Strangely, it seems possible to edit Firewall exceptions in Windows XP if you know Win32 programming in C++, as explained by Charles at rohitab.com. This would seem like a real security risk since any trojan could add firewall exceptions and open firewall ports. Perhaps Windows asks user to confirm such operations when they happen, don’t know (maybe that’s what programs do when you see a notice “such program is trying to access internet, do you want to allow – it’s just installing an exception so it can access the internet).
What led me to looking for this info is the desire to increase my level of protection when on public wifi (and therefore untrusted) networks. When at office or home, I have many exceptions in firewall, to allow printer sharing, etc. But I don’t need those in public wifi setting, I just want to browse. So I’d like a way to command, in one click, “I’m on public wifi network (untrusted), so close all incoming firewall exceptions”; Maybe even all outgoing ones just to make sure some programs aren’t pushing some data on the network; the only outgoing ones would be web browser and skype.
Haven’t found anything COTS like this. But apparently in Windows 7 this capability is builtin to the OS, so I’ll just have to wait a year…