.      How to articles       Windows Services       Group Policy             Donate        
Computer step by step

Windows Firewall: Do not allow exceptions

Description:

Specifies that Windows Firewall blocks all unsolicited incoming messages. This policy setting overrides all other Windows Firewall policy settings that allow such messages.

If you enable this policy setting, in the Windows Firewall component of Control Panel, the "Block all incoming connections" check box is selected and administrators cannot clear it. You should also enable the "Windows Firewall: Protect all network connections" policy setting; otherwise, administrators who log on locally can work around the "Windows Firewall: Do not allow exceptions" policy setting by turning off the firewall.

If you disable this policy setting, Windows Firewall applies other policy settings that allow unsolicited incoming messages. In the Windows Firewall component of Control Panel, the "Block all incoming connections" check box is cleared and administrators cannot select it.

If you do not configure this policy setting, Windows Firewall applies other policy settings that allow unsolicited incoming messages. In the Windows Firewall component of Control Panel, the "Block all incoming connections" check box is cleared by default, but administrators can change it.





Supported on:

At least Windows XP Professional with SP2

Not Configured - No registry values are specified.

Disabled           - Any values that would be created by the policy in the registry are deleted.

Enabled            - Adding, modifying or delete values in the registry.

User Interface can be found in the Group Policy.

Please navigate to Computer Configuration - Policies - Administrative Templates - Network - Network Connections - Windows Firewall - Domain Profile folder.