Server Fault is a question and answer site for system and network administrators. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

I've blown up the firewall rules on a domain controller (DC). Since there are no restore points in Windows 2008 and restoring everything from a full backup is not a solution in this case, how do I:

  • Either get the rules back from a full backup, without doing a full restore,

  • Or get a document explaining most firewall rules used by Windows servers (including DC, servers with DNS role, or acting as web servers, etc.), letting me to spend more time on this, but knowing precisely what's opened in the firewall. Where can I find such documentation?

I am aware of the fact that I can just install a fresh copy of a DC on a virtual machine, export the policy, and import it to the existent DC. I want to avoid that, since the rules were changed a lot since the original installation of the DC.

Note that Restore Default option results in a "Could not restore the default settings (error: 3)" error, so it is not an option.

share|improve this question
What did you do to break it? – Dan May 30 '12 at 11:56
@Dan: installed Trojan.Win64/Sirefef.W. Quite effective if you want to break things. – MainMa May 30 '12 at 11:59
Wipe your DC, dude. It's not worth bothering with. – Dan May 30 '12 at 12:16

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Browse other questions tagged or ask your own question.