Enable Windows Server Firewall Exceptions Groups with Group Policy

Posted on 2009-04-16
Last Modified: 2013-12-04
Hi experts,
i just configure firewall settings via group policies in a windows server 2008 environment.
I just want to enable the exception groups which are predefined on each server.
What i did was to configure the advanced firewall settings in group policy, created predefnied inbound rules there which names matches them in the firewall exceptions.

Result is that there are created new rules with the same name on the servers firewall exception rules, so i have duplicate entries
How can i just enable those?

Thanks in advance
Question by:merowinger
    LVL 3

    Expert Comment

    On the corresponding GPO, Go down to Windows Firewall with Advanced Security Settings, expand it, right click on the one which has an CN on it, and get to properties.
    In the corrseponding Profile (Domain/Private/Public), Click the "Customize..." button in the "Settings" part, choose "No" next to "Apply local firewall rules"
    and/or "local connection security rules" as required.
    LVL 31

    Author Comment

    but that means that firewall setting already configured on the server will be ignored?
    For examble if i have a KMS Server which KMS exceptions needs to be open my gpo rules will ignore that rule...correct?!?
    LVL 31

    Accepted Solution

    i solved it with netsh commands. there can be enabled those firewall groups

    Featured Post

    Find Ransomware Secrets With All-Source Analysis

    Ransomware has become a major concern for organizations; its prevalence has grown due to past successes achieved by threat actors. While each ransomware variant is different, we’ve seen some common tactics and trends used among the authors of the malware.

    Join & Write a Comment

    Sometimes drives fill up and we don't know why.  If you don't understand the best way to use the tools available, you may end up being stumped as to why your drive says it's not full when you have no space left!  Here's how you can find out...
    Join Greg Farro and Ethan Banks from Packet Pushers ( and Greg Ross from Paessler ( for a discussion about smart network …
    This tutorial will walk an individual through the steps necessary to configure their installation of BackupExec 2012 to use network shared disk space. Verify that the path to the shared storage is valid and that data can be written to that location:…
    With the advent of Windows 10, Microsoft is pushing a Get Windows 10 icon into the notification area (system tray) of qualifying computers. There are many reasons for wanting to remove this icon. This two-part Experts Exchange video Micro Tutorial s…

    754 members asked questions and received personalized solutions in the past 7 days.

    Join the community of 500,000 technology professionals and ask your questions.

    Join & Ask a Question

    Need Help in Real-Time?

    Connect with top rated Experts

    16 Experts available now in Live!

    Get 1:1 Help Now