I need to enable an existing firewall rule (or make a new one) on all the computers in a Active Directory domain. What is the best/easiest way to do this?

EDIT: The computers are running Windows Vista default firewall. Active Directory is run by Windows 2008 AD controllers.

  • what kind of firewall are you using? – pablo Feb 15 '11 at 19:32
  • I'd assume windows – Jacob Feb 15 '11 at 19:33
  • What is the DFL of your AD Domain? Do you have .admx templates available, or only .adm? – MDMarra Feb 15 '11 at 19:37
  • I would guess 2008 and no .admx (as I'm not familiar with the templates, url?). We can't make any major change to AD. If that is required then we need to consider a scripted/programmed approach. – Tedd Hansen Feb 15 '11 at 19:40
  • if you're on a 2008 DFL, then you have the .admx templates. They shipped with Server 2008. – MDMarra Feb 15 '11 at 20:04

This document should be everything you need.


This is however a bit more information than you seem to be after.

Skip to page 16 to get started, or continue on from page 32.

Due to your comment on possibly scripting the solution you can use net sh to do this.


Hope this helps you.

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.