I am trying to deploy a set of advanced windows firewall ACLs to several 2008 R2 servers. I would like to (i have to) ensure that no local or old rules are getting applied.
So I set "Apply local firewall rules" to "No" within each profile (GPO). This does only apply to local firewall rule merging (as the name implies). Different rules which are getting set by other GPOs are additive and sum up. This makes sense if I think about it.
However this is a problem as through experimenting things became messy on my test machines. So I created another GPO calling a script that deletes all firewall rules in advance (netsh advfirewall firewall delete rule name=all), which leads to a corruptive file and printer sharing service.
So to cut it short: What is be the best/recommended way to ensure a clean rule base before applying new ones?