Windows Firewall with Advanced Secuirty config for SCOM2012 R2

We are trying to get SCOM installed on our sharepoint servers, but for whatever reason they require to have the windows firewall enabled.
Here are the things that I know
There is no hard firewall between the SCOM server and the Sharepoint Server in question
I added all the required ports to inbound and outbound both TCP and UDP connections
I added even all local and remote ports to inbound and outbound TCP and UDP connection
Windows firewall is turned off on the SCOM server
When Running SMOKE it still gives 10/11 errors only thing that works is the PING
Not sure what else to do short of turning off the firewall but that is not an option because they require it.

Hi,
Here is an official article talks about ports required for your reference.
Operations Manager 2012 Firewall Scenarios
http://technet.microsoft.com/en-us/library/jj656649.aspx#BKMK_Firewall
We
are trying to better understand customer views on social support experience, so your participation in this
interview project would be greatly appreciated if you have time.
Thanks for helping make community forums a great place.

Similar Messages

AGPM 4.0 SP2 Editors cannot open "Windows Firewall with Advanced Security" area of a GPO

When attempting to Edit a checked-out GPO in AGPM, & navigating to "Computer Configuration\Policies\Windows Settings\Security Settings\Windows Firewall with Advanced Security\Windows Firewall with Advanced Security - LDAP://CN...." Editors
get:
"There was an error opening the Windows Firewall with Advanced Security snap-in
An error occurred while trying to open the policy.
Error: The system cannot find the path specified
Code 0x3"
This happens with GPOs that existed prior to AGPM install where the GPO was "controlled", and with new Controlled GPOs created within AGPM. A workaround is to grant the user Full Control within AGPM (and have them re-launch Group Policy Management
MMC via Shift right-click "Run as different user"), but this circumvents the Change Control we are attempting to use AGPM for. Any ideas of how to fix this, or how to file a bug report?
Also, changes made to Incoming Firewall rules do not show up in the AGPM Settings or Differences reports. I'd imagine this is related to the known issue described on the Release Notes page here:
http://technet.microsoft.com/en-us/library/dn458958.aspx

Hi Fabian - Thanks for the response. I checked & the AGPM Server is on a subnet that was not mapping to any AD Site. Based on its subnet/location, it actually should be in the same Site as the PDCe. I added a new Subnet definition to
AD & waited until "nltest /dsgetsite" was reporting the correct Site on the AGPM Server. Now, with just Editor role, I can access the Advanced Firewall area of a checked out GPO from my AGPM Client, which is correctly in a different AD Site.
I think this might have solved it.
Should this requirement be added to AGPM documentation? "AGPM Server must be installed on a server that is in the same AD Site as the DC holding the PDCe role."
Thanks for the tip!

Windows 8 Windows Firewall with Advanced Security snap-in failed to load Error code: 0x6D9

laptop did not come with support cd all pre installed.
I checked out The Windows Firewall with Advanced Security snap-in failed to load for windows 7 pro
but it is not helping me with windows8 I am trying to update to windows 8.1 but this error wont let me
Please help me

Hi,
I have exactly the same issue. Could you tell how did you fix it ?
Thank you!

How i do fix a Remote Assistance file that has deleted in Windows Firewall with Advanced Security?

Due of my accident, I cleaned a lot of idle files that I don't use while tapping "Delete" hotkey until a mistake I made. "Remote Assistance (TCP-In)" file has missing now. I'm looking this file need restore in Window Firewall, but how?
Not sure if my computer may be critical after deleted a file allow to unblocked through firewall. I'm not a tech, but I need help. So please!
This list are files I have now:
Remote Assistance (SSDP UDP-In)
Remote Assistance (SSDP TCP-In)
Remote Assistance (RA Server TCP-In)
Remote Assistance (PNRP-In)
Remote Assistance (DCOM-In)

Hi,
What you are talking about are Firewall rules, not files.
They should be created with Group Policies.
If yes, it can't be deleted from your client until an Administrator delete the rule in the Domain GPO.
You should talk with your system administrators to see if they didn't change something.
Or maybe you have deleted msra.exe in your system32 folder?
Gerald

Disable windows firewall with endpoint security

Hello NG
I created a new endpoint security policy with ZCM11
Now on the Firewall setting i configured following
Default Behavior: Inherit
Disable Windows Firewall and register Endpoint Security Management Firewall
in Windows Security Center: Yes
My question now. Is the endpoint Security Management Firewall enabled? Are
all port blocked by default?
Where can I see what port are blocked by Endpoint Security?
Regards Ramon

