Configuring Windows Firewall to Enable Remote Administration

The VisualSVN Server Manager console uses Windows Management Instrumentation (WMI) for remote administration. Connecting to WMI remotely requires that you configure the Windows Firewall to allow network connections to WMI on the remote computer. This article describes how to configure the Windows Firewall to enable VisualSVN Server Remote Administration in various environments.

Incorrect Windows Firewall settings are usually identified by receiving the "RPC Server Unavailable" error message when trying to remotely connect to the VisualSVN Server using the management console:

Cannot connect to WMI namespace '\\server-2008\root\VisualSVN': The RPC server is unavailable. (0x800706ba)

Windows Firewall configuration should be done locally on the server by the user with administrator rights. While Windows Firewall can be configured using the Control Panel, you may find it easier to use the netsh command lines. Appropriate command lines for the most widely used Windows versions are listed below.

Configuring Firewall for VisualSVN Server 5.0 and later

To allow administrative access to the server through the firewall, please enable the VisualSVN Remote Server Administration inbound rules. Follow these steps:

  1. Open Windows Defender Firewall.
  2. Click Allow an app or feature through Windows Firewall.
  3. Find the VisualSVN Remote Server Administration firewall rule group and select the Domain profile.
  4. Click OK.

Enabling the firewall rules allows remote administrative access to VisualSVN Server.

Configuring Firewall for VisualSVN Server 4.3 and older

Run the following command in elevated command prompt:

netsh advfirewall firewall set rule group="windows management instrumentation (wmi)" new enable=yes
On Windows Server 2008 or newer operating systems, the mentioned command line must be executed in the elevated command prompt.

If you would rather use the Firewall UI than the netsh commands above, use the following steps on the server:

  1. In the Control Panel, click Security and then click Windows Firewall.
  2. Click Change Settings, and then click the Exceptions tab.
  3. In the Exceptions window, select the check box for Windows Management Instrumentation (WMI) to enable WMI traffic through the firewall. To disable WMI traffic, clear the check box.

For further details, see the article Setting up a Remote WMI Connection at MSDN.

Security note
Note that enabling the mentioned Windows Firewall rules allows all network connections to WMI on the server. In other words, you are enabling remote connections to the whole WMI, not only VisualSVN Server Remote Administration. But only users who are authorized to work with WMI will have appropriate permissions to connect. Please consider Microsoft's Security TechCenter in order to find out how to configure your server securely.

See also

KB25: Configuring Remote Administration

Last Modified: