Server Fault is a question and answer site for system and network administrators. It's 100% free, no registration required.

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

I've blown up the firewall rules on a domain controller (DC). Since there are no restore points in Windows 2008 and restoring everything from a full backup is not a solution in this case, how do I:

  • Either get the rules back from a full backup, without doing a full restore,

  • Or get a document explaining most firewall rules used by Windows servers (including DC, servers with DNS role, or acting as web servers, etc.), letting me to spend more time on this, but knowing precisely what's opened in the firewall. Where can I find such documentation?

I am aware of the fact that I can just install a fresh copy of a DC on a virtual machine, export the policy, and import it to the existent DC. I want to avoid that, since the rules were changed a lot since the original installation of the DC.

Note that Restore Default option results in a "Could not restore the default settings (error: 3)" error, so it is not an option.

share|improve this question
What did you do to break it? – Dan May 30 '12 at 11:56
@Dan: installed Trojan.Win64/Sirefef.W. Quite effective if you want to break things. – MainMa May 30 '12 at 11:59
Wipe your DC, dude. It's not worth bothering with. – Dan May 30 '12 at 12:16
up vote 1 down vote accepted

You can try Command Prompt, To restore Windows Firewall default settings Type the following at the command prompt, and press ENTER:

netsh firewall reset

If you get an "Access Denied" message when you run a command, you do not have administrative rights to configure Windows Firewall. You may have to run the command using an elevated command prompt. If you get an "Ok" message but the command does not take effect, the setting might be managed by Group Policy.

Please let me know, if it solve your problem.

share|improve this answer
Already tried. The response is: "The system cannot find the path specified.". – MainMa May 30 '12 at 11:57

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.