Ramon,
here's the doc reference: http://www.novell.com/documentation/...a/brz5hk9.html
Shaun Pond

Recovering Windows 7 with advanced format drive failes without SP1

I have a dv6-2150us and the hard drive failed. I acquired a new drive and ran recovery disks. Unfortunately many features do not work correctly on an advanced format drive in Windows 7 without SP1. The key feature is Windows update does not work which prevents me from upgrading to SP1. I tried many fixes to Windows update and downloaded SP1 from Microsoft's site, but they all fail to install because update fails to run.
Any advice? I tried to install a fresh ISO of Windows 7 SP1 which works fine, but I would rather not pay for an OS I already own. My Windows license key doesn't work with the Windows 7 SP1 install.
This question was solved.
View Solution.

dv6guy,
Did the HP Recovery Discs actually fail to install??? Does the recovered install fail to boot completely or correctly. Or does the recovered install not only have isues with Windows update and/or other software???
If the recovery completes and you can enter Windows please try to use ABR Beta With Windows 7 Support to backup the installed HP OEM SLP key and HP OEM SLP certificate. Once you have these, save the complete ABR folder to an external location, like a USB stick. Next, install Windows 7 SP1 from your fresh ISO. Do not enter a product key when requested and do not allow Windows to try to activate the computer. Now, restore the key and certificate to your fresh Windows 7 SP1 install. Verify that Windows is activated. Post back and let us know if this succeeded or failed
Please see this forum thread entitled How to Install Windows 7 Without the Disc for more on the subject.
Please send KUDOs
Frank
{------------ Please click the "White Kudos" Thumbs Up to say THANKS for helping.
Please click the "Accept As Solution" on my post, if my assistance has solved your issue. ------------V
This is a user supported forum. I am a volunteer and I don't work for HP.
HP 15t-j100 (on loan from HP)
HP 13 Split x2 (on loan from HP)
HP Slate8 Pro (on loan from HP)
HP a1632x - Windows 7, 4GB RAM, AMD Radeon HD 6450
HP p6130y - Windows 7, 8GB RAM, AMD Radeon HD 6450
HP p6320y - Windows 7, 8GB RAM, NVIDIA GT 240
HP p7-1026 - Windows 7, 6GB RAM, AMD Radeon HD 6450
HP p6787c - Windows 7, 8GB RAM, NVIDIA GT 240

STEPS TO INSTALL THE WINDOWS 7 WITH RECOVERY CD's FOR FRESH ONE

I have Hp compaq Elite 8300 Desktop, in this system having pirated operating system but i want to replace it with original operating system and i had original recovery software CD's to. I am trying to install with the CD's but unable to intall please help me for this issue.

See the section Recovery from recovery discs from this site using your legitimate recovery disks.
http://h20566.www2.hp.com/hpsc/doc/public/display?sp4ts.oid=5232852&calledBy=Search_Result&docId=emr...
It was written for Windows 8 but the principle is the same for Windows 7.
Also note, NO DISCUSSION ON PIRACY allowed in this forum.
Please mark my post as SOLVED if it has resolved your problem. It helps others with similar situations.

In August installed PE12 on Windows Vista with incorrect Sharing Preference for Email Client. Shows default Adobe Email Service How do I change it to Windows Mail?

Had PE6 previously to installing PE12 on Windows Vista. PE 12 installation went OK except for the Sharing Preference for the Email Client. Existing PE12 client is the default Adobe email service not the correct Windows Mail for Vista. How do I make this change..

Hi,
I think that for PSE 12, you may need to switch to Windows Live Mail
http://www.microsoft.com/en-gb/download/details.aspx?id=29224
You may find that you then also need the following fix.
Freeze or error “There is no email program” | Share via email | Elements Organizer | Windows 7
I think that the problem is that the new versions of PSE do not know where to look for the mail client.
Brian

0x8007000e (E_OUTOFMEMORY) while adding a firewall rule using the windows firewall COM API

