Windows Firewall Program Exception List

  • Thread starter Thread starter Guest
  • Start date Start date
G

Guest

I built a GPO that had several program defined in the exception list, several
of which were listed as C:\Windows\... for help desk programs and services.

I have just started upgrading some Windows 2000 machines to XP...during
which the upgrade leaves the OS in the C:\WINNT folder.

1) I tried the %WINDIR%\programfolder\program.exe method before and did not
seem to have good success...I was forced to enter C:\Windows\... is the
%WINDIR% supposed to work?

2) Does it hurt anything building 2 entries in the program exceptions one
for C:\WINNT the other for C:\Windows? If a program is not present at a
particular location will this cause other problems?

Thanks
Smurfman
 
Hi Smurfman,

Thanks for posting!

From your description, I would like answer your questions as below:

Q: 1) I tried the %WINDIR%\programfolder\program.exe method before and did
not seem to have good success...I was forced to enter C:\Windows\... is
the %WINDIR% supposed to work?

A: The %Windir% path can work fine. And in your scenario, this is a
recommended method to set the path. For detailed information, you may refer
to description for setting of "Define Program Exceptions".

Q: 2) Does it hurt anything building 2 entries in the program exceptions
one for C:\WINNT the other for C:\Windows? If a program is not present at
a particular location will this cause other problems?

A: If you do not use %Windir% path. It does not hurt anything building 2
entries in the program exceptions. Also, it doesn't matter if a grogram is
not present at a particular location.

If there is anything that is unclear, please feel free to let me know.

Thanks & Regards,

Jason Tan

Microsoft Online Partner Support
Get Secure! - www.microsoft.com/security

=====================================================

When responding to posts, please "Reply to Group" via your newsreader so
that others may learn and benefit from your issue.

=====================================================
This posting is provided "AS IS" with no warranties, and confers no rights.






--------------------
| Thread-Topic: Windows Firewall Program Exception List
| thread-index: AcW5/ypqoIzieKqgRTGTywjmLsISwA==
| X-WBNR-Posting-Host: 209.217.222.70
| From: "=?Utf-8?B?U211cmZtYW4=?=" <[email protected]>
| Subject: Windows Firewall Program Exception List
| Date: Thu, 15 Sep 2005 07:10:02 -0700
| Lines: 16
| Message-ID: <[email protected]>
| MIME-Version: 1.0
| Content-Type: text/plain;
| charset="Utf-8"
| Content-Transfer-Encoding: 7bit
| X-Newsreader: Microsoft CDO for Windows 2000
| Content-Class: urn:content-classes:message
| Importance: normal
| Priority: normal
| X-MimeOLE: Produced By Microsoft MimeOLE V6.00.3790.0
| Newsgroups: microsoft.public.win2000.group_policy
| NNTP-Posting-Host: TK2MSFTNGXA03.phx.gbl 10.40.2.250
| Path: TK2MSFTNGXA01.phx.gbl!TK2MSFTNGXA03.phx.gbl
| Xref: TK2MSFTNGXA01.phx.gbl microsoft.public.win2000.group_policy:12575
| X-Tomcat-NG: microsoft.public.win2000.group_policy
|
| I built a GPO that had several program defined in the exception list,
several
| of which were listed as C:\Windows\... for help desk programs and
services.
|
| I have just started upgrading some Windows 2000 machines to XP...during
| which the upgrade leaves the OS in the C:\WINNT folder.
|
| 1) I tried the %WINDIR%\programfolder\program.exe method before and did
not
| seem to have good success...I was forced to enter C:\Windows\... is the
| %WINDIR% supposed to work?
|
| 2) Does it hurt anything building 2 entries in the program exceptions one
| for C:\WINNT the other for C:\Windows? If a program is not present at a
| particular location will this cause other problems?
|
| Thanks
| Smurfman
|
 
Thanks Jason.
Last night I did put the %WINDIR% in the exception list...I am thinking that
when I tried this before perhaps there was a typo...but it seemed to look
just fine when I logged in as admin, and looked at the program exceptions.

Thanks
J
 
Hi Smurfman,

Good to hear everything works fine. If you have any other questions or
concerns, please feel free to let us know.

Hope you have a wonderful weekend!

Thanks & Regards,

Jason Tan

Microsoft Online Partner Support
Get Secure! - www.microsoft.com/security

=====================================================

When responding to posts, please "Reply to Group" via your newsreader so
that others may learn and benefit from your issue.

=====================================================
This posting is provided "AS IS" with no warranties, and confers no rights.





