Installing ISA firewall client....

[mrbios]

Currently configuring the ISA firewall client for deployment to ALL the PCs on our network, the easiest way for us to do it seems to be by machine startup script

ive got this command in a script:
\\fs1\ISA$\setup.exe /w /V"SERVER_NAME_OR_IP=proxy1.archway.local ENABLE_AUTO_DETECT=0 REFRESH_WEB_PROXY=0 /qb /L*v c:\fwc_inst.log"

That works, ISA installs and is setup for the proxy, only thing i need it to do though is auto tick the "hide icon when connected to ISA server" is there a flag i can put in to enable that?

Cheers

[jsnetman]

Push it out through group policy. You should not need any configuration, it autodetects your ISA server. Also lock down the notification tray.

[srochford]

I can't find a way to turn off the tray icon (and I've tried - there are lots of people out there who have also struggled and failed.)

I think that the setting *ought* to be in C:\Documents and Settings\<username>\Local Settings\Application Data\Microsoft\Firewall Client 2004\management.ini, like this:
[TrayIcon]
TrayIconVisualState=1

but I can't get that to work reliably!

[jsnetman]

You can hide icons in the notification/sys tray by mofifying user group policy. The 2 settings are:

Turn off notification area cleanup
Hide notification area

If you disable both or even just the last one no icons will be displayed in the system tray apart from the clock.

[srochford]

@jsnetman - doesn't that hide everything? I only want to hide the ISA client icon (other icons are useful!)

[jsnetman]

Yes it hides everything. In our setup there is absolutely no need for users to fiddle with settings from the sys tray.

[spc-rocket]

I can't find a way to turn off the tray icon (and I've tried - there are lots of people out there who have also struggled and failed.)

I think that the setting *ought* to be in C:\Documents and Settings\<username>\Local Settings\Application Data\Microsoft\Firewall Client 2004\management.ini, like this:
[TrayIcon]
TrayIconVisualState=1

but I can't get that to work reliably!

Is the app data redirected to a share on the server by any chance?

Ash.

[jsnetman]

Ok I think I may have your answer, In the machine startup scripts folder add a batch file with the following commands regedit /s fwc.reg also in the scripts folder make a file called fwc.reg and place the following text:

Windows Registry Editor Version 5.00

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Firewall Client 2004\Notification]
"InstallRoot"="C:\\Program Files\\Microsoft Firewall Client 2004\\"
"Serial Number"=-

I would test it first on a lab machine and make sure the client is working.

[mrbios]

thanks jsnetman, i havent tried that but ive saved it for later use if needed

for now ive just locked down the notification area, there was a reason we didnt do it before but i cant remember what it is now so ill just wait until someone complains and give them 100 reasons why it needs to be locked :P if they can give me 100 reasons back THEN ill undo the change and try your script