Hello,
Configuration: Windows Embedded 8 64-bit.
I'm using the Windows Firewall with Advanced Security COM API. The program uses the INetFwRules interface. Basically, I'm using the following code (Form the code sample available here : http://msdn.microsoft.com/en-us/library/windows/desktop/dd339604%28v=vs.85%29.aspx.)
I get the error when performing "hr = pFwRules->Add(pFwRule);".
We can also encounter the problem when removing a rule (using pFwRules->Remove(ruleName);)
HRESULT hrComInit = S_OK;
HRESULT hr = S_OK;
INetFwPolicy2 *pNetFwPolicy2 = NULL;
INetFwRules *pFwRules = NULL;
INetFwRule *pFwRule = NULL;
long CurrentProfilesBitMask = 0;
BSTR bstrRuleName = SysAllocString(L"SERVICE_RULE");
BSTR bstrRuleDescription = SysAllocString(L"Allow incoming network traffic to myservice");
BSTR bstrRuleGroup = SysAllocString(L"Sample Rule Group");
BSTR bstrRuleApplication = SysAllocString(L"%systemroot%\\system32\\myservice.exe");
BSTR bstrRuleService = SysAllocString(L"myservicename");
BSTR bstrRuleLPorts = SysAllocString(L"135");
// Initialize COM.
hrComInit = CoInitializeEx(
0,
COINIT_APARTMENTTHREADED
// Ignore RPC_E_CHANGED_MODE; this just means that COM has already been
// initialized with a different mode. Since we don't care what the mode is,
// we'll just use the existing mode.
if (hrComInit != RPC_E_CHANGED_MODE)
if (FAILED(hrComInit))
printf("CoInitializeEx failed: 0x%08lx\n", hrComInit);
goto Cleanup;
// Retrieve INetFwPolicy2
hr = WFCOMInitialize(&pNetFwPolicy2);
if (FAILED(hr))
goto Cleanup;
// Retrieve INetFwRules
hr = pNetFwPolicy2->get_Rules(&pFwRules);
if (FAILED(hr))
printf("get_Rules failed: 0x%08lx\n", hr);
goto Cleanup;
// Create a new Firewall Rule object.
hr = CoCreateInstance(
__uuidof(NetFwRule),
NULL,
CLSCTX_INPROC_SERVER,
__uuidof(INetFwRule),
(void**)&pFwRule);
if (FAILED(hr))
printf("CoCreateInstance for Firewall Rule failed: 0x%08lx\n", hr);
goto Cleanup;
// Populate the Firewall Rule object
pFwRule->put_Name(bstrRuleName);
pFwRule->put_Description(bstrRuleDescription);
pFwRule->put_ApplicationName(bstrRuleApplication);
pFwRule->put_ServiceName(bstrRuleService);
pFwRule->put_Protocol(NET_FW_IP_PROTOCOL_TCP);
pFwRule->put_LocalPorts(bstrRuleLPorts);
pFwRule->put_Grouping(bstrRuleGroup);
pFwRule->put_Profiles(CurrentProfilesBitMask);
pFwRule->put_Action(NET_FW_ACTION_ALLOW);
pFwRule->put_Enabled(VARIANT_TRUE);
// Add the Firewall Rule
hr = pFwRules->Add(pFwRule);
if (FAILED(hr))
printf("Firewall Rule Add failed: 0x%08lx\n", hr);
goto Cleanup;
This works pretty well but, sometimes, at system startup, adding a rule ends up with the error 0x8007000e (E_OUTOFMEMORY) ! At startup, the system is always loaded cause several applications starts at the same time. But nothing abnormal. This is quite a random
issue.
According MSDN documentation, this error indicates that the system "failed to allocate the necessary memory".
I'm not convinced that we ran out of memory.
Has someone experienced such an issue? How to avoid this?
Thank you in advance.
Regards, -Ruben-

Does Windows 8 desktop have the same issue? Are you building a custom WE8S image, or are you using a full WE8S image? The reason I ask is to make sure you have the modules in the image to support the operation.
Is Windows Embedded 8.1 industry an option?
www.annabooks.com / www.seanliming.com / Book Author - Pro Guide to WE8S, Pro Guide to WES 7, Pro Guide to POS for .NET

Windows Firewall doesn't work as advertised: "File and Sharing (SMB-in)" fails to restrict by user, computer or IP.

Hello,
I'm trying to understand whether I'm the one who's crazy, doing something wrong, or whether Windows Firewall was designed to be broken (and stay that way through Windows Server 2008 R2!)
When I go to Windows Firewall with Advanced Security from the Start Menu and edit the Inbound Rule for "File and Sharing (SMB-in)", the result I am seeking is that I can restrict access by both user and computer.
Upon enabling the rule, and selecting the "Allow the connection if it is secure" option (and nothing else), the firewall obliges by denying any and all attempts by other computers to map or browse files.
When I enter the name of one PC in the Computers tab under the "Allow connections from these computers", again the firewall obliges and the said PC can now browse and map to shares on that server. HOWEVER, now other computers on the network are able
to do the same, as long as they have any set of verifiable credentials (like a local user/admin or domain user/admin, etc). Trying to restrict by user or by IP yield almost identical results. Both those who I do and do not want are able to access
files on the said server.
My question is this: how is this firewall rule supposed to work? What do we have to do to actually make it accept and reject connections based on the criteria we have provided?
My goal is to only allow SMB access to a user IF they log in from a particular computer or group of computers.
Any help would be GREATLY appreciated!
Waqqas

I too find the same problem. I enable the firewall rule, put in Local Addresses that I want to be able to get through the firewall to access the File shares, but it opens the firewall so any ip address can access the shares. Anyone have an answer?
And No, Niko Bellic, checking the MSDN forum is NOT the answer!

