Announcing enhanced control for configuring Firewall rules with Windows Defender

I have problems understanding how this works.

Example:

Reusable settings "Admin IPs" containing three IP addresses.

Settings_Policy:

- don't merge local policies

- Default Inbound Action: block

Rules_Policy:

- allow RDP: Local Port Range: 3389

- Reusable settings selected

Will it automatically pull the IPs from the reusable settings group and enable + insert to remote address range?

For me it simply doesn't work and creates just an allow from any rule for port 3389:

Here it looks like it's allowed from any:

The reusable settings are in the registry: Computer\HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\Mdm\DynamicKeywords\Addresses\NonAutoResolve

Get-NetFirewallRule -PolicyStore ActiveStore |where PolicyStoreSource -eq MDM|ft

So it looks like its there, but I just tested it and I can access RDP from IPs that aren't listed 🙂 (no, there are no other rules).