WSUS Firewall rules do not use names nor groupnames

Hi everyone,
Today I've been playing around with PowerShell Workflows and the firewall cmdlets on my test environment. (Great stuff, Thanks
Scripting Guys)
After working out a little workflow I noticed that the firewall rules that were made by the WSUS feature installation had no Name nor DisplayGroup, only the DisplayName.
My test environment is made up from tree Server 2012 R2 servers with a domain.
The script I made :
workflow Get-AllFirewalls
Parallel{
InlineScript{
Get-NetFirewallRule -Enabled True -Action Allow |?{
$_.Profile -match "Any|Domain"
} | select Name,DisplayName,direction,DisplayGroup,
@{n='Port';e={($_|Get-NetFirewallPortFilter).LocalPort}},
@{n='Protocol';e={($_|Get-NetFirewallPortFilter).Protocol}},
@{n='Program';e={($_|Get-NetFirewallApplicationFilter).Program}}
$output = Get-AllFirewalls -PSComputerName (Get-ADComputer -Filter 'OperatingSystem -like "Windows Server*"').name
$output |Sort-Object DisplayGroup |Format-Table PSComputerName,Name,DisplayName,Direction,Port,Protocol,Program -GroupBy DisplayGroup -AutoSize
Now this is just for testing and I could get around the fact there are no proper names but I think it's sloppy not to fill the naming attributes.
Am I the only one with these results or is it just WSUS?

There are only two rules created, one for HTTP on port 8530 one for HTTPS on port 8531, and the latter isn't even used in most WSUS installations.
There is no Group Name, because this is not a GROUP of rules, it is two individual rules. One is always enabled; the second is optionally enabled WHEN the WSUS Server is configured to use SSL, and it's enabled by an administrative script provided in the
WSUS toolset.
Ergo, a server administrator never has to mess with these two rules at all, so, no, I think it's insignificant that these rules may be missing a couple of generally irrelevant attributes.
Lawrence Garvin, M.S., MCSA, MCITP:EA, MCDBA
SolarWinds Head Geek
Microsoft MVP - Software Packaging, Deployment & Servicing (2005-2014)
My MVP Profile: http://mvp.microsoft.com/en-us/mvp/Lawrence%20R%20Garvin-32101
http://www.solarwinds.com/gotmicrosoft
The views expressed on this post are mine and do not necessarily reflect the views of SolarWinds.

Similar Messages

  • WSUS Repair: Can I not use a drive other than C:?

    I used the wizard to move the WSUS folders from the C: drive to the SBS2008's D: drive in order to recover C: drive disk space as so many others have had to do. Now ofcourse, the system says it no longer is installed as designed and updates to domain
    computers no longer works.
    There is a good TechNet article on how to "Repair Windows Server Update Services" but it assumes the WSUS directory must be created on C: which ofcourse is not what I want.
    I appreciate there are SQL issues involved here, but if I simply specify D: as the partition to create the WSUS directory, substitute D:\WSUS in the wsussetup.exe parameters (from the section in that article headed 'To manually recover Windows Server
    Update Services), will this work?
    Thanks in advance
    Jerome

    Hi Jerome,
    à
    if I simply specify D: as the partition to create the WSUS directory, substitute D:\WSUS in the wsussetup.exe parameters (from the section in that article headed 'To manually
    recover Windows Server Update Services), will this work?
    I suggest that you should follow the step “create a directory called WSUS on the C: partition” to
    repair WSUS as described in this TechNet article (Repair Windows Server Update Services). It will help us to avoid unexpected issues.
    à
    I used the wizard to move the WSUS folders from the C: drive to the SBS2008's D: drive in order to recover C: drive disk space as so many others have had to do.
    After repairing WSUS, please refer to following article and check if help you to
    move WSUS Content and Database Files to a Different Volume.
    How
    to Move WSUS Content and Database Files to a Different Volume
    Meanwhile, please refer to following article and check if help you to recover disk space on C drive.
    Recovering
    Disk Space on the C: Drive in Small Business Server 2008
    If any update, please feel free to let me know.
    Hope this helps.
    Best regards,
    Justin Gu

  • How to view HR photo from a web-site NOT using ArchiveLink NOR ContentRep.

    Hello,
    We have a web site where ALL our employees' photos are maintained.
    It is accessible via HTTP with one of the parameters is the ID number of the employee.
    Is it possible to customize the PA in such a way that it will display the photo in the SAPgui by accessing the photo using a URL ?
    For example the following URL:
    http://<server_name>:<server_port>/hr_photo/EMPLOYEE_ID.jpg
    Please, help.
    Thanks and kind regards,
    Gil Halevy

    I know what you are asking for but sadly, it is NOT possible without customization. I have had 2 past clients with this issue....typically they had the employee photos on some common intranet server in some folder and simply referenced them by "(username).jpg" through some kind of custom employee directory app/web page. Since ESS services, many MSS services, HRAS services, etc. via the portal and then also SAPGui transactions rely on the ArchiveLink config for photos as standard, we had to load all the photos into ArchiveLink and do it the "right" way. It actually is VERY easy to do. The added benefit that the clients like too is that you can have SEVERAL photos (such as photos over time) for a single employee (since there is no longer the dependence on the naming of the image file such as (employee#).gif or (userid).jpg. Sooooo....sorry I don't have the answer you wanted, but hopefully my answer helped.

  • How to deal with the rule that do not use "object" class to declear a class

    I run my flex project in sonar. And there is a rule "Do not use Object class ".
    I just want to know how to deal with this problem.
    I mean, when I try to write a base class, I don't know which kind of class will be transfered in by reference, which type I can declear instead of "object"?

    Check out this example:
    The moment I put in the code >> box1.addItem("hello"); << and run the application, the BusNameListener is fired. Hope this makes sense.
    import java.awt.*;
    import javax.swing.*;
    import java.awt.event.ActionListener;
    import java.awt.event.ActionEvent;
    public class JFrameExample {
    private JComboBox box1;
    public JFrameExample() {
    box1 = new JComboBox();
    box1 .setMinimumSize(new Dimension(300, 24));
    box1 .setPreferredSize(new Dimension(300, 24));
    box1.addActionListener(new BusNameListener());
    box1.addItem("hello");
    JFrame f = new JFrame("This is a test");
    f.setSize(400, 150);
    Container content = f.getContentPane();
    // content.setBackground(Color.white);
    content.setLayout(new FlowLayout());
    content.add(box1);
    f.setVisible(true);
    class BusNameListener implements ActionListener {
    public void actionPerformed(ActionEvent e) {
    JComboBox cb = (JComboBox) e.getSource();
    String item = (String) cb.getSelectedItem();
    if (item != null) {
    JOptionPane.showInputDialog(null,
    "Specify...", "File Import",
    JOptionPane.OK_CANCEL_OPTION);
    }

  • How to reload firewall rules from command line on firewall ?

    Hi all,
    I am trying to create script that controls firewall on server. OS version is OS X Server 10.5.6.
    Part of firewall rules is created using firewall admin tools, part of Server Admin Tools. My first question is where are those rules stored permanently ? As far as I understood it should be set of ipfw rules but they are not stored in /etc/ipfilter/ipfw.conf.
    Idea of script is this:
    I have set of rules that should be controlled by Server Admin Tools.
    Also, I have some dynamic rules.
    Whenever some change occurs, I created script that does following:
    /sbin/ipfw -f flush - to flush all existing rules
    /sbin/serveradmin stop ipfilter - to stop existing firewall
    /sbin/serveradmin start ipfilter - to restart firewall and reload permanent rules
    Add my set of rules...
    After flushing all rules and issuing stop and start ipfilter none of rules set through Server Admin Tools are not reloaded. So how should I reload them ? How to save them permanently in the first place ?
    Please note that I do not have access to server (for security reasons). I am developing script on my Mac, sending to client and he tests it. So I cannot do a lot of testing.
    Thank you in advance.
    Best regards,
    Dusan

    Unix and Terminal queries are best posted to the Unix forum under OS X Technologies where those mavens frolic.

