Windows Advanced Firewall Programmatic Access


on11

Ninja
Local time
4:54 AM
Posts
4
OS
Windows 11 Pro
I finally got around to creating and account here as two of my daily drivers are now Windows 11. So yay me :)

As a developer I know that we can create Windows Firewall rules, exceptions and so on programmatically. From the perspective of convenience having a program create the rule for you is I suppose great, but from a malicious perspective I don't like that any program can add or modify my rules as they want to suit themselves.

I wanted to know if there is a way to "disable" programmatic access to the Windows Firewall basically making it so that unless you create the rule yourself through the GUI or command line, they cannot be created automatically programmatically. I have searched for this and the only thing you get back is how to disable the firewall which is not what I need.

Before the customary deluge of why don't you use a third party firewall and having all kinds of suggestion to use Comodo or other things thrown as a response, please save it. I already use that, this is a particular use case and I am not interested in "another program" as a solution, just a native way within Windows, policy, registry or whatnot, to disable the programmatic access. I am hoping for the community's insights.

Thanks in advance.
 
Windows Build/Version
Version 22H2 (Build 22621.2283)

My Computers

System One System Two

  • OS
    Windows 11 Pro
    Computer type
    Laptop
    Manufacturer/Model
    Dell XPS 15 7590
    CPU
    Intel Core i7-9750H @ 2.60 GHz, 6 Cores, 12 Logical
    Motherboard
    Intel
    Memory
    16 GB
    Graphics Card(s)
    NVIDIA GeForce GTX 1650
    Sound Card
    Realtek / Intel Display Audio / Grind Fuel
    Monitor(s) Displays
    Dell SHP 148A
    Screen Resolution
    1920 x 1080 x 59 hertz
    Hard Drives
    NVMe PC601 SK, 500 GB
    Keyboard
    Standard 101/102-Key
    Mouse
    Synaptics Touchpad / Logi MX Anywhere 3
    Internet Speed
    500 Mbps
    Browser
    Edge / Firefox
    Antivirus
    Defender
    Other Info
    Goodix Fingerprint
  • Operating System
    Windows 11 Pro
    Computer type
    Laptop
    Manufacturer/Model
    HP ZBook Firefly 15.6 inch G8 Mobile Workstation
    CPU
    11th Generation Core i7-1185G7 @ 3.00 GHz, 4 Cores, 8 Logical
    Motherboard
    Intel
    Memory
    64 GB
    Graphics card(s)
    NVIDIA T500
    Sound Card
    Realtek / Intel Smart Sound / TOZO-NC9 Plus
    Monitor(s) Displays
    Intel Iris Xe
    Screen Resolution
    3840 x 2160 x 60 hertz
    Hard Drives
    NVMe Samsung MZVLB2T0HALB-000H1, 2 TB
    Mouse
    Synaptics Touchpad / PointStyk / Logi MX Anywhere 3
    Keyboard
    Standard 101/102-Key
    Internet Speed
    500 Mbps
    Browser
    Edge / Firefox
    Antivirus
    Defender
    Other Info
    Synaptics FS7605 Touch Fingerprint Sensor with PurePoint
I don't believe there's a GPO policy to lock out Firewall rule changes.

The best answer is to export your current (and verified) ruleset to .vfw, and import them back as a Group Policy. Because it's now treated as policy, you can use "gpupdate /force" to revert any changes. Using the MPSSVC event logs, it's possible to track recent changes to Firewall that were made outside of the Group Policy.

 

My Computer

System One

  • OS
    Windows 7
I don't believe there's a GPO policy to lock out Firewall rule changes.

The best answer is to export your current (and verified) ruleset to .vfw, and import them back as a Group Policy. Because it's now treated as policy, you can use "gpupdate /force" to revert any changes. Using the MPSSVC event logs, it's possible to track recent changes to Firewall that were made outside of the Group Policy.


It is certainly disappointing but thank you for the alternative option. At least gives me something to work out. I always wished there was a way to create the rules and assign them to groups so they can be disabled and enabled en mass but with script on load to ensure the rules are always exactly what we want but seems despite showing the group in the GUI there is actually no option to set it, but that's a different issue. Thank you again.
 