How to Create Windows Firewall Predefined rules using Powershell

Windows Firewall Predefined rules using Powershell
Following commands are working some time however sometimes it's giving errors. Any help would be appreciated
WORKING ==> Set-NetFirewallRule -DisplayGroup "File and Printer Sharing" -Enabled True
Set-NetFirewallRule -DisplayGroup "File and Printer Sharing" -Enabled True -Direction Inbound
NOT WORKING
PS C:\Windows\system32> Set-NetFirewallRule -DisplayGroup "File and Printer Sharing" -Enabled True -Direction Outbound
Set-NetFirewallRule : One of the port keywords is invalid.
At line:1 char:1
+ Set-NetFirewallRule -DisplayGroup "File and Printer Sharing" -Enabled True -Dire ...
+ ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
+ CategoryInfo : InvalidArgument: (MSFT_NetFirewal...ystemName = ""):root/standardcimv2/MSFT_NetFirewallRule) [Se
t-NetFirewallRule], CimException
+ FullyQualifiedErrorId : HRESULT 0x80070057,Set-NetFirewallRule
PS C:\Windows\system32> Set-NetFirewallRule -DisplayGroup "File and Printer Sharing" -Enabled True -Direction Outbound
Set-NetFirewallRule : One of the port keywords is invalid.
At line:1 char:1
+ Set-NetFirewallRule -DisplayGroup "File and Printer Sharing" -Enabled True -Dire ...
+ ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
+ CategoryInfo : InvalidArgument: (MSFT_NetFirewal...ystemName = ""):root/standardcimv2/MSFT_NetFirewallRule) [Se
t-NetFirewallRule], CimException
+ FullyQualifiedErrorId : HRESULT 0x80070057,Set-NetFirewallRule
Anoop C Nair (My Blog www.AnoopCNair.com)
- Twitter @anoopmannur -
FaceBook Forum For SCCM

The command:
Get-NetFirewallRule -DisplayGroup "File and Printer Sharing" -Direction Outbound
produces the output:
Name : FPS-NB_Session-In-TCP
DisplayName : File and Printer Sharing (NB-Session-In)
Description : Inbound rule for File and Printer Sharing to allow NetBIOS Session Service connections. [TCP 139]
DisplayGroup : File and Printer Sharing
Group : @FirewallAPI.dll,-28502
Enabled : True
Profile : Any
Platform : {}
Direction : Outbound
Action : Allow
EdgeTraversalPolicy : Block
LooseSourceMapping : False
LocalOnlyMapping : False
Owner :
PrimaryStatus : OK
Status : The rule was parsed successfully from the store. (65536)
EnforcementStatus : NotApplicable
PolicyStoreSource : PersistentStore
PolicyStoreSourceType : Local
Name : FPS-NB_Session-Out-TCP
DisplayName : File and Printer Sharing (NB-Session-Out)
Description : Outbound rule for File and Printer Sharing to allow NetBIOS Session Service connections. [TCP 139]
DisplayGroup : File and Printer Sharing
Group : @FirewallAPI.dll,-28502
Enabled : True
Profile : Any
Platform : {}
Direction : Outbound
Action : Allow
EdgeTraversalPolicy : Block
LooseSourceMapping : False
LocalOnlyMapping : False
Owner :
PrimaryStatus : OK
Status : The rule was parsed successfully from the store. (65536)
EnforcementStatus : NotApplicable
PolicyStoreSource : PersistentStore
PolicyStoreSourceType : Local
Name : FPS-SMB-In-TCP
DisplayName : File and Printer Sharing (SMB-In)
Description : Inbound rule for File and Printer Sharing to allow Server Message Block transmission and reception via Named Pipes. [TCP 445]
DisplayGroup : File and Printer Sharing
Group : @FirewallAPI.dll,-28502
Enabled : True
Profile : Any
Platform : {}
Direction : Outbound
Action : Allow
EdgeTraversalPolicy : Block
LooseSourceMapping : False
LocalOnlyMapping : False
Owner :
PrimaryStatus : OK
Status : The rule was parsed successfully from the store. (65536)
EnforcementStatus : NotApplicable
PolicyStoreSource : PersistentStore
PolicyStoreSourceType : Local
Name : FPS-SMB-Out-TCP
DisplayName : File and Printer Sharing (SMB-Out)
Description : Outbound rule for File and Printer Sharing to allow Server Message Block transmission and reception via Named Pipes. [TCP 445]
DisplayGroup : File and Printer Sharing
Group : @FirewallAPI.dll,-28502
Enabled : True
Profile : Any
Platform : {}
Direction : Outbound
Action : Allow
EdgeTraversalPolicy : Block
LooseSourceMapping : False
LocalOnlyMapping : False
Owner :
PrimaryStatus : OK
Status : The rule was parsed successfully from the store. (65536)
EnforcementStatus : NotApplicable
PolicyStoreSource : PersistentStore
PolicyStoreSourceType : Local
Name : FPS-NB_Name-In-UDP
DisplayName : File and Printer Sharing (NB-Name-In)
Description : Inbound rule for File and Printer Sharing to allow NetBIOS Name Resolution. [UDP 137]
DisplayGroup : File and Printer Sharing
Group : @FirewallAPI.dll,-28502
Enabled : True
Profile : Any
Platform : {}
Direction : Outbound
Action : Allow
EdgeTraversalPolicy : Block
LooseSourceMapping : False
LocalOnlyMapping : False
Owner :
PrimaryStatus : OK
Status : The rule was parsed successfully from the store. (65536)
EnforcementStatus : NotApplicable
PolicyStoreSource : PersistentStore
PolicyStoreSourceType : Local
Name : FPS-NB_Name-Out-UDP
DisplayName : File and Printer Sharing (NB-Name-Out)
Description : Outbound rule for File and Printer Sharing to allow NetBIOS Name Resolution. [UDP 137]
DisplayGroup : File and Printer Sharing
Group : @FirewallAPI.dll,-28502
Enabled : True
Profile : Any
Platform : {}
Direction : Outbound
Action : Allow
EdgeTraversalPolicy : Block
LooseSourceMapping : False
LocalOnlyMapping : False
Owner :
PrimaryStatus : OK
Status : The rule was parsed successfully from the store. (65536)
EnforcementStatus : NotApplicable
PolicyStoreSource : PersistentStore
PolicyStoreSourceType : Local
Name : FPS-NB_Datagram-In-UDP
DisplayName : File and Printer Sharing (NB-Datagram-In)
Description : Inbound rule for File and Printer Sharing to allow NetBIOS Datagram transmission and reception. [UDP 138]
DisplayGroup : File and Printer Sharing
Group : @FirewallAPI.dll,-28502
Enabled : True
Profile : Any
Platform : {}
Direction : Outbound
Action : Allow
EdgeTraversalPolicy : Block
LooseSourceMapping : False
LocalOnlyMapping : False
Owner :
PrimaryStatus : OK
Status : The rule was parsed successfully from the store. (65536)
EnforcementStatus : NotApplicable
PolicyStoreSource : PersistentStore
PolicyStoreSourceType : Local
Name : FPS-NB_Datagram-Out-UDP
DisplayName : File and Printer Sharing (NB-Datagram-Out)
Description : Outbound rule for File and Printer Sharing to allow NetBIOS Datagram transmission and reception. [UDP 138]
DisplayGroup : File and Printer Sharing
Group : @FirewallAPI.dll,-28502
Enabled : True
Profile : Any
Platform : {}
Direction : Outbound
Action : Allow
EdgeTraversalPolicy : Block
LooseSourceMapping : False
LocalOnlyMapping : False
Owner :
PrimaryStatus : OK
Status : The rule was parsed successfully from the store. (65536)
EnforcementStatus : NotApplicable
PolicyStoreSource : PersistentStore
PolicyStoreSourceType : Local
Name : FPS-ICMP4-ERQ-In
DisplayName : File and Printer Sharing (Echo Request - ICMPv4-In)
Description : Echo Request messages are sent as ping requests to other nodes.
DisplayGroup : File and Printer Sharing
Group : @FirewallAPI.dll,-28502
Enabled : True
Profile : Any
Platform : {}
Direction : Outbound
Action : Allow
EdgeTraversalPolicy : Block
LooseSourceMapping : False
LocalOnlyMapping : False
Owner :
