I am having an issue with creating an exception for a client workstation that needs a firewall exception defined. The 2K8R2 AD is pushing GP down and applying the following rule on the Firewall Domain Profile;
Rule Name: Inbound Rules -> Remote Administration (NP-In)
Port:445
Protocol:TCP
Action:Block
The problem is I don't know where this is specifically in group policy. I can see in the General tab of the rule properties that "This rule has been applied by the system administrator and cannot be modified". I've been looking through Computer Configuration->Policies->Administrative Templates->Network->Network Connections->Windows Firewall->Domain Profile. I have the following enabled with defined exceptions;
Windows Firewall: Allow local program exceptions - Enabled
Windows Firewall: Define inbound program exceptions - Not Configured
Windows Firewall: Protect all network connections - Not Configured
Windows Firewall: Do not allow exceptions - Not Configured
Windows Firewall: Allow inbound file and printer sharing exception - Enabled
Windows Firewall: Allow ICMP exceptions - Not Configured
Windows Firewall: Allow logging - Enabled
Windows Firewall: Prohibit notifications - Not Configured
Windows Firewall: Allow local port exceptions - Enabled
Windows Firewall: Define inbound port exceptions - Enabled
Windows Firewall: Allow inbound remote administration exception - Not Configured
Windows Firewall: Allow inbound Remote Desktop exceptions - Not Configured
Windows Firewall: Prohibit unicast response to multicast or broadcast requests - Not Configured
Windows Firewall: Allow inbound UPnp framework exceptions - Not Configured
Can someone please point me to the correct group policy entry that needs to be modified? Thank you.