Server Fault is a question and answer site for system and network administrators. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

When defining new firewall rules with Group Policies in Windows Server 2008:

  • Does adding a single rule to allow traffic disable all other rules that were present locally on the client computer?
  • Does it inherit on a individual rule basis. For example does a single rule over ride a single rule on the client computer (or maybe the other way?)
  • Does this behavior depend on some base setting?

Also, any other gotchas when starting out with this would be appreciated if they pop into your head.

share|improve this question
up vote 2 down vote accepted

GPO rules are merged (by default) to local rules. Rules where local and GPO conflict, GPO wins.

I haven't had any problems with it; but I meticulously planned each setting and rule in my Firewall GPOs, being sure to fully understand the implications of each setting before touching it.

share|improve this answer

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.