we have a request to allow customer to change firewall settings for servers in some OUs. These OUs inherit some policy which sets firewall to off for public and private network profiles. I wonder if there is a way to somehow override this so they are allowed to change firewall settings. This way it is off and greyed out. It seems that creating a policy with "not configured" does not work as overriding value "enabled" or "disabled" I made a testing policy like this.
But it stays like this