And remote desktop is done similarly, but there are fewer settings in the group. Plus there's a registry entry:

Code:
SET PROFILES=Domain,Private
netsh advfirewall firewall set rule name="Remote Desktop (TCP-In)" new enable=yes profile=%PROFILES%     >nul 2>&1
reg add "HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Terminal Server" /v fDenyTSConnections /t REG_DWORD /d 0 /f     >nul 2>&1
_________________________
Tony Fabris