{"id":80,"date":"2013-08-17T21:28:41","date_gmt":"2013-08-18T01:28:41","guid":{"rendered":"http:\/\/batchpatch.com\/?p=80"},"modified":"2022-10-07T11:48:38","modified_gmt":"2022-10-07T15:48:38","slug":"using-batchpatch-with-windows-firewall","status":"publish","type":"post","link":"https:\/\/batchpatch.com\/using-batchpatch-with-windows-firewall","title":{"rendered":"Using BatchPatch with Windows Firewall"},"content":{"rendered":"

BatchPatch uses a combination of Windows Management Instrumentation (WMI) and PsExec to access remote computers, plus ICMP for pinging.\u00a0 If you need to use BatchPatch in an environment where your remote computers have Windows Firewall enabled, here’s what you need to do to make everything work. (For specific information about port requirements, please see BatchPatch Port Requirements<\/a>)<\/p>\n

In general, if you’re using Windows firewall and you encounter any issues that you need to troubleshoot, it is a good idea to enable logging so that you can troubleshoot any potential issues. This link explains how to do that: Enable logging for Windows firewall<\/a><\/p>\n

Note, if desired you can apply a scope<\/em> or IP address range<\/em> to the rules you create below so that the rules only allow inbound connections from a computer with a particular IP address. This enables you to run BatchPatch from a particular computer so that only that BatchPatch computer’s IP address can utilize the firewall rules you create. After you create the firewall rules described in the tutorial below, optionally use this tutorial<\/a> to apply an IP address range to the scope<\/em> for each firewall rule you create.<\/p>\n

Using Group Policy to Configure the Windows Firewall:<\/h2>\n

It is sufficient to use Group Policy to allow “Remote Administration” and “File and Printer Sharing” on the remote computers. See screenshot:<\/strong><\/p>\n

\"\"<\/a><\/p>\n

 <\/p>\n

Configuring the Windows Firewall Directly on Target Computers:<\/h2>\n

If Group Policy is not an option and you instead need to manually adjust the remote computer settings, here’s how:<\/p>\n

When the remote system is Windows 7\/2008R2, Windows 2012\/2012R2, Windows 10\/2016<\/strong>:<\/p>\n

Go to Control Panel > Windows Firewall > Allow an app or feature, and then check the boxes for “File and Printer Sharing”<\/strong><\/em> and “Windows Management Instrumentation (WMI)”<\/strong><\/em> and then click “OK.”<\/strong><\/em><\/p>\n

\"Win2012_FirewallConfig\"<\/a><\/p>\n

 <\/p>\n

When the remote system is Windows 2012 Core (no GUI) or Windows 2016 Core (no GUI)<\/strong>:<\/p>\n

At a PowerShell prompt use the following two commands:<\/p>\n\n

enable-<\/span>netfirewallrule -<\/span>displaygroup "file and printer sharing"<\/span>\nenable-<\/span>netfirewallrule -<\/span>displaygroup "windows management instrumentation (wmi)"<\/span><\/pre><\/td><\/tr><\/table><\/div>\n\n
\"FirewallSettingsServerCore\"<\/a><\/p>\n
 <\/p>\n
When the remote system is Windows 2008 (non-R2)<\/strong>:<\/p>\n
Go to Control Panel > Windows Firewall > Change Settings >Exceptions > check the box for “File and Printer Sharing”<\/strong><\/em> and “Remote Administration”<\/strong><\/em> and then click “Apply”<\/strong><\/em> or “OK.”<\/strong><\/em><\/p>\n
\"\"<\/a><\/p>\n
 <\/p>\n
When the remote system is Windows 2003<\/strong>:<\/p>\n
1. Go to Control Panel > Windows Firewall >Exceptions > check the box for “File and Printer Sharing”<\/strong><\/em> and then click “OK.”<\/strong><\/em><\/p>\n
\"\"<\/a><\/p>\n
2. Open a command prompt and type:<\/p>\n\n
netsh firewall set<\/span> service type = remoteadmin mode =  enable<\/pre><\/td><\/tr><\/table><\/div>\n\n","protected":false},"excerpt":{"rendered":"
BatchPatch uses a combination of Windows Management Instrumentation (WMI) and PsExec to access remote computers, plus ICMP for pinging.\u00a0 If you need to use BatchPatch in an environment where your remote computers have Windows Firewall enabled, here’s what you need to do to make everything work. (For specific information about port requirements, please see BatchPatch […]<\/p>\n","protected":false},"author":4,"featured_media":0,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"_jetpack_memberships_contains_paid_content":false,"footnotes":""},"categories":[1,17,3],"tags":[6,7,8],"class_list":["post-80","post","type-post","status-publish","format-standard","hentry","category-blog","category-general","category-tutorials","tag-batchpatch","tag-firewall","tag-ports"],"jetpack_featured_media_url":"","jetpack_sharing_enabled":true,"_links":{"self":[{"href":"https:\/\/batchpatch.com\/wp-json\/wp\/v2\/posts\/80","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/batchpatch.com\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/batchpatch.com\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/batchpatch.com\/wp-json\/wp\/v2\/users\/4"}],"replies":[{"embeddable":true,"href":"https:\/\/batchpatch.com\/wp-json\/wp\/v2\/comments?post=80"}],"version-history":[{"count":11,"href":"https:\/\/batchpatch.com\/wp-json\/wp\/v2\/posts\/80\/revisions"}],"predecessor-version":[{"id":6005,"href":"https:\/\/batchpatch.com\/wp-json\/wp\/v2\/posts\/80\/revisions\/6005"}],"wp:attachment":[{"href":"https:\/\/batchpatch.com\/wp-json\/wp\/v2\/media?parent=80"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/batchpatch.com\/wp-json\/wp\/v2\/categories?post=80"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/batchpatch.com\/wp-json\/wp\/v2\/tags?post=80"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}