My Computers

System One System Two

  • OS
    Windows 11 Pro
    Computer type
    Laptop
    Manufacturer/Model
    Dell XPS 15 7590
    CPU
    Intel Core i7-9750H @ 2.60 GHz, 6 Cores, 12 Logical
    Motherboard
    Intel
    Memory
    16 GB
    Graphics Card(s)
    NVIDIA GeForce GTX 1650
    Sound Card
    Realtek / Intel Display Audio / Grind Fuel
    Monitor(s) Displays
    Dell SHP 148A
    Screen Resolution
    1920 x 1080 x 59 hertz
    Hard Drives
    NVMe PC601 SK, 500 GB
    Keyboard
    Standard 101/102-Key
    Mouse
    Synaptics Touchpad / Logi MX Anywhere 3
    Internet Speed
    500 Mbps
    Browser
    Edge / Firefox
    Antivirus
    Defender
    Other Info
    Goodix Fingerprint
  • Operating System
    Windows 11 Pro
    Computer type
    Laptop
    Manufacturer/Model
    HP ZBook Firefly 15.6 inch G8 Mobile Workstation
    CPU
    11th Generation Core i7-1185G7 @ 3.00 GHz, 4 Cores, 8 Logical
    Motherboard
    Intel
    Memory
    64 GB
    Graphics card(s)
    NVIDIA T500
    Sound Card
    Realtek / Intel Smart Sound / TOZO-NC9 Plus
    Monitor(s) Displays
    Intel Iris Xe
    Screen Resolution
    3840 x 2160 x 60 hertz
    Hard Drives
    NVMe Samsung MZVLB2T0HALB-000H1, 2 TB
    Mouse
    Synaptics Touchpad / PointStyk / Logi MX Anywhere 3
    Keyboard
    Standard 101/102-Key
    Internet Speed
    500 Mbps
    Browser
    Edge / Firefox
    Antivirus
    Defender
    Other Info
    Synaptics FS7605 Touch Fingerprint Sensor with PurePoint
Someone shared the idea of adding a group name tag in front of every rule's name, to better identify them. Then you could use regular expressions to process them.
 

My Computer

System One

  • OS
    Windows 7
Someone shared the idea of adding a group name tag in front of every rule's name, to better identify them. Then you could use regular expressions to process them.
Aha, clever. Currently we tag them [Application_Name] for sorting and identification; but thinking your RegEx idea can grab this existing piece of data, nice. Thank you.
 

My Computers

System One System Two

  • OS
    Windows 11 Pro
    Computer type
    Laptop
    Manufacturer/Model
    Dell XPS 15 7590
    CPU
    Intel Core i7-9750H @ 2.60 GHz, 6 Cores, 12 Logical
    Motherboard
    Intel
    Memory
    16 GB
    Graphics Card(s)
    NVIDIA GeForce GTX 1650
    Sound Card
    Realtek / Intel Display Audio / Grind Fuel
    Monitor(s) Displays
    Dell SHP 148A
    Screen Resolution
    1920 x 1080 x 59 hertz
    Hard Drives
    NVMe PC601 SK, 500 GB
    Keyboard
    Standard 101/102-Key
    Mouse
    Synaptics Touchpad / Logi MX Anywhere 3
    Internet Speed
    500 Mbps
    Browser
    Edge / Firefox
    Antivirus
    Defender
    Other Info
    Goodix Fingerprint
  • Operating System
    Windows 11 Pro
    Computer type
    Laptop
    Manufacturer/Model
    HP ZBook Firefly 15.6 inch G8 Mobile Workstation
    CPU
    11th Generation Core i7-1185G7 @ 3.00 GHz, 4 Cores, 8 Logical
    Motherboard
    Intel
    Memory
    64 GB
    Graphics card(s)
    NVIDIA T500
    Sound Card
    Realtek / Intel Smart Sound / TOZO-NC9 Plus
    Monitor(s) Displays
    Intel Iris Xe
    Screen Resolution
    3840 x 2160 x 60 hertz
    Hard Drives
    NVMe Samsung MZVLB2T0HALB-000H1, 2 TB
    Mouse
    Synaptics Touchpad / PointStyk / Logi MX Anywhere 3
    Keyboard
    Standard 101/102-Key
    Internet Speed
    500 Mbps
    Browser
    Edge / Firefox
    Antivirus
    Defender
    Other Info
    Synaptics FS7605 Touch Fingerprint Sensor with PurePoint
Welcome binary or should I say 011000111000111 !!
 

