Server Fault is a question and answer site for system and network administrators. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

I need to enable an existing firewall rule (or make a new one) on all the computers in a Active Directory domain. What is the best/easiest way to do this?

EDIT: The computers are running Windows Vista default firewall. Active Directory is run by Windows 2008 AD controllers.

share|improve this question
what kind of firewall are you using? – pablo Feb 15 '11 at 19:32
I'd assume windows – Jacob Feb 15 '11 at 19:33
What is the DFL of your AD Domain? Do you have .admx templates available, or only .adm? – MDMarra Feb 15 '11 at 19:37
I would guess 2008 and no .admx (as I'm not familiar with the templates, url?). We can't make any major change to AD. If that is required then we need to consider a scripted/programmed approach. – Tedd Hansen Feb 15 '11 at 19:40
if you're on a 2008 DFL, then you have the .admx templates. They shipped with Server 2008. – MDMarra Feb 15 '11 at 20:04
up vote 0 down vote accepted

This document should be everything you need.

This is however a bit more information than you seem to be after.

Skip to page 16 to get started, or continue on from page 32.

Due to your comment on possibly scripting the solution you can use net sh to do this.

Hope this helps you.

share|improve this answer

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.