Windows Firewall with polices from a GPO - Stay persistent with firewall disabled

[Peter Brooks2]

Since the 1st of February, we have observed a new behaviour within an On-Prem AD and Windows 10. (After Patch Tuesday 31st Jan).For any GPO defined with setting:Computer Configuration/Policies/Windows settings/Security Settings/Windows Defender Firewall with Advanced SecurityRegardless of state for the windows firewall, these GPO policies will persist.I.e, even if the firewall is disabled via the GUI. Windows will keep applying any rules defined via GPO's.Is this a bug or a feature? Removing any mis-configured rules in this scenario can be difficult.Any GPO rule can be found using Get-NetFirew

Continue reading...