My Computer

System One

  • OS
    Win 11 x 64 Home on PC . Pro Win 11 x 64 on Surface 9.
    Computer type
    PC/Desktop
    Manufacturer/Model
    Upgraded to personal setup from made to measure.
    CPU
    amd ryzen 5 7600 6core 3701mhz
    Motherboard
    Gigabyte B650M K
    Memory
    32GB DDR5
    Graphics Card(s)
    MSI Nvidia Geforce Ventus 2X RTX 4070
    Sound Card
    ONBOARD 6 CHANNEL (5.1) HIGH DEF AUDIO (AS STANDARD)
    Monitor(s) Displays
    Coolermaster GM27-FFS 27 inch
    Screen Resolution
    1920 x 1080
    Hard Drives
    Samsung V-NAND SSD 970 Evo plus 500GB
    3TB SATA-III 3.5" HDD, 6GB/s, 7200RPM, 64MB CACHE
    1 x 4TB External USB. 1 x 5TB External SSD, & BIG sticks
    PSU
    700
    Case
    Coolermaster
    Cooling
    DEEP COOL AS700 CPU COOLER
    Keyboard
    Microsoft 600K & Logitech gamer G213
    Mouse
    logitech X2 Pro
    Internet Speed
    640+MB
    Browser
    Chrome & Opera
    Antivirus
    Kaspersky Plus
    Other Info
    WIRELESS 802.11 AC1300 867Mbps/5GHz, 400Mbps/2.4GHz PCI-E CARD
    Logitech L202 Speakers
    Asus DRW-14D5MT x48
    Net via Virgin Media hub 3 (using RJ45 cable). Plus MS surface 9 tablet (win 11). Amazon Fire 10.
Welcome binary or should I say 011000111000111 !!
Thank you. Lurked for a long time on the Ten Forum before registering. Here I was hoping credentials would transfer, didn't, so took me a bit to sign up here, but glad to be here.
 

My Computers

System One System Two

  • OS
    Windows 11 Pro
    Computer type
    Laptop
    Manufacturer/Model
    Dell XPS 15 7590
    CPU
    Intel Core i7-9750H @ 2.60 GHz, 6 Cores, 12 Logical
    Motherboard
    Intel
    Memory
    16 GB
    Graphics Card(s)
    NVIDIA GeForce GTX 1650
    Sound Card
    Realtek / Intel Display Audio / Grind Fuel
    Monitor(s) Displays
    Dell SHP 148A
    Screen Resolution
    1920 x 1080 x 59 hertz
    Hard Drives
    NVMe PC601 SK, 500 GB
    Keyboard
    Standard 101/102-Key
    Mouse
    Synaptics Touchpad / Logi MX Anywhere 3
    Internet Speed
    500 Mbps
    Browser
    Edge / Firefox
    Antivirus
    Defender
    Other Info
    Goodix Fingerprint
  • Operating System
    Windows 11 Pro
    Computer type
    Laptop
    Manufacturer/Model
    HP ZBook Firefly 15.6 inch G8 Mobile Workstation
    CPU
    11th Generation Core i7-1185G7 @ 3.00 GHz, 4 Cores, 8 Logical
    Motherboard
    Intel
    Memory
    64 GB
    Graphics card(s)
    NVIDIA T500
    Sound Card
    Realtek / Intel Smart Sound / TOZO-NC9 Plus
    Monitor(s) Displays
    Intel Iris Xe
    Screen Resolution
    3840 x 2160 x 60 hertz
    Hard Drives
    NVMe Samsung MZVLB2T0HALB-000H1, 2 TB
    Mouse
    Synaptics Touchpad / PointStyk / Logi MX Anywhere 3
    Keyboard
    Standard 101/102-Key
    Internet Speed
    500 Mbps
    Browser
    Edge / Firefox
    Antivirus
    Defender
    Other Info
    Synaptics FS7605 Touch Fingerprint Sensor with PurePoint

Latest Support Threads

Latest Tutorials

Back
Top Bottom