windows firewall trouble

We are using windows 2008 64 bit Enterprise R2 with MS FTP 7.5, Where windows firewall is enabled (Port 21 is allowed ).
Now ftp users can only access the ftp services using ' Active Mode ' in the ftp client software. But if they attempt to connect using ' passive mode ' the ftp server don't let them connect.
By default every ftp client/browser is set to connect using ' passive mode ' in the result every new user come back to user with issue that they can't connect to ftp. which is really annoying. 
 
How can we configure windows firewall to accept ftp connection using both Active & passive mode ?
 
 

Consult with this kb http://portal.hostingcontroller.com/KB/a162/how-to-configure-ms-ftp-with-windows-firewall.aspx

Reconfigure or update your firewall program so that Windows Update is not blocked.
Reconfigure or update your firewall program so that Windows Update is not blocked