Server Fault is a question and answer site for system and network administrators. It's 100% free, no registration required.

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

I'm trying to fix up my friend's remote Windows Server 2003 R2 machine.

I have Remote Desktop access at the moment. However, I notice that Windows Firewall/Internet Connection Sharing service of the remote machine is disabled, which seems to be a bad idea. If I enable and start the service now, I may lose my Remote Desktop access in case the exception rule for Remode Desktop has not been defined in Windows Firewall.

So I need a way to inspect and modify exception rules even as the Windows Firewall/ICS service is stopped and disabled.

Does anybody know how?

share|improve this question

migrated from Feb 12 '11 at 4:49

This question came from our site for professional and enthusiast programmers.

You can use the netsh utility.

For example, I used this batch file to allow incoming connections on a specific port:

netsh routing ip nat add portmapping name="Internet" proto=TCP publicip= publicport=%1 privateip= privateport=%1

Note that the above command adds an Inbound Filter rule, which is not the same as Windows Firewall rules. It's an additional mechanism (part of Routing and Remote Access) to filter packets at a lower level.

share|improve this answer

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.