Windows 7 firewall and automatic exceptions

[theevilsharpie]

Does anyone know of a way to disable programs from automatically adding exceptions to the Windows 7 firewall?

I am experimenting with IPv6, and since my router doesn't have any firewall functionality for IPv6, I rely on the Windows 7 firewall to control inbound and outbound access to the IPv6 Internet. This setup is working fine, except I continually have to audit my inbound access rules as programs seem to have some way of adding authorized exceptions without my knowledge.

Suffice it to say, this behavior is annoying, not to mention a potential security risk. Is there any way to change this behavior?

 

[imagoon]

Basically stop running stuff as admin. Some times you can block the key in the registry but the smarter programs 'fix it' for you.

 

[theevilsharpie]

Basically stop running stuff as admin.

I'm running as an admin, but UAC is set to Always Notify, so I should get a prompt if a program is doing something that requires admin access.

 

[imagoon]

I'm running as an admin, but UAC is set to Always Notify, so I should get a prompt if a program is doing something that requires admin access.

I didn't mean that like you were doing it wrong, annoyingly in most cases msiexec etc runs in admin rights no matter what allowing access to the exceptions key in the registry. I think you can make that key read only for admins to block it but you have to change it any time you want to actually make changes.

I don't recall the key atm but I am sure some googlefu would locate it.

 

[JackMDS]

http://majorgeeks.com/Windows_Firewall_Notifier_d7120.html


Try this on top of the Firewall.

.

 

[dotcommie]

http://majorgeeks.com/Windows_Firewall_Notifier_d7120.html


Try this on top of the Firewall.

.

I just built a new system and used to run Sphinx windows firewall control (which i just reinstalled, but am not liking the new version as much). Your credentials speak for themselves so I can assume the firewall notifier probably works great, but do you happen to have any opinion on the Sphinx product?