In the registry, there are multiple places to determine if a firewall profile is active. For example, I can check theEnableProfile keys in the following entries to determine if the domain profile is active:
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\SharedAccess\Defaults\FirewallPolicy\DomainProfile
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile
HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\WindowsFirewall\DomainProfile
So, with that being said, I have these questions:
1. What is the order of precedence in determining which of these is active (i.e. which one really controls the domain profile active state?)
2. What's the difference between the defaults and parameters subkeys in CurrentControlSet (i.e. the first two listed above)?
3. Is the setting of the above keys determined by which editor I use to configure those options (i.e. if I use gpedit.msc, will that configure a different key than secpol.msc)?