Adicionar regra no firewall via linha de comando

netsh advfirewall firewall add rule name=5901-VNC dir=in action=allow protocol=TCP localport=5901