Take the 2-minute tour ×
Server Fault is a question and answer site for professional system and network administrators. It's 100% free, no registration required.

How do I view the actual, effective firewall rules for a Windows 7 computer where the local firewall is disabled but rules are established via group policy?:

enter image description here

In particular, the primary users of these computers are techinically competent developers who have local administrative rights. It seems possible that a clever one could update their own registry to deny access to SYSTEM account on applicable keys and thus thwarting group policy.

Both GUI (WF.msc) and command line (netsh advfirewall firewall show rule name=all) show all the locally defined rules -- most of which don't actually do anything because local settings are superceded by group policy.

share|improve this question
add comment

1 Answer

up vote 2 down vote accepted

In your screenshot, the firewall is off. This means that no rules that are created are going to matter.

If you really want to see what's being applied by policy, it should show up in rsop.msc.

share|improve this answer
    
+1 Answer = RSOP. It gave a clear explanation that a certain policy has disabled the local firewall. So I guess that really did mean there are no rules! I suppose I'll have another question then, elsewhere... –  Joshua Honig Nov 1 '12 at 19:37
    
If this answered your question, don't forget to accept the answer :) –  MDMarra Nov 1 '12 at 19:40
    
Yeah, I just had to wait a couple more minutes...and then forget :)- –  Joshua Honig Nov 2 '12 at 12:11
add comment

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.