add an exception in firewall with script

I’m looking for a script that will be added to the AD login script on win 2000 server.
The script will automatically add a program in the firewall exceptions tab (“vnc”).
Designated win xp sp2 workstation fire wall.