Take the 2-minute tour ×
Server Fault is a question and answer site for professional system and network administrators. It's 100% free, no registration required.

Previously I was working with Server 2003 and managed to lock myself out of the server (I was accessing it remotely) by enabling the firewall.

I want to remotely enable the firewall on Server 2008 without locking myself out of the server (access via RDP) and then selectively add IP addresses to the firewall to exclude. i.e. block specific IP addresses.

Are there any step by step instructions on how to safely do this?

share|improve this question
add comment

2 Answers

up vote 1 down vote accepted

Best bet is to script it, with a scripted reversal should you be locked out.

Say, if prompt is not answered in 20s, revert all settings.

You can script the windows firewall using vbs or netsh commands.

http://www.activexperts.com/activmonitor/windowsmanagement/scripts/networking/windowsfirewall/

Scripting is good, it makes you think carefully about what you are planning to do.

share|improve this answer
add comment

If you have a windows AD server you create a group policy and apply it to that OU that the windows server is in then enable the firewall but allow tcp port 3389 through the advanced firewall configuration. If you lock yourself out you can then just remove the GP or change it to turn off the firewall.

share|improve this answer
    
It's not an AD server but thanks for the idea. –  Guy Jun 4 '10 at 21:13
add comment

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.