Server 2008 Firewall Prompt

We've noticed that on some Server 2008 servers when you enable a feature or role you get a prompt from the Windows Firewall to "Allow" or "Block" access for this service, while at other times we do not get this prompt.  I'm not sure what causes this prompt to work or not.  Is anyone familiar with this prompt, and do you know how to make sure we're always prompted for any new feature or role that is installed that required special tcp/udp ports?

The reason it's an issue for example is that when we've enabled DNS on some domain controllers we've noticed that a rule gets created for the DNS executable but not necessarily UDP port 53.  Seems like the firewall is hit or miss on whether or not it opens the right ports when a new service is installed.  A few times we've had issues, so we figured if the prompt works better, then perhaps there will be fewer issues.  (Unfortunately, in our environment we have to run the firewall for all zones, and we frequently find it's the culprit of issues until we create additional rules.)
patriotsAsked:
Who is Participating?

[Product update] Infrastructure Analysis Tool is now available with Business Accounts.Learn More

x
I wear a lot of hats...

"The solutions and answers provided on Experts Exchange have been extremely helpful to me over the last few years. I wear a lot of hats - Developer, Database Administrator, Help Desk, etc., so I know a lot of things but not a lot about one thing. Experts Exchange gives me answers from people who do know a lot about one thing, in a easy to use platform." -Todd S.

patriotsAuthor Commented:
this prompt is controlled by a registry key and GPO:
Computer Configuration | Policies | Administrative Templates | Network | Network Connections | Windows Firewall | <Domain or Standard> Profile

Policy Setting should be
Windows Firewall: Prohibit notifications - set to disabled
0

Experts Exchange Solution brought to you by

Your issues matter to us.

Facing a tech roadblock? Get the help and guidance you need from experienced professionals who care. Ask your question anytime, anywhere, with no hassle.

Start your 7-day free trial
It's more than this solution.Get answers and train to solve all your tech problems - anytime, anywhere.Try it for free Edge Out The Competitionfor your dream job with proven skills and certifications.Get started today Stand Outas the employee with proven skills.Start learning today for free Move Your Career Forwardwith certification training in the latest technologies.Start your trial today
Windows Server 2008

From novice to tech pro — start learning today.