Filed Under (Geekspeak) by Justin on 2007-02-20

Have any of you ever tried talking someone through disabling the bundled Windows Firewall? It’s pretty easy to do if your end-user knows what their Control Panel is and if they know the difference between an icon and an iPod, but sometimes, it’s just not that simple and you can spend 15 minutes trying to describe to the user what “doodads” and “thingamajigs” to click on. Allow me to introduce you to


– a nifty command line tool designed to interface with the Windows networking stack. For example, to disable the firewall, enter the following command in the Run dialog, or from a Command Line:

netsh firewall set opmode disable

There are tons of other options as well. Just go to a Command Line and type netsh help to see all of the things you can manipulate using netsh. For the record, it took my user all of 30 seconds to copy/paste the command into the Run dialog and execute it, disabling the firewall and enabling my remote access to their machine.

(21) Comments   


Steve on 21 February, 2007 at 7:25 am #

Nice tip, didn’t know about that. Nice find!

Fog on 31 January, 2008 at 5:48 pm #

Thanks for the tip. Very useful.

Tachyon on 11 February, 2008 at 2:23 pm #

Good tip, just wanted to point out a typo.

Your example says that the following command will disable the Windows Firewall, but actually, this will turn it on.

netsh firewall set opmode enable

To disable the firewall, it should be,

netsh firewall set opmode disable


Apricot on 10 June, 2008 at 12:52 pm #

yea that tip didn’t work it said access denied how do I get around that?

Justin on 10 June, 2008 at 12:58 pm #


You must have administrator rights on your PC to be able to disable the firewall.

Kanak on 10 November, 2008 at 7:28 am #

Thanks it worked

Yohnah on 18 December, 2008 at 10:05 am #

if your computer is a domain member you must to use this command:

netsh firewall set opmode mode = DISABLE profile = ALL

to disable DOMAIN mode and Local mode

Sashi on 21 January, 2009 at 7:43 am #

Hi, Yohnah

I am a new member here!
The above command netsh firewall set opmode = DISABLE profile = ALL

to disable DOMAIN mode and local mode.

Its doesn’t worked!in my domain environment. Can pls tell What ll b d actual command.I badly needs this one. Searching from long time.

Thnx in advance

jv on 19 June, 2009 at 1:55 pm #

thank you, works like a charm

MaxASPSteve on 28 August, 2009 at 4:24 pm #

Of course, there is always the following method:

sc config mpssvc start= Disabled
net stop mpssvc

So now the firewall service is set to disabled, and isn’t running, not sure if this disables the firewall for all profiles, but it works fine in our domain environment

brent on 3 December, 2009 at 8:11 pm #

C:\Windows\System32\netsh.exe “firewall set opmode = DISABLE profile = ALL”

Tohid on 27 August, 2010 at 5:50 pm #

Tanks It is very useful

mohammad on 31 October, 2010 at 8:43 am #


JJBlade on 27 December, 2010 at 10:51 am #

well it does not work with mines ya got any new methods to disable the firewall and i have another problem everytime i download something from the internet a sign pos up and says this policy is blocked by a group of people ya got anyway to stop this pleaseeeee help

Joe on 28 December, 2010 at 6:00 am #

netsh advfirewall set allprofiles state off
SC stop MpsSvc
SC config MpsSvc start= disabled

madhu on 12 January, 2011 at 12:49 am #

i want to know how i will block any site by firewall

Andre on 21 January, 2011 at 12:21 pm #

Cool tip, thanks!

techibee.com on 11 July, 2011 at 1:19 pm #

I am on windows 2008 R2 core and this(http://techibee.com/windows-7/disable-windows-firewall-from-command-line/1043) worked for me

jed on 29 December, 2011 at 9:47 am #

tnx much

netsh is such a powerful cmd i am always learning new ways to use it, even still… a whole book could be written about netsh

asadali321 on 1 March, 2012 at 2:58 am #

Great……! Thankyou for this share………….!

hakafu47 on 14 August, 2012 at 9:33 am #

everytime i try to get netsh to work all the computer says is access denied, no matter which command line i use. how do i get past that? any other tips?

Post a Comment