使用 MMC,我尝试远程管理 Hyper-V Server 2019 实例上的 Windows Defender 防火墙(无 GUI,仅 CLI)。NetBIOS 名称为SERVER1
。
规则Windows Defender Firewall Remote Management
已启用:
Name : RemoteFwAdmin-In-TCP
DisplayName : Windows Defender Firewall Remote Management (RPC)
Description : Inbound rule for the Windows Defender Firewall to be remotely managed via RPC/TCP.
DisplayGroup : Windows Defender Firewall Remote Management
Group : @FirewallAPI.dll,-30002
Enabled : True
Profile : Any
Platform : {}
Direction : Inbound
Action : Allow
EdgeTraversalPolicy : Block
LooseSourceMapping : False
LocalOnlyMapping : False
Owner :
PrimaryStatus : OK
Status : The rule was parsed successfully from the store. (65536)
EnforcementStatus : NotApplicable
PolicyStoreSource : PersistentStore
PolicyStoreSourceType : Local
Name : RemoteFwAdmin-RPCSS-In-TCP
DisplayName : Windows Defender Firewall Remote Management (RPC-EPMAP)
Description : Inbound rule for the RPCSS service to allow RPC/TCP traffic for the Windows Defender Firewall.
DisplayGroup : Windows Defender Firewall Remote Management
Group : @FirewallAPI.dll,-30002
Enabled : True
Profile : Any
Platform : {}
Direction : Inbound
Action : Allow
EdgeTraversalPolicy : Block
LooseSourceMapping : False
LocalOnlyMapping : False
Owner :
PrimaryStatus : OK
Status : The rule was parsed successfully from the store. (65536)
EnforcementStatus : NotApplicable
PolicyStoreSource : PersistentStore
PolicyStoreSourceType : Local
但是,当我单击“入站规则”节点时,MMC 崩溃:
虽然这没什么帮助,但是这是堆栈跟踪信息:
FX:{b05566ac-fe9c-4368-be02-7a4cbb7cbe11}
Object reference not set to an instance of an object.
System.NullReferenceException
at Microsoft.WindowsFirewall.SnapIn.Wrappers.FirewallRules.Reload(String[] ruleIdFilter)
at Microsoft.WindowsFirewall.SnapIn.ExceptionsListView.Refresh()
at Microsoft.WindowsFirewall.SnapIn.NativeMethods.EnhancedMmcListView`1.ForceRefresh()
at Microsoft.WindowsFirewall.SnapIn.NativeMethods.EnhancedMmcListView`1.OnShow()
at Microsoft.ManagementConsole.View.ProcessNotification(Notification notification)
at Microsoft.ManagementConsole.ViewMessageClient.ProcessNotification(Notification notification)
at Microsoft.ManagementConsole.Internal.IMessageClient.ProcessNotification(Notification notification)
at Microsoft.ManagementConsole.Executive.SnapInNotificationOperation.ProcessNotification()
at Microsoft.ManagementConsole.Executive.Operation.OnThreadTransfer(SimpleOperationCallback callback)
...这是应用程序事件日志条目:
正如预期的那样,安全和维护控制面板对此毫无用处。
当我从网络上的另一台机器尝试此操作时,MMC 不会崩溃——但入站/出站规则列表保持为空。那里没有生成任何相关的事件日志条目。
我该如何追踪并修复它,以便我可以远程管理服务器的防火墙?
- 更新 -
我刚刚在另一台机器上遇到了 MMC 崩溃。