Windows Firewall

Login scripts run in the security context of the user logging in and are therefore not suitable for manipulating the Windows Firewall.

You can use Computer Startup scripts as they run as the LocalSystem account.

Enable ICMP (Ping) Responses

Enable the existing rule(s) for:

File and Printer Sharing (Echo Request - ICMPv4-In)

Edit an existing or create a new Group Policy Object (GPO)

Computer Configuration → Policies → Administrative Templates → Network → Network Connections → Windows Firewall

Choose the proper profile to modify, Standard or Domain, if you are on a domain-based network.

Here are some settings to:

Setting	Enabled	Other Settings or Notes
Windows Firewall: Protect all network connections	enabled	Enable the Windows Firewall
Windows Firewall: Allow remote administration exception	enabled	IP address of your management host
Windows Firewall: Allow ICMP exceptions	enabled	Allow inbound echo request
Windows Firewall: Allow Remote Desktop exception	enabled	comma separated list of allowed IP addresses or networks
Windows Firewall: Define port exceptions	enabled	135:TCP::enabled:TCP_135 and 135:UDP::enabled:UDP_135

Computer Configuration → Policies → Windows Settings → Security Settings → Windows Firewall with Advanced Security

Note that settings from the older XP/2003 firewall will also still be applied and may conflict!