Windows Firewall Overide

[Morglor9]

Hello. excuse me for any noob-ness, i'm new to the forum and don't know how things work around here...

anyway, I'm looking for some advice. I use Spybot S&D for my anti-spyware protection, and it recently found a registry entry entitled "Windows Security Center.FirewallOverride". I was wondering what this could mean, and your opinions on what I should do to fix it. As it's a registry entry, I'd just like to know a little more information.

it's located at:

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\FirewallOverride!dword:0

thanks

[Scarecrow Man]

I believe every computer with SP2 will have that registry entry.

Notice, the dword : 0 means the key in question, is false, or zero, or disabled. If you were to set the value to a 1, the firewall would indeed be disabled.

EDIT: To clarify, the 0 means that key is disabled. Not the firewall. A 0 in the registry means the current key is disabled.

In this example, FirewalOverride, a value of 0 means the firewall is not being overridden, where as a value of 1 means it is.

[Morglor9]

Aha! that's the answer I was looking for!

A simple true/false statement then. Thanks for the help.

[Scarecrow Man]

The Windows registry is a tricky thing. You should never manually edit a setting in the registry without explicitly knowing exactly what you are doing.

[Morglor9]

Don't worry, I'm not planning on modifying it manually. Spybot was just giving me the option to delete it if I wanted. I was just looking for information to assist in this decision. Thanks again.