disable multicast and broadcast packets. |
AllowedPrograms |
Specifies a list of programs that will not be blocked by the Windows Firewall. |
Services |
Specifies a list of services that will not be blocked by the Windows Firewall, such as file and print services, remote administration services, and remote desktop services. |
PortOpenings |
Specifies a list of open ports that will not be blocked by Windows Firewall. |
IcmpSettings |
Specifies a list of Internet Control Message Protocol (ICMP) message types that will not be blocked by Windows Firewall. |
[WindowsFirewall.Standard]
Type = 1
Mode = 1
Exceptions = 1
Notifications = 1
MulticastBroadcastResponse = 1
AllowedPrograms = WindowsFirewall.RemoteAssistance
Services = WindowsFirewall.RemoteDesktop
PortOpenings = WindowsFirewall.WebServer
IcmpSettings = WindowsFirewall.EchoRequest
Specifies the type of profile to use for changing the default configuration of the Windows Firewall.
Type = 0 | 1 | 3
Value | Description |
---|---|
0 |
Specifies a domain type of profile. |
1 |
Specifies a standard type of profile. |
3 |
Specifies both domain and standard profiles |
Type = 3
The default is 3. This is an optional entry. If you do not specify a value for the Type entry, the default value is applied.
Specifies whether to enable or disable Windows Firewall.
Mode = 0 | 1
Value | Description |
---|---|
1 |
Enables Windows Firewall. |
0 |
Disables Windows Firewall. |
Mode = 1
The default is 1. This is a required entry.
Specifies whether to enable or disable the Windows Firewall Exceptions list. Windows Firewall blocks all unsolicited, incoming traffic, except traffic that matches entries in the exceptions list.
Exceptions = 0 | 1
Value | Description |
---|---|
1 |
Enables Windows Firewall Exceptions list. |
0 |
Disables Windows Firewall Exceptions list. |
Exceptions = 1
The default is 1. You can configure Windows Firewall to be enabled with no exceptions, enabled with exceptions, or disabled.
Specifies whether to enable or disable notifications.
Notifications = 0 | 1
Value | Description |
---|---|
1 |
Enables notifications. |
0 |
Disables notifications. |
Notifications = 1
The default is 1. This is an optional entry.
Specifies whether to enable or disable multicast and broadcast packets.
MulticastBroadcastResponse = 0 | 1
Value | Description |
---|---|
1 |
Enables MulticastBroadcastResponse. |
0 |
Disables MulticastBroadcastResponse. |
MulticastBroadcastResponse = 1
The default is 1. This is an optional entry.
Specifies a list of programs that will not be blocked by the Windows Firewall.
AllowedPrograms = WindowsFirewall.program_name
Value | Description |
---|---|
WindowsFirewall.program_name |
Specifies the name of the program that will not be blocked by the Windows Firewall. |
AllowedPrograms = WindowsFirewall.RemoteAssistance
You may include multiple user-defined WindowsFirewall.program_name entries. Each entry references a [WindowsFirewall.program_name] section that defines the path and program name. Each WindowsFirewall.program_name entry must have a unique name, for example, WindowsFirewall.RemoteAssistance.
Specifies a list of services that will not be blocked by the Windows Firewall, such as file and print services, remote administration services, and remote desktop services.
Services = WindowsFirewall.service_name
Value | Description |
---|---|
WindowsFirewall.service_name |
Specifies the name of the service that will not be blocked by the Windows Firewall. |
Services = WindowsFirewall.PrintService
You may include multiple user-defined services. Each service entry references a [WindowsFirewall.service_name] section that defines the type of service, mode, and address. Each service entry must have a unique name.
Specifies a list of open ports that will not be blocked by Windows Firewall.
PortOpenings = WindowsFirewall.portopening_name
Value | Description |
---|---|
WindowsFirewall.portopening_name |
Specifies the name of the port that will not be blocked by the Windows Firewall. |
PortOpenings = WindowsFirewall.WebServer
You may include multiple user-defined port openings. Each entry references a [WindowsFirewall.portopening_name] section that defines the port. Each entry must have a unique name.
Specifies a list of Internet Control Message Protocol (ICMP) message types that will not be blocked by Windows Firewall.
IcmpSettings = WindowsFirewall.icmpsetting_name
Value | Description |
---|---|
WindowsFirewall.icmpsetting_name |
Specifies the ICMP message type that will not be blocked by the Windows Firewall. |
IcmpSettings = WindowsFirewall.EchoRequest
You may include multiple user-defined ICMP settings. Each entry references a [WindowsFirewall.icmpsetting_name] section that specifies the name and type of ICMP setting. Each entry must have a unique name.