--------------------
| Thread-Topic: Windows Firewall Program Exception List
| thread-index: AcW6u+dL+ovjXsiiSZiq2wv+miHn4A==
| X-WBNR-Posting-Host: 209.217.222.70
| From: "=?Utf-8?B?U211cmZtYW4=?=" <[email protected]>
| References: <[email protected]>
<[email protected]>
| Subject: RE: Windows Firewall Program Exception List
| Date: Fri, 16 Sep 2005 05:41:05 -0700
| Lines: 100
| Message-ID: <[email protected]>
| MIME-Version: 1.0
| Content-Type: text/plain;
| charset="Utf-8"
| Content-Transfer-Encoding: 7bit
| X-Newsreader: Microsoft CDO for Windows 2000
| Content-Class: urn:content-classes:message
| Importance: normal
| Priority: normal
| X-MimeOLE: Produced By Microsoft MimeOLE V6.00.3790.0
| Newsgroups: microsoft.public.win2000.group_policy
| NNTP-Posting-Host: TK2MSFTNGXA03.phx.gbl 10.40.2.250
| Path: TK2MSFTNGXA01.phx.gbl!TK2MSFTNGXA03.phx.gbl
| Xref: TK2MSFTNGXA01.phx.gbl microsoft.public.win2000.group_policy:12601
| X-Tomcat-NG: microsoft.public.win2000.group_policy
|
| Thanks Jason.
| Last night I did put the %WINDIR% in the exception list...I am thinking
that
| when I tried this before perhaps there was a typo...but it seemed to look
| just fine when I logged in as admin, and looked at the program exceptions.
|
| Thanks
| J
|
| "Jason Tan (MSFT)" wrote:
|
| > Hi Smurfman,
| >
| > Thanks for posting!
| >
| > From your description, I would like answer your questions as below:
| >
| > Q: 1) I tried the %WINDIR%\programfolder\program.exe method before and
did
| > not seem to have good success...I was forced to enter C:\Windows\...
is
| > the %WINDIR% supposed to work?
| >
| > A: The %Windir% path can work fine. And in your scenario, this is a
| > recommended method to set the path. For detailed information, you may
refer
| > to description for setting of "Define Program Exceptions".
| >
| > Q: 2) Does it hurt anything building 2 entries in the program
exceptions
| > one for C:\WINNT the other for C:\Windows? If a program is not present
at
| > a particular location will this cause other problems?
| >
| > A: If you do not use %Windir% path. It does not hurt anything building
2
| > entries in the program exceptions. Also, it doesn't matter if a grogram
is
| > not present at a particular location.
| >
| > If there is anything that is unclear, please feel free to let me know.
| >
| > Thanks & Regards,
| >
| > Jason Tan
| >
| > Microsoft Online Partner Support
| > Get Secure! - www.microsoft.com/security
| >
| > =====================================================
| >
| > When responding to posts, please "Reply to Group" via your newsreader
so
| > that others may learn and benefit from your issue.
| >
| > =====================================================
| > This posting is provided "AS IS" with no warranties, and confers no
rights.
| >
| >
| >
| >
| >
| >
| > --------------------
| > | Thread-Topic: Windows Firewall Program Exception List
| > | thread-index: AcW5/ypqoIzieKqgRTGTywjmLsISwA==
| > | X-WBNR-Posting-Host: 209.217.222.70
| > | From: "=?Utf-8?B?U211cmZtYW4=?=" <[email protected]>
| > | Subject: Windows Firewall Program Exception List
| > | Date: Thu, 15 Sep 2005 07:10:02 -0700
| > | Lines: 16
| > | Message-ID: <[email protected]>
| > | MIME-Version: 1.0
| > | Content-Type: text/plain;
| > | charset="Utf-8"
| > | Content-Transfer-Encoding: 7bit
| > | X-Newsreader: Microsoft CDO for Windows 2000
| > | Content-Class: urn:content-classes:message
| > | Importance: normal
| > | Priority: normal
| > | X-MimeOLE: Produced By Microsoft MimeOLE V6.00.3790.0
| > | Newsgroups: microsoft.public.win2000.group_policy
| > | NNTP-Posting-Host: TK2MSFTNGXA03.phx.gbl 10.40.2.250
| > | Path: TK2MSFTNGXA01.phx.gbl!TK2MSFTNGXA03.phx.gbl
| > | Xref: TK2MSFTNGXA01.phx.gbl
microsoft.public.win2000.group_policy:12575
| > | X-Tomcat-NG: microsoft.public.win2000.group_policy
| > |
| > | I built a GPO that had several program defined in the exception list,
| > several
| > | of which were listed as C:\Windows\... for help desk programs and
| > services.
| > |
| > | I have just started upgrading some Windows 2000 machines to
XP...during
| > | which the upgrade leaves the OS in the C:\WINNT folder.
| > |
| > | 1) I tried the %WINDIR%\programfolder\program.exe method before and
did
| > not
| > | seem to have good success...I was forced to enter C:\Windows\... is
the
| > | %WINDIR% supposed to work?
| > |
| > | 2) Does it hurt anything building 2 entries in the program exceptions
one
| > | for C:\WINNT the other for C:\Windows? If a program is not present
at a
| > | particular location will this cause other problems?
| > |
| > | Thanks
| > | Smurfman
| > |
| >
| >
|
 
Back
Top