anchor.diff:  if errorlevel 1 goto winrm_not_running
   
   echo ==^> Stopping winrm service
  -
   sc stop winrm
   
   :is_winrm_running
  
positive.code: netsh advfirewall firewall add rule name="winrm" dir=in action=allow protocol=TCP localport=5985
  @if errorlevel 1 echo ==^> WARNING: Error %ERRORLEVEL% was returned by: netsh advfirewall firewall add rule name="winrm"  dir=in action=allow protocol=TCP localport=5985
  
  :: wait for firewall groups to enable
  timeout 5
  
  :exit0
  
negative.code: netsh advfirewall firewall delete rule name="winrm"
  @if errorlevel 1 echo ==^> WARNING: Error %ERRORLEVEL% was returned by: netsh advfirewall firewall delete rule name="winrm"
  
  timeout 1
  
  echo ==^> Enable firewall groups
  :: see http://social.technet.microsoft.com/Forums/windowsserver/en-US/a1e65f0f-2550-49ae-aee2-56a9bdcfb8fb/windows-7-remote-administration-firewall-group?forum=winserverManagement
  ver | findstr /i "6\.[2-9]\." >nul
  if errorlevel 1 ( 
    echo ==^> Enabling Remote Administration firewall group
    :: pre win 8/server 2012
  