+ Post New Thread
Results 1 to 9 of 9
Windows Thread, Installing ISA firewall client.... in Technical; Currently configuring the ISA firewall client for deployment to ALL the PCs on our network, the easiest way for us ...
  1. #1
    mrbios's Avatar
    Join Date
    Jun 2007
    Location
    Stroud, Gloucestershire
    Posts
    2,480
    Thank Post
    351
    Thanked 261 Times in 213 Posts
    Rep Power
    99

    Installing ISA firewall client....

    Currently configuring the ISA firewall client for deployment to ALL the PCs on our network, the easiest way for us to do it seems to be by machine startup script

    ive got this command in a script:
    \\fs1\ISA$\setup.exe /w /V"SERVER_NAME_OR_IP=proxy1.archway.local ENABLE_AUTO_DETECT=0 REFRESH_WEB_PROXY=0 /qb /L*v c:\fwc_inst.log"

    That works, ISA installs and is setup for the proxy, only thing i need it to do though is auto tick the "hide icon when connected to ISA server" is there a flag i can put in to enable that?

    Cheers

  2. #2
    jsnetman's Avatar
    Join Date
    Oct 2007
    Posts
    887
    Thank Post
    23
    Thanked 134 Times in 126 Posts
    Rep Power
    39
    Push it out through group policy. You should not need any configuration, it autodetects your ISA server. Also lock down the notification tray.
    Last edited by jsnetman; 14th July 2008 at 03:10 PM.

  3. #3

    Join Date
    Aug 2005
    Location
    London
    Posts
    3,156
    Thank Post
    116
    Thanked 529 Times in 452 Posts
    Blog Entries
    2
    Rep Power
    124
    I can't find a way to turn off the tray icon (and I've tried - there are lots of people out there who have also struggled and failed.)

    I think that the setting *ought* to be in C:\Documents and Settings\<username>\Local Settings\Application Data\Microsoft\Firewall Client 2004\management.ini, like this:
    [TrayIcon]
    TrayIconVisualState=1

    but I can't get that to work reliably!

  4. #4
    jsnetman's Avatar
    Join Date
    Oct 2007
    Posts
    887
    Thank Post
    23
    Thanked 134 Times in 126 Posts
    Rep Power
    39
    You can hide icons in the notification/sys tray by mofifying user group policy. The 2 settings are:

    Turn off notification area cleanup
    Hide notification area

    If you disable both or even just the last one no icons will be displayed in the system tray apart from the clock.
    Last edited by jsnetman; 15th July 2008 at 06:32 AM.

  5. #5

    Join Date
    Aug 2005
    Location
    London
    Posts
    3,156
    Thank Post
    116
    Thanked 529 Times in 452 Posts
    Blog Entries
    2
    Rep Power
    124
    @jsnetman - doesn't that hide everything? I only want to hide the ISA client icon (other icons are useful!)

  6. #6
    jsnetman's Avatar
    Join Date
    Oct 2007
    Posts
    887
    Thank Post
    23
    Thanked 134 Times in 126 Posts
    Rep Power
    39
    Yes it hides everything. In our setup there is absolutely no need for users to fiddle with settings from the sys tray.

  7. #7

    Join Date
    Oct 2005
    Location
    East Midlands
    Posts
    738
    Thank Post
    17
    Thanked 105 Times in 65 Posts
    Rep Power
    37
    Quote Originally Posted by srochford View Post
    I can't find a way to turn off the tray icon (and I've tried - there are lots of people out there who have also struggled and failed.)

    I think that the setting *ought* to be in C:\Documents and Settings\<username>\Local Settings\Application Data\Microsoft\Firewall Client 2004\management.ini, like this:
    [TrayIcon]
    TrayIconVisualState=1

    but I can't get that to work reliably!

    Is the app data redirected to a share on the server by any chance?

    Ash.

  8. #8
    jsnetman's Avatar
    Join Date
    Oct 2007
    Posts
    887
    Thank Post
    23
    Thanked 134 Times in 126 Posts
    Rep Power
    39
    Ok I think I may have your answer, In the machine startup scripts folder add a batch file with the following commands regedit /s fwc.reg also in the scripts folder make a file called fwc.reg and place the following text:

    Windows Registry Editor Version 5.00

    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Firewall Client 2004\Notification]
    "InstallRoot"="C:\\Program Files\\Microsoft Firewall Client 2004\\"
    "Serial Number"=-

    I would test it first on a lab machine and make sure the client is working.

  9. #9
    mrbios's Avatar
    Join Date
    Jun 2007
    Location
    Stroud, Gloucestershire
    Posts
    2,480
    Thank Post
    351
    Thanked 261 Times in 213 Posts
    Rep Power
    99
    thanks jsnetman, i havent tried that but ive saved it for later use if needed

    for now ive just locked down the notification area, there was a reason we didnt do it before but i cant remember what it is now so ill just wait until someone complains and give them 100 reasons why it needs to be locked :P if they can give me 100 reasons back THEN ill undo the change and try your script

SHARE:
+ Post New Thread

Similar Threads

  1. Installing SMS Advanced Client
    By Zoom7000 in forum Windows
    Replies: 3
    Last Post: 12th March 2007, 09:20 PM
  2. Combining a Cisco PIX and ISA Firewall
    By flyinghaggis in forum Wireless Networks
    Replies: 12
    Last Post: 3rd April 2006, 09:31 AM

Thread Information

Users Browsing this Thread

There are currently 1 users browsing this thread. (0 members and 1 guests)

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •