Forum Discussion
Firewall Off despite policy being enabled
This can happen if you have a GPO policy for Defender FW also assigned as it will take precedence over Intune against the Defender CSP.
Well, while Gpresult HTML does not show anything related to Firewall, I could locate the following key:
Computer\HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\WindowsFirewall\DomainProfile called EnableFirewall and the value is 0x00000000
I have since tried to use the command below to enable it to test but it is still showing disabled:
reg add "HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\WindowsFirewall\DomainProfile" /v EnableFirewall /t REG_DWORD /d 1 /f Set-ItemProperty -Path "HKLM:\SOFTWARE\Policies\Microsoft\WindowsFirewall\DomainProfile" -Name "EnableFirewall" -Value 1
Did you run gpresult for user or with computer as scope?
Well both really.
When enabled locally i.e. from windows firewall in control panel, It works. But for some reason Intune policies do not seem to enable it.
Not sure if something in the environment itself etc... could be blocking it.
Can you also run rsop as both user and computer and share the result here for the Windows Defender settings?
I located it and made an exception. Works fine now. Logging for such issues is very unclear though so hard to locate what the issue is. Either ways its good now. Thank you
