Server Fault is a question and answer site for system and network administrators. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

How do I view the actual, effective firewall rules for a Windows 7 computer where the local firewall is disabled but rules are established via group policy?:

enter image description here

In particular, the primary users of these computers are techinically competent developers who have local administrative rights. It seems possible that a clever one could update their own registry to deny access to SYSTEM account on applicable keys and thus thwarting group policy.

Both GUI (WF.msc) and command line (netsh advfirewall firewall show rule name=all) show all the locally defined rules -- most of which don't actually do anything because local settings are superceded by group policy.

share|improve this question
up vote 2 down vote accepted

In your screenshot, the firewall is off. This means that no rules that are created are going to matter.

If you really want to see what's being applied by policy, it should show up in rsop.msc.

share|improve this answer
+1 Answer = RSOP. It gave a clear explanation that a certain policy has disabled the local firewall. So I guess that really did mean there are no rules! I suppose I'll have another question then, elsewhere... – Joshua Honig Nov 1 '12 at 19:37
If this answered your question, don't forget to accept the answer :) – MDMarra Nov 1 '12 at 19:40
Yeah, I just had to wait a couple more minutes...and then forget :)- – Joshua Honig Nov 2 '12 at 12:11

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.