Changes
→Using netsh for configuring the firewall
add allowedprogram program = [path] name = [name] mode = [ENABLE|DISABLE] scope = [ALL|SUBNET|CUSTOM] addresses = [addresses] profile = [CURRENT|DOMAIN|STANDARD|ALL]
Everything besides [program] and [name] is optional. You might want to check the article in the [http://technet.microsoft.com/en-us/library/bb490617.aspx MS Windows XP TechCenter] for default values and a detailed explanation.
To allow remote administration to the exception list:
netsh firewall set service remoteadmin enable
It is enough to execute those commands only once, as the settings will survive the reboot, so you may use ''execute="once"''.