  • Rule 5 :target InfoObject Name Source parameter 007 not being used

    Hi Gurus,
    I am trying to load data Into BI using flat file .During creating transformations for infocubes  am getting this error.Rule 5 :target < InfoObject Name > Source parameter 007 not being used .
    Thanks

    Thanks Beekay  iyour suggestion  helped me .
    My problem is solved ,in rule details i removed those fields and again insert those fileds .
    Thanks

  • 0x8007000e (E_OUTOFMEMORY) while adding a firewall rule using the windows firewall COM API

    Hello,
    Configuration: Windows Embedded 8 64-bit.
    I'm using the Windows Firewall with Advanced Security COM API. The program uses the INetFwRules interface. Basically, I'm using the following code (Form the code sample available here : http://msdn.microsoft.com/en-us/library/windows/desktop/dd339604%28v=vs.85%29.aspx.)
     I get the error when performing "hr = pFwRules->Add(pFwRule);".
    We can also encounter the problem when removing a rule (using pFwRules->Remove(ruleName);)
    HRESULT hrComInit = S_OK;
    HRESULT hr = S_OK;
    INetFwPolicy2 *pNetFwPolicy2 = NULL;
    INetFwRules *pFwRules = NULL;
    INetFwRule *pFwRule = NULL;
    long CurrentProfilesBitMask = 0;
    BSTR bstrRuleName = SysAllocString(L"SERVICE_RULE");
    BSTR bstrRuleDescription = SysAllocString(L"Allow incoming network traffic to myservice");
    BSTR bstrRuleGroup = SysAllocString(L"Sample Rule Group");
    BSTR bstrRuleApplication = SysAllocString(L"%systemroot%\\system32\\myservice.exe");
    BSTR bstrRuleService = SysAllocString(L"myservicename");
    BSTR bstrRuleLPorts = SysAllocString(L"135");
    // Initialize COM.
    hrComInit = CoInitializeEx(
    0,
    COINIT_APARTMENTTHREADED
    // Ignore RPC_E_CHANGED_MODE; this just means that COM has already been
    // initialized with a different mode. Since we don't care what the mode is,
    // we'll just use the existing mode.
    if (hrComInit != RPC_E_CHANGED_MODE)
    if (FAILED(hrComInit))
    printf("CoInitializeEx failed: 0x%08lx\n", hrComInit);
    goto Cleanup;
    // Retrieve INetFwPolicy2
    hr = WFCOMInitialize(&pNetFwPolicy2);
    if (FAILED(hr))
    goto Cleanup;
    // Retrieve INetFwRules
    hr = pNetFwPolicy2->get_Rules(&pFwRules);
    if (FAILED(hr))
    printf("get_Rules failed: 0x%08lx\n", hr);
    goto Cleanup;
    // Create a new Firewall Rule object.
    hr = CoCreateInstance(
    __uuidof(NetFwRule),
    NULL,
    CLSCTX_INPROC_SERVER,
    __uuidof(INetFwRule),
    (void**)&pFwRule);
    if (FAILED(hr))
    printf("CoCreateInstance for Firewall Rule failed: 0x%08lx\n", hr);
    goto Cleanup;
    // Populate the Firewall Rule object
    pFwRule->put_Name(bstrRuleName);
    pFwRule->put_Description(bstrRuleDescription);
    pFwRule->put_ApplicationName(bstrRuleApplication);
    pFwRule->put_ServiceName(bstrRuleService);
    pFwRule->put_Protocol(NET_FW_IP_PROTOCOL_TCP);
    pFwRule->put_LocalPorts(bstrRuleLPorts);
    pFwRule->put_Grouping(bstrRuleGroup);
    pFwRule->put_Profiles(CurrentProfilesBitMask);
    pFwRule->put_Action(NET_FW_ACTION_ALLOW);
    pFwRule->put_Enabled(VARIANT_TRUE);
    // Add the Firewall Rule
    hr = pFwRules->Add(pFwRule);
    if (FAILED(hr))
    printf("Firewall Rule Add failed: 0x%08lx\n", hr);
    goto Cleanup;
    This works pretty well but, sometimes, at system startup, adding a rule ends up with the error 0x8007000e (E_OUTOFMEMORY) ! At startup, the system is always loaded cause several applications starts at the same time. But nothing abnormal. This is quite a random
    issue.
    According MSDN documentation, this error indicates that the system "failed to allocate the necessary memory".
    I'm not convinced that we ran out of memory.
    Has someone experienced such an issue? How to avoid this?
    Thank you in advance.
    Regards, -Ruben-

