How do I view the actual, effective firewall rules for a Windows 7 computer where the local firewall is disabled but rules are established via group policy?:
In particular, the primary users of these computers are techinically competent developers who have local administrative rights. It seems possible that a clever one could update their own registry to deny access to SYSTEM account on applicable keys and thus thwarting group policy.
Both GUI (
WF.msc) and command line (
netsh advfirewall firewall show rule name=all) show all the locally defined rules -- most of which don't actually do anything because local settings are superceded by group policy.