This articles provides configuration steps for creating a Command Workflow that will allow users to disable the Windows Firewall on Windows 2012, useful for some users in lab environments. While this example is specific to Windows 2012, the same basic configuration will work with other Windows operating systems. Add conditional script execution steps for each operating system, with the correct associated command line, so that the single workflow will cover each OS.

Create the Disable Firewall Command Workflow

Follow the steps below to create a Command Workflow which can be used as a command on the Service Portal. This will provide the one-click experience to customization.

  1. Browse to Configuration > Command Workflows. Click Add.
  2. Enter a Name such as Disable Firewall.
  3. Choose a relevant icon from those available.If you wish to add a new icon to further distinguish the command from others available, click Manage Icons. From the management dialog, click Add and choose an icon from your local computer. and click Open. Click Close.

  4. Click Next.
  5. Click Add and choose Guest OS > Run Program.
  6. Choose Credentials with permission to add a role to the deployed VMs. If no suitable permissions are listed, click Add Credentials to enter account details you know will succeed.
  7. Enter the command line:
    netsh advfirewall set allprofiles state off


  8. Click Next.
  9. On the Permissions page, choose Allow these specific users/groups to access this workflow and use the controls to provide access to appropriate users, groups or organizations. Otherwise, leave Allow everyone to access this workflow
  10. Check Prompt user for confirmation before running this workflow and Display this workflow as a command for users with permission on the Service Portal command bar. Click Next.
  11. On the Summary page, review your choices and click Finish.