Windows Firewall with Advanced Security MMC permissions error (neither client nor server in a domain)
Hi,
I have a client and "server" both running Vista. Neither computer is a member of a domain.
I am trying to remotely administer the Windows Firewall on the server graphically using the "Windows Firewall with Advanced Security" MMC snap-in on the client.
I get the following error when navigating the snap-in:
"There was an error opening the Windows Firewall with Advanced Security snap-in
You do not have the correct permissions to open the Windows Firewall with Advanced Security console. You must be a member of the Administrators group or the Network Operators group to perform this task. For more information, contact your
system administrator. Error code: 0x5."
On the server, I have already done this:
netsh advfirewall firewall>set rule group="Remote Administration" new enable=yes
netsh advfirewall firewall>set rule group="Remote Event Log Management" new enable=yes
netsh advfirewall firewall>set rule group="Remote Service Management" new enable=yes
netsh advfirewall firewall>set rule group="Windows Firewall Remote Management" new enable=yes
On the client, I have used "cmdkey" to add saved credentials for a user on the server who is in the administrators group (but is not the Administrator user).
I do not believe the MMC snap-in allows user credentials to be supplied from within it, so as far as I know, "cmdkey" is the only way to supply them (or the GUI alternative "Manager your network passwords" from the User Account control panel)
Other MMC snap-ins seem to work on for this client and server and the same user, such as Services, Computer Management, and Event Viewer.
Although I do get a similar error with the Device Manager snap-in. (which is probably because I have not configured the PnP interface to allow remote access)
I don't think my problem is a firewall problem, but I could be wrong. That is, yes I am trying to administer the firewall, but I don't think that it is the firewall itself that is preventing me from doing so, since it seems to be a windows authentication/permissions
issue, not a network issue.
There are similar threads linked below, but they did not help me (and I am not using Windows Server):
http://social.technet.microsoft.com/Forums/en/winservercore/thread/282f6be1-3330-46ca-b845-4c7d102f4e46
http://social.technet.microsoft.com/Forums/en-US/winservercore/thread/1f05e497-ae7b-481a-b7c4-4073c24fe893
Please help
Thanks
August 22nd, 2010 4:44am