Hot answers tagged

39

I had the same error; in my case, the mistake I was making was omitting the trailing slash from the URL: C:\>netsh http add urlacl url=http://+:8085 user=DOMAIN\myname Url reservation add failed, Error: 87 The parameter is incorrect. C:\>netsh http add urlacl url=http://+:8085/ user=DOMAIN\myname URL reservation successfully added


18

netsh http add urlacl url=http://+:80/ user=Everyone Note that the valid value for user actually depends on your system language (Everyone for English, Jeder for German).


12

Basing on @jgillich answer, I propose to do the following: netsh http add urlacl url=http://+:80/ sddl=D:(A;;GX;;;S-1-1-0) sddl argument will be virtually the same as user, but you don't need to think of a localized group name. So, it's more universal.


11

Port number "99898" isn't a valid TCP port number. TCP port numbers are 16-bit unsigned integers, so they can't exceed 65535. I would strongly suspect that this invalid port number is the reason for the error you're seeing.


10

In PowerShell run: $fw=New-object -comObject HNetCfg.FwPolicy2 $fw.rules | findstr /i "whaturlookingfor" better yet: $fw.rules | select name | select-string "sql"


10

As you spoke about netsh, I assume that you are working on Windows. Run cmd.exe as Administrator. Exec netsh int ip sh int and press "Enter". Identify your loopback Idx (first column). Exec netsh int ip add addr <IDX> <IP>/32 st=ac sk=tr and press "Enter". In my case, with IDX=1 I exec: netsh int ip add addr 1 146.112.61.106/32 st=ac sk=tr. To ...


6

You have to run: netsh int ipv4 set dynamicport tcp start=32765 num=32765 This would set your dynamic port range to start at port 32765 and go through port 65530 (32765 ports)


6

netsh http add urlacl url=https://*:8081/ user=Everyone Also the trailing slash does matter -------------^


6

This is the first hit in google for the command you're asking about. http://support.microsoft.com/kb/299357 When you run the reset command, it rewrites two registry keys that are used by TCP/IP. This has the same result as removing and reinstalling the protocol. The reset command rewrites the following two registry keys: SYSTEM\CurrentControlSet\...


5

See here: http://msdn.microsoft.com/en-us/library/ms733768.aspx which shows this: netsh http add urlacl url=http://+:80/MyUri user=DOMAIN\user My understanding is that it will listening to anything at port 80 and if you want it linked to a specific address, you'd actually have to unbind it. That's what I have to do if I want to run IIS and Apache on the ...


5

It is shorthand for: netsh int ip reset resetlog.txt netsh i i r r The last 'r' being the "log file" that you really don't care to read. What does it do? It hits your TCP/IP stack with a sledge hammer. And forcefully rebuilds it via a rewrite of two Registry keys: SYSTEM\CurrentControlSet\Services\Tcpip\Parameters SYSTEM\CurrentControlSet\...


5

You should never configure your VM to Static Ip addresses inside the operating system, use azure portal or powershell instead. Configure a Static Internal IP Address for a VM: https://azure.microsoft.com/documentation/articles/virtual-networks-reserved-private-ip/ Basically you are telling the DHCP server to always give the same ip to your VM. If you ...


4

Yes, ECN (which is used by DCTCP) is enabled by default in Server 2012. Oh, and here's the article about it, exclusively for Server 2012. It's pretty neat: http://technet.microsoft.com/en-us/library/hh997028.aspx Here's a very nice PDF on the subject from Microsoft Research: http://research.microsoft.com/pubs/121386/dctcp-public.pdf


4

I can tell you from experience that it removes any static IP information for all the NICs on the machine. I tried it on a server that was acting up and had to re-enter all the IP/netmask/gateway information for 6 network interfaces. Interestingly enough, it did remember which interfaces were configured as static and what "items" were checked off on the ...


4

I suspect you're trying to pass %COMPUTERNAME% to netsh directly. It doesn't expand environment variables. Let the shell expand the variable for you, like this: @echo off SET F="%TEMP%\%RANDOM%.txt" echo advfirewall>%F% echo set store gpo = %COMPUTERNAME%>>%F% echo reset>>%F% echo set store local>>%F% echo reset>>%F% netsh -f %F%...


3

This is best I could do. Anyone know how to take it further? Like remove/subtract the Rule Name from the results? netsh advfirewall firewall show rule name=all | find "Rule Name:" | find "NameLookingFor"


3

Don't bother using netsh to delete the reservation range; use a loop to delete them one by one. for /L %x in (2,1,254) do echo netsh dhcp Server serverIP Scope 192.168.1.%x delete reservedip reservationip macaddress[..] The /L is a literal and does need to be written in exactly. The %x can be replaced with %y if desired. You can even nest: for /L %y in (...


3

Unless you have another rule in your windows firewall or you have changed the default behavior of the incoming connections, ALL incoming connections will be blocked by default. So you have to start with the allow rules for incoming connections. Also, try adding the enable argument like so netsh advfirewall firewall add rule name="ES 9500" dir=in action=...


3

Look at the "Caveats & Legal Disclaimers" section on http://cyber-defense.sans.org/blog/2011/10/25/windows-firewall-script-block-addresses-network-ranges and then look at how their Import-Firewall-Blocklist.ps1 script works.


3

I'm using the following PowerShell script to look at all certs on the box and for each try to find it in the IIS SSL bindings. import-module WebAdministration ls cert:\LocalMachine\my | select * | foreach { $found = $false $tp = $_.Thumbprint ls IIS:\SslBindings | Foreach { if ($_.Thumbprint -eq $tp) { Write-Host "Used in $($_....


3

Microsoft has been deprecating the NETSH cmd for years. I'm a little surprised to see that it is still present in Server 2016. Have you tried using the Powershell cmdLets? Set-DhcpServerv4Binding -BindingState $True -InterfaceAlias "Wired Ethernet Connection" https://technet.microsoft.com/en-us/itpro/powershell/windows/dhcpserver/dhcpserver https://technet....


3

NETSH is still what you want to do. You seem to have developed some kind of application, but altering the registry is sure not the way to go. Besides that - I highly recommend you use DHCP and reservation rather then hard coding any IP settings every on a server / client - besides those few that have to be (DHCP servers, Domain Controllers e.g.). DHCP ...


2

If you're running it from cmd, %A is fine, if you're running it from a batch, it should be %%A.


2

As "Richard" says You can disable the firewall per interface in windows 7 through the GUI it's just rather hidden. Unfortunately automating that setting on windows 7 is rather harder. Netsh doesn't provide access to that functionality (according to microsoft) and the powershell command that ProGTX suggests seems to be windows 8 only. The only method i've ...


2

I know it's an old question, but I'll post this for reference. You can use Powershell: Set-NetFirewallProfile -Name Private -DisabledInterfaceAliases 'Connection Name' Source


2

I'm making the assumption that Dynamics has its own website and does not use the default website. This may be totally incorrect. Either way, if they are separate sites why don't you simply setup HTTPS Host Headers and ensure the default site and the dynamics site are both specifically assigned or bound to a certain host header or IP. You can always assign ...


2

You can try Select-String: netsh advfirewall firewall show rule name=all | select-string -pattern "Hyper-V"


2

You're turning off some "new" TCP tuning features (vintage Windows 2003 Scalable Networking Pack and Windows Vista, mostly) that have some problems interoperating with older OS's (and, in some cases, other OS's of the same vintage). My experience has been that I've needed to disable these features to get reliable operation in only a single circumstance so ...


2

I think you want the netsh advfirewall firewall add rule command. http://technet.microsoft.com/en-us/library/cc771920(WS.10).aspx You can set Inbound and Outbound rules that filter by IP there. You can make a custom rule once in the GUI and then use show rule name ="blah" to get a good idea what they set when you configure it.


2

Pull the network cable out. I'm sure the RPC service is much more secure than it used to be but having ports 135 and 445 open to the world would make anyone who had to deal with the Blaster and Sasser worm more than a little nervous. Set the firewall to block everything inbound. Only allow the traffic you want, from the IP addresses you want it from. ...


Only top voted, non community-wiki answers of a minimum length are eligible