Forcing Windows Firewall to always be enabled

Users can be pretty savvy, which sometimes means they will make changes on their corporate computers that you would prefer not to support. Group Policy is used to protect systems and maintain concurrency of settings that you want enforced. One of the ways we can do this is to ensure that the Windows Firewall is always enabled and working. You might not even be protecting against human activity, sometimes applications (or malware) will attempt to make changes to the firewall settings, perhaps even disabling it, and you may want to protect against that behavior.

Create a new GPO and navigate your way back to our WFAS location, Computer Configuration | Policies | Windows Settings | Security Settings ...

Get Mastering Windows Group Policy now with the O’Reilly learning platform.

O’Reilly members experience books, live events, courses curated by job role, and more from O’Reilly and nearly 200 top publishers.