    Does Windows 8 desktop have the same issue? Are you building a custom WE8S image, or are you using a full WE8S image? The reason I ask is to make sure you have the modules in the image to support the operation.
    Is Windows Embedded 8.1 industry an option?
    www.annabooks.com / www.seanliming.com / Book Author - Pro Guide to WE8S, Pro Guide to WES 7, Pro Guide to POS for .NET

  • TS3899 I am getting 144+ emails a day from mail administrator. I do not recognize  these names nor did I send them an email. How can I stop these???

    I am getting 144+ emails a day from mail administrator. I do not recognize  these names nor did I send them an email. How can I stop these???

    We will need more information to be able to assist you.
    These message yoy are receiving are probably just a particular type of spam.  However it is also possible (unlikely) that your email account is being used to send spam, and that these are the bounce messages.
    To tell the difference, you need to look at the email headers.  Open the message, then go to the View menu and select Message -> All Headers.
    Select the text and post it back here (remembering to obscure your own email address first).
    Cheers,
    Rodney

  • Destination disabled. []: [CrystalEnterprise.Ftp]. Please note the name of the job server used for your request and contact your system administrator to make sure the specified destination is enabled. (FWB 00031)

    Hi
    In BO 4.0 SP 9 when a administrator tries to schedule a report via CMC there is no error
    But when a user schedules a report and the destination is FTP location -> Use default settings he gets following error
    Destination disabled. []: [CrystalEnterprise.Ftp]. Please note the name of the job server used for your request and contact your system administrator to make sure the specified destination is enabled. (FWB 00031)
    There is only one Job Server and the destinations are enabled in it
    There is no Job server for Crystal Reports Job Server
    Do i need to create it and how.

    Please check if you have proper rights to schedule to FTP. You can create a new job server, whenever you schedule it, there are multiple job servers, it will handle based on the load. But it is not mandatory, depends on the load.

  • Good evening, my name is Ludmila I have a problem. im buy second hand iphone 5 but I can not use the screen shows asking me apple id but I do not know this is my first iphone I do not know what the police thought it was stolen or lost but I you can help m

    Good evening, my name is Ludmila I have a problem. im buy second hand iphone 5 but I can not use the screen shows asking me apple id but I do not know this is my first iphone I do not know what the police thought it was stolen or lost but I you can help me. Someone told me we should stop function Find my iphone but how?? email does not even know the first lord. It cost me 400 euros but may not use iphone. someone laugh at me because I deceived. Please help me tell me his email talk to you should stop off iCloud or ID

    Scuzati de engleza google translate

  • Is there a way to address email (i.e. a word or some code) that would place that email in a specified inbox folder?  not using internal rule, rather the beginning of this sort happening as it comes in?

    is there a way to address email (i.e. a word or some code) that would place that email in a specified inbox folder?  not using internal rule, rather the beginning of this sort happening as it comes in?
    In other words
    I tell a friend if he is emailing me on a particular subject, is there something he can do at his end ([email protected]/research)
    like adding the word research at the end of my eamil address that would tell my inbox to place that in the inbox/research folder?
    If I have to use a rule on my end, then do I tell him to just place the word research in the subjct line and then I write a rule to place anything with the word research in the subject line in my inbox/research folder?
    will the subject line be required to only have the one word research to work, or will the rule look for any presense of that word in the subject line?
    thanks
    eric

    iCloud email supports 'plus' addressing. http://en.wikipedia.org/wiki/Email_address#Address_tags
    So your friend could just add '+research' to the username part of your email address, and you setup a rule at icloud.com to put all emails sent to that address into a particular folder.
    For example:
    [email protected]
    There's no way to do it without rules on the server though.

  • I have an old version of InDesign CS5, have not used in a while..about a year.  It will not load nor allow me to uninstall and reinstall, please help.  I have original discs and serial number.  How can I fix this?

      I have an old version of InDesign CS5, have not used in a while..about a year.  It will not load nor allow me to uninstall and reinstall, please help.  I have original discs and serial number.  How can I fix this?

