Configuring Windows Firewall to Enable Remote Administration

The VisualSVN Server Manager console uses Windows Management Instrumentation (WMI) for remote administration. Connecting to WMI remotely requires that you configure the Windows Firewall to allow network connections to WMI on the remote computer. This article describes how to configure the Windows Firewall to enable VisualSVN Server Remote Administration in various environments.

Incorrect Windows Firewall settings are usually identified by receiving the "RPC Server Unavailable" error message when trying to remotely connect to the VisualSVN Server using the management console:

Windows Firewall configuration should be done locally on the server by the user with administrator rights. While Windows Firewall can be configured using the Control Panel, you may find it easier to use the netsh command lines. Appropriate command lines for the most widely used Windows versions are listed below.

Windows XP/Windows Server 2003

For Windows XP/Windows Server 2003 use following command at the system prompt:
netsh firewall set service RemoteAdmin enable

If you would rather use the Group Policy editor than the netsh commands above, use the following steps in the Group Policy editor (Gpedit.msc) to enable "Allow Remote Administration" on the server:

1. Under the Local Computer Policy heading, double-click Computer Configuration.
2. Double-click Administrative Templates > Network > Network Connections > Windows Firewall.
3. If the computer is in the domain, then double-click Domain Profile; otherwise, double-click Standard Profile.
4. Click Windows Firewall: Allow remote administration exception.
5. On the Action menu, select Properties.
6. Click Enable, and then click OK.

For further details, see the article Connecting Through Windows Firewall at MSDN.

Windows Vista/Windows Server 2008

For Windows Vista/Windows Server 2008 use following command at the system prompt:
netsh advfirewall firewall set rule group="windows management instrumentation (wmi)" new enable=yes

Note On Windows Vista and Windows Server 2008 operating systems the mentioned command line should be executed in the elevated command prompt.

If you would rather use the Firewall UI than the netsh commands above, use the following steps on the server:

1. In the Control Panel, click Security and then click Windows Firewall.
2. Click Change Settings, and then click the Exceptions tab.
3. In the Exceptions window, select the check box for Windows Management Instrumentation (WMI) to enable WMI traffic through the firewall. To disable WMI traffic, clear the check box.

For further details, see the article Connecting to WMI Remotely Starting with Vista at MSDN.

Security note Note that enabling the mentioned Windows Firewall rules allows all network connections to WMI on the server. In other words, you are enabling remote connections to the whole WMI, not only VisualSVN Server Remote Administration. But only users who are authorized to work with WMI will have appropriate permissions to connect. Please consider Microsoft's Security TechCenter in order to find out how to configure your server securely.

See Also:

KB25: Configuring Remote Administration