PrimaryStatus : OK
Status : The rule was parsed successfully from the store. (65536)
EnforcementStatus : NotApplicable
PolicyStoreSource : PersistentStore
PolicyStoreSourceType : Local
Name : FPS-ICMP4-ERQ-Out
DisplayName : File and Printer Sharing (Echo Request - ICMPv4-Out)
Description : Echo Request messages are sent as ping requests to other nodes.
DisplayGroup : File and Printer Sharing
Group : @FirewallAPI.dll,-28502
Enabled : True
Profile : Any
Platform : {}
Direction : Outbound
Action : Allow
EdgeTraversalPolicy : Block
LooseSourceMapping : False
LocalOnlyMapping : False
Owner :
PrimaryStatus : OK
Status : The rule was parsed successfully from the store. (65536)
EnforcementStatus : NotApplicable
PolicyStoreSource : PersistentStore
PolicyStoreSourceType : Local
Name : FPS-ICMP6-ERQ-In
DisplayName : File and Printer Sharing (Echo Request - ICMPv6-In)
Description : Echo Request messages are sent as ping requests to other nodes.
DisplayGroup : File and Printer Sharing
Group : @FirewallAPI.dll,-28502
Enabled : True
Profile : Any
Platform : {}
Direction : Outbound
Action : Allow
EdgeTraversalPolicy : Block
LooseSourceMapping : False
LocalOnlyMapping : False
Owner :
PrimaryStatus : OK
Status : The rule was parsed successfully from the store. (65536)
EnforcementStatus : NotApplicable
PolicyStoreSource : PersistentStore
PolicyStoreSourceType : Local
Name : FPS-ICMP6-ERQ-Out
DisplayName : File and Printer Sharing (Echo Request - ICMPv6-Out)
Description : Echo Request messages are sent as ping requests to other nodes.
DisplayGroup : File and Printer Sharing
Group : @FirewallAPI.dll,-28502
Enabled : True
Profile : Any
Platform : {}
Direction : Outbound
Action : Allow
EdgeTraversalPolicy : Block
LooseSourceMapping : False
LocalOnlyMapping : False
Owner :
PrimaryStatus : OK
Status : The rule was parsed successfully from the store. (65536)
EnforcementStatus : NotApplicable
PolicyStoreSource : PersistentStore
PolicyStoreSourceType : Local
Name : FPS-LLMNR-In-UDP
DisplayName : File and Printer Sharing (LLMNR-UDP-In)
Description : Inbound rule for File and Printer Sharing to allow Link Local Multicast Name Resolution. [UDP 5355]
DisplayGroup : File and Printer Sharing
Group : @FirewallAPI.dll,-28502
Enabled : True
Profile : Any
Platform : {}
Direction : Outbound
Action : Allow
EdgeTraversalPolicy : Block
LooseSourceMapping : False
LocalOnlyMapping : False
Owner :
PrimaryStatus : OK
Status : The rule was parsed successfully from the store. (65536)
EnforcementStatus : NotApplicable
PolicyStoreSource : PersistentStore
PolicyStoreSourceType : Local
Name : FPS-LLMNR-Out-UDP
DisplayName : File and Printer Sharing (LLMNR-UDP-Out)
Description : Outbound rule for File and Printer Sharing to allow Link Local Multicast Name Resolution. [UDP 5355]
DisplayGroup : File and Printer Sharing
Group : @FirewallAPI.dll,-28502
Enabled : True
Profile : Any
Platform : {}
Direction : Outbound
Action : Allow
EdgeTraversalPolicy : Block
LooseSourceMapping : False
LocalOnlyMapping : False
Owner :
PrimaryStatus : OK
Status : The rule was parsed successfully from the store. (65536)
EnforcementStatus : NotApplicable
PolicyStoreSource : PersistentStore
PolicyStoreSourceType : Local
The command:
(Get-NetFirewallRule -DisplayGroup "File and Printer Sharing" -Direction Outbound).DisplayName
shows the display names of the 14 outbound rules in the FPS group:
File and Printer Sharing (NB-Session-In)
File and Printer Sharing (NB-Session-Out)
File and Printer Sharing (SMB-In)
File and Printer Sharing (SMB-Out)
File and Printer Sharing (NB-Name-In)
File and Printer Sharing (NB-Name-Out)
File and Printer Sharing (NB-Datagram-In)
File and Printer Sharing (NB-Datagram-Out)
File and Printer Sharing (Echo Request - ICMPv4-In)
File and Printer Sharing (Echo Request - ICMPv4-Out)
File and Printer Sharing (Echo Request - ICMPv6-In)
File and Printer Sharing (Echo Request - ICMPv6-Out)
File and Printer Sharing (LLMNR-UDP-In)
File and Printer Sharing (LLMNR-UDP-Out)
If your output is different than this, it means rules have been removed (or added) to the File and Print Sharing group.
For example, if you run the command:
New-NetFirewallRule -DisplayName "My test rule 2" -group "File and Printer Sharing" -Enabled True -Protocol tcp -LocalPort 12346 -Direction Inbound
This adds a new inbound firewall rule to the FPS group. Output looks like:
Name : {06449724-944b-4048-834f-8870b9dce4f6}
DisplayName : My test rule 2
Description :
DisplayGroup : File and Printer Sharing
Group : File and Printer Sharing
Enabled : True
Profile : Any
Platform : {}
Direction : Inbound
Action : Allow
EdgeTraversalPolicy : Block
LooseSourceMapping : False
LocalOnlyMapping : False
Owner :
PrimaryStatus : OK
Status : The rule was parsed successfully from the store. (65536)
EnforcementStatus : NotApplicable
PolicyStoreSource : PersistentStore
PolicyStoreSourceType : Local
This test rule is of course useless because there's no listener on TCP port 12346 on this particular machine..
The new rule can also be viewed in Windows Firewall with Advanced Security:
Now if you run the command:
(Get-NetFirewallRule -DisplayGroup "File and Printer Sharing" -Direction Inbound).DisplayName
the output will look like:
File and Printer Sharing (Spooler Service - RPC)
File and Printer Sharing (Spooler Service - RPC-EPMAP)
My test rule 2
Sam Boutros, Senior Consultant, Software Logic, KOP, PA http://superwidgets.wordpress.com (Please take a moment to Vote as Helpful and/or Mark as Answer, where applicable)

