Mastering Windows Group Policy

Configuring GPO to clear local WFAS rules

As you now know, there are WFAS rules that exist inside Windows by default, and by plugging new rules into GPOs we are adding new rules into that already-extensive list of predefined rules. While this usually works just fine, sometimes it feels a mess inside there, and wouldn't it be nice if we could create one standard set of firewall rules for everybody? Wouldn't it be great to know that there were no locally-configured, predefined rules in play, and that only the ones we define through Group Policy exist on the workstations? This is the last setting that I want to point out in our discussion on WFAS. There is an option hiding away in there that forces the local WFAS rules out, and only places the ...