[TD="bgcolor: #F7F7FF"]To use the
Apply to this service
or
Apply to service with this service short name
options, the service must be configured with a security identifier (SID) with a type of
RESTRICTED
or
UNRESTRICTED
. To check the SID type of a service, run the following command:
sc
qsidtype
<ServiceName>
If the result is
NONE
, then a firewall rule cannot be applied to that service.To set a SID type on a service, run the following command:
sc
sidtype
<Type> <ServiceName>
In the preceding command, the value of
<Type>
can be
UNRESTRICTED
or
RESTRICTED
. Although the command also permits the value of
NONE
, that setting means the service cannot be used in a firewall rule as described here. By default, most services in Windows are configured as
UNRESTRICTED
. If you change the SID type to
RESTRICTED
, the service might fail to start. We recommend that you change the SID type only on services that you want to use in firewall rules, and that you change the SID type to
UNRESTRICTED
. For more information, see
Vista Services
(
Services in Windows
) and the "Service Security Improvements" section of
Inside the Windows Vista Kernel
(
Inside the Windows Vista Kernel
).[/TD]