[Solved] Windows Firewall rule that allows Windows Update

Can anyone kindly give me a Windows Firewall rule that allows Windows Update? Assume I'm running MMC's "Windows Firewall with Advanced Security" snap-in as Administrator. Note that a "solution" that takes down the outbound firewall is
not acceptable.
Thank You.
===== Solution =====
Suppose that, as the default, you've set the outbound firewall to block (see
To close the outbound firewall, below). In order for Windows Update to check whether an update is available and then to download the update files, you first need an outbound firewall
allow-rule that allows the Windows Update service to pass through the outbound firewall.
Prerequisite: Knowledge of the Microsoft Management Console (MMC) and its "Windows Firewall with Advanced Security" plug-in.
What you will do: You will use the "Windows Firewall with Advanced Security" MMC plug-in to create an outbound firewall rule that
allows '%SystemRoot%\System32\svchost.exe' (the generic service driver) to pass through the outbound firewall on behalf of 'wuauserv' (the name of the specific service that performs the update).
Warning: If you don't know what I'm writing about, get help.
Name: Allow Windows Update (...or any name you prefer - it doesn't matter)
Group:
Profile: Public
Enabled: Yes
Action: Allow
Program: %SystemRoot%\System32\svchost.exe
Local Address: Any
Remote Address: Any
Protocol: Any
Local Port: Any
Remote Port: Any
Allowed Computers: Any
Status: OK
Service: wuauserv
Rule Source: Local Setting
Interface Type: All interface types
Excepted Computers: None
Description:
To open the outbound firewall:
More accurate wording would be
Outbound connections are allowed unless explicitly blocked by a rule.
If you look at the standard rules you will find no block-rules. That means that nothing is blocked, everything is allowed, and the outbound firewall is wide open.
To close the outbound firewall:
More accurate wording would be
Outbound connections are blocked unless explicitly allowed by a rule.
If you look at the standard rules you will find only allow-rules that have been crafted to allow the vital Windows connections to pass through the outbound firewall. To an informed observer it's obvious that the firewall engineers crafted these
allow-rules so that users who closed the outbound firewall wouldn't have to write them. But the firewall engineers left out Windows Update.

Hi mark,
Thanks for sharing, it will help other users who have similar issue.
Regards

Windows Firewall and unwanted rules being auto created

When i activated the Windows Firewall after switching from Third party software i encountered something weird. The firewall created several New rules that blocked certain traffic.
Is their any circumstances where the Windows firewall will Auto create rules that Block traffic?
Is there any way to prevent this from happeneing? I want to know what happens in my firewall :)
I have disabled the prompt that asks the user to allow traffic, but still i dont feel that i have full Control of the firewalls behaviour. Could disabling this feature being the cause of Things being auto blocked?

