啟用或禁用遠端管理例外

啟用或禁用遠端管理例外

• 要啟用遠端管理例外，請在命令提示字元下鍵入以下內容，然後按 Enter：

  netsh firewall set service remoteadmin enable

• 要禁用遠端管理例外，請在命令提示字元下鍵入以下內容，然後按 Enter：

  netsh firewall set service remoteadmin disable

注意

• To perform this procedure, you must be a member of the Administrators group on the local computer, or you must have been delegated the appropriate authority. If the computer is joined to a domain, members of the Domain Admins group might be able to perform this procedure.
• You can also use Group Policy settings to perform this procedure and configure other Windows Firewall settings.
• You can configure Windows Firewall settings in the standard profile or the domain profile. The domain profile is used when a computer is connected to a network in which the computer's domain account resides. The standard profile is used when a computer is connected to a network in which the computer's domain account does not reside, such as a public network or the Internet. Make sure Windows Firewall is using the correct profile when you perform this procedure.
• Windows Firewall is not included in the original release of the Windows Server 2003 operating systems.
• 不能使用“控制台”中的“Windows 防火牆”配置遠端管理例外。
• 遠端管理例外允許非請求傳入通訊通過 TCP 通訊埠 135 和 445 以及 RPC 終結點對應程式動態分配的連接埠。此外，遠端管理例外還允許 Svchost.exe 和 Lsass.exe 接收非請求傳入通訊。
• 只有遠端管理工具需要遠端程序呼叫 (RPC) 和分散式元件物件模型 (DCOM) 時，才應啟用遠端管理例外。惡意使用者經常試圖攻擊使用 RPC 和 DCOM 的網路和電腦。建議您與遠端管理工具的製造商聯絡，以確定該工具是否需要 RPC 和 DCOM 通訊。如果不需要，請不要啟用遠端管理例外。
• 應該為啟用的所有例外配置範圍選項。
• 啟用遠端管理例外將允許其他電腦使用 ping 命令訪問您的電腦。