The "netsh advfirewall consec" command does not preserve the order of the authentication methods that are specified in a connection security rule on a Windows Vista-based computer

You use the netsh advfirewall consec command together with the auth1 or auth2 authentication parameters to create a connection security rule that will work together with authentication methods that are specified on a Windows Vista-based computer. After you do this, the order of the values that you specify for the auth1 or auth2 parameters is not preserved in the connection security rule. Regardless of the order in which you specify the values for the auth1 and auth2 parameters, the connection security rule is created together with authentication parameters that are specified in the following order: For example, the following command creates a connection security rule that lists the ComputerKerb authentication method before the ComputerNTLM authentication method in the first authentication set: Note The netsh advfirewall consec set command also displays the same behavior when you use the auth1 or auth2 parameter with it.

To work around this issue, you can use the "Windows Firewall with Advanced Security" snap-in to do the following:

• Create connection security rules
• Modify the ordering of options in the authentication set that is associated with a connection security rule

To create a new connection security rule by using the "Windows Firewall with Advanced Security" snap-in, follow these steps:

1. Open the "Windows Firewall with Advanced Security" snap-in. To do this, follow these steps:
   1. Click Start
      Collapse this imageExpand this image

      
      , type control.exe in the Start Search box, and then press ENTER.
   2. In Control Panel, click System and Maintenance, and then click Administrative Tools.
   3. Double-click Windows Firewall with Advanced Security.
2. Configure rule type, endpoints, and requirements settings for the new rule. To do this, follow these steps:
   1. Right-click Connection Security Rules, and then click New Rule. The New Connection Security Rule Wizard appears.
   2. On the Rule Type page, click Custom, and then click Next.
   3. On the Endpoints page, make sure that the default settings are configured, and then click Next.
   4. On the Requirements page, make sure that the Request authentication for inbound and outbound connections is selected, and then click Next.
3. Configure the first and second authentication methods for the new rule. To do this, follow these steps:
   1. On the Authentication Method page, click Advanced, click Customize, and then click Next. The Customize Advanced Authentication Methods dialog box appears.
   2. Under First authentication, click Add. The First Authentication Method dialog box appears.
   3. In the First Authentication Method dialog box, select an authentication method, and then click OK.
   4. Repeat steps b through c to add any other authentication methods that you want.
   5. Under Second authentication, click Add. The Second Authentication Method dialog box appears.
   6. In the Second Authentication Method dialog box, select an authentication method, and then click OK.
   7. Repeat steps e through f to add any other authentication methods that you want.
   8. Click OK to close the Customize Advanced Authentication Methods dialog box.
   9. On the Authentication Method page, click Next.
4. On the Profile page, make sure that the default settings are configured, and then click Next.
5. On the Name page, specify a name and a description for the rule in the Name and Description (optional) boxes, and then click Finish.
6. Close the "Windows Firewall with Advance Security" snap-in.

To modify the order of the authentication methods for a connection security rule, follow these steps:

1. Open the "Windows Firewall with Advanced Security" snap-in. To do this, follow these steps:
   1. Click Start
      Collapse this imageExpand this image

      
      , type control.exe in the Start Search box, and then press ENTER.
   2. In Control Panel, click System and Maintenance, and then click Administrative Tools.
   3. Double-click Windows Firewall with Advanced Security.
2. Click Connection Security Rules.
3. In the Connection Security Rules pane, right-click the connection security policy that you want to modify, and then click Properties.
4. Click the Authentication tab in the properties dialog box of the connection security rule, and then click Customize.
5. In the Customize Advanced Authentication Methods dialog box, change the order of the authentication methods to the way that you want, and then click OK.
6. Click OK to close the properties dialog box of the connection security policy.
7. Close the "Windows Firewall with Advance Security" snap-in.