    CS Cleaner Tool for installation problems | CCM, CS6, CS5.5, CS5, CS4, CS3

  • Printing to PDF with Ctrl-P (use Adobe Professional 9.4.5) tries to embed a font (WCrSarah) that is not used in the css, nor used on the page itself). Why? Cheers, vernooij@brill.nl

    Hi all,
    Printing a page to PDF with Ctrl-P (use Adobe Professional 9.4.5) tries to embed a font that is on my computer (WCrSarah) that is not used in the css, nor used or named in the page itself. Why? Cheers, [email protected]

    Your template contains an IE Conditional Comment that is adding 30px of top padding to  #sidebar1.  This padding may required in older versions of IE but not IE9.
    &lt;!--[if IE]>
    &lt;style type="text/css">
    /* place css fixes for all versions of IE in this conditional comment */
    .twoColFixRtHdr #sidebar1 { padding-top: 30px; }
    .twoColFixRtHdr #mainContent { zoom: 1; }
    /* the above proprietary zoom property gives IE the hasLayout it needs to avoid several bugs */
    </style>
    &lt;![endif]-->
    To fix it, change [if IE]  to [if lt IE 9]
    Nancy O.
    Alt-Web Design & Publishing
    Web | Graphics | Print | Media  Specialists 
    http://alt-web.com/
    http://twitter.com/altweb

  • Why can I not use the channel name, which is obtained from the function of DAQmx Task, as the input of the channel name for the function of Get Channel Information of DAQ?

    Why can I not use the channel name, which is obtained from the function of DAQmx Task, as the input of the channel name for the function of Get Channel Information of DAQ?

    Not a lot of details here, but my guess is this isn't working for you because you are wiring in the task to the Active Channels Property and not the actual Channel Name. I have attatched a screenshot of what I believe you are trying to do. The Task has 2 channels in it, so I need to index off one of the channels and wire it into the active channels input of the Channel Property node. Then I can read information about that channel
    Attachments:
    channel_name.JPG ‏69 KB

  • Field name DUMMY is reserved (Do not use structure as include in DB table)

    We are trying to add a custom field, e.g., called ZZZ in LIS Communication structure MCEKKO (Purchasing Document Header) by creating a new custom append structure and add the field ZZZ into it, then activate the new append structure, but get warning msg like "Field name DUMMY is reserved (Do not use structure as include in DB table)".
    We do find a field called DUMMY in the structure MCEKKO. How to get rid of the warning msg and successfully activate the new custom append structure with the new field ZZZ?
    We will give you reward points for correct solutions for the above problem!
    Thanks

    hi Dinesh,
    But we wonder why this new custom field appended can not be seen from the right frame of the extraction structure in LBWE?
    Any idea?
    Thanks

Maybe you are looking for

  • License for Snow Leopard upgrade

    I upgraded my Mac mini to Snow Leopard a few months ago by purchasing the $29 upgrade disk (I was previously running 10.5.8). I now want to upgrade my wife's MacBook, which is also running 10.5.8. Do I need to purchase another Snow Leopard disk? Whil

  • Problem in invokign BPEL process from Java

    hi.... Error occured While Executing the java code from my local serve... I am using Eclipse and BPEL server.... hereby i am attaching my code: import com.oracle.bpel.client.Locator; import com.oracle.bpel.client.NormalizedMessage; import com.oracle.

  • OS 4.5- Device hangs periodically

    Hello, I just upgraded to the Rogers version of the OS 4.5 for the Curve (8310)... Now the device appears hang or freeze for up to 10 minutes at a time... Periodically the device screen hangs or freezes and unless you pull the battery there is no way

  • Inbound iDoc search

    Hi Experts, I need to search in SAP all inbound iDocs of a certain type and status, and extract the value they have in a certain segment. In this way I have to process over 100.000 iDocs. I've seen I can get a table view in we02 or we07 that I can ex

  • Drill Down error with more than one dimension

    Hello I'm using AWM 10.2.0.3.0A with Oracle 10.2.0.1.0 and i can't perform drill down operation when i have more than one dimension in the same axis. That is, when i have two dimensions, a can't perform drill down on both dimenions at the same time,