Firewall – View windows 7 effective firewall rules when controlled by group policy

firewallgroup-policywindows 7

How do I view the actual, effective firewall rules for a Windows 7 computer where the local firewall is disabled but rules are established via group policy?:

enter image description here

In particular, the primary users of these computers are techinically competent developers who have local administrative rights. It seems possible that a clever one could update their own registry to deny access to SYSTEM account on applicable keys and thus thwarting group policy.

Both GUI (WF.msc) and command line (netsh advfirewall firewall show rule name=all) show all the locally defined rules — most of which don't actually do anything because local settings are superceded by group policy.

Best Answer

In your screenshot, the firewall is off. This means that no rules that are created are going to matter.

If you really want to see what's being applied by policy, it should show up in rsop.msc.