You can try looking in Event Log: Applications and Services -> Microsoft-> Windows -> Windows Firewall -> Firewall
For list of event id's you can try looking at
https://technet.microsoft.com/en-us/library/dd364427(v=ws.10).aspx
You can use Event Viewer to create a filter for event id 2004 (A rule has been added to the Windows Firewall exception list.) or you could modify the powershell script you can find here
http://superuser.com/questions/747184/is-there-anyway-to-see-when-a-windows-firewall-rule-was-created-enabled-using-po
to also include the ModifyingApplication (or any of the values) eg
$Events = Get-WinEvent -ErrorAction SilentlyContinue -FilterHashtable @{logname="Microsoft-Windows-Windows Firewall With Advanced Security/Firewall"; id=2004}
ForEach ($Event in $Events) {
$eventXML = [xml]$Event.ToXml()
For ($i=0; $i -lt $eventXML.Event.EventData.Data.Count; $i++) {
Add-Member -InputObject $Event -MemberType NoteProperty -Force `
-Name $eventXML.Event.EventData.Data[$i].name `
-Value $eventXML.Event.EventData.Data[$i].'#text'
$Events | Format-Table -Property TimeCreated,RuleName,ModifyingApplication -AutoSize
(You may need to adjust powershell screen buffer width first)

Windows Firewall blocking connections (randomly)

Hello everybody
I'm experiencing a very strange issue with Windows 8.1 x64 (this is a clean install of Windows 8.1)...
Sometimes, my computer suddenly claims to be unable to connect to any external host. For example, I try to visit any website. Funny though I can connect to websites like Google and visit other websites as well, but for example I'm unable to download a file
anywhere (sorry I don't remember the error message).
Another example: Sometimes I try to play a game where you have to start a "patcher" first, then the patcher starts the actual game. I'm able to start the patcher, the patcher downloads the necessary files, then as soon as I start the game itself,
I'm unable to connect to the login server. Really strange.
What I really don't understand: As soon as I restart my computer and retry whatever wasn't working, everything seems to work fine for an unknown time. A reboot fixes the issue I had, but the possibility that another application
If I disable the Windows Firewall COMPLETELY (using wf.msc and turn off every firewall profile) and restart my computer afterwards, I don't experience any of the issues described above. I've been using my computer for more than 3 days with a disabled Windows
Firewall and I never had any networking issue. Then I re-enabled the Windows Firewall, and the issues began to appear again.
I've installed the most recent Windows updates as of today. The device drivers are up-to-date as well and the BIOS too. It's really frustrating as I seriously don't want to disable the firewall..
I used to work with Windows 7 x64 and Windows 8 x64 and I could swear I never had any issue with the Windows Firewall. It all started with Windows 8.1 now... Any ideas what could be wrong here?
Kind regards
Makorus

Hi,
For the issue, I would like to know if you create some rules for Windows Firewall.
Meanwhile, I suggest we perform the following steps to restore default setting,
1.Open Control Panel, and then click Windows Firewall.
2.In the left pane, click Restore defaults. If you're prompted for an administrator password or confirmation, type the password or provide confirmation.
3.In the dialog box that appears, click Restore defaults. At the confirmation prompt, click Yes.
If the issue persists, I suggest you check the follow path to see if there are any errors in the Firewall.
Control Panel>>Windows Firewall>>Windows Firewall with Advanced Security>>Monitoring>>Firewall
Keep post.
Regards,
Kelvin hsu
TechNet Community Support

Windows Firewall Rules - Automatically Added by Sharepoint

Hi All,
I do have two WFE 's and 1 APP server . When i checked the inbound firewall rules of WFE1 and WFE 2 i can see
Sharepoint Search 16500,16501,.... Allowed
Sharepoint Web Services 32843,32844,... Allowed
SPUserCodeV4 32846 allowed
When i checked the APP Server , these are not added .
Can somebody let me know even though all have been created the same way only in the App Server this is not added?
For making the APP Server , i have stopped the Microsoft SharePoint Foundation Web Application service.

HI Thompson,You can see the firewall service as "windows firewall" in services.msc.You can find the firewall rules in administrative tools->windows firewall with advanced security in Win 2008 servers.You can also look in URL that exactly discussing
about your query.
You can see the firewall service as "windows firewall" in services.msc.You can find the firewall rules in search as windows firewall with advanced security in Win 2012 servers.You can also look in URL that exactly discussing about your query
http://expertsharepoint.blogspot.de/2014/05/firewall-settings-for-sharepoint-farm.html
Anil Avula[MCP,MCSE,MCSA,MCTS,MCITP,MCSM] See Me At: http://expertsharepoint.blogspot.de/

Windows Firewall with Advanced Secuirty config for SCOM2012 R2

Similar Messages

Maybe you are looking for