Prohibit use of Internet Connection Firewall

Internet Connection Firewall is a stateful grouping filter that enables home users and small office users to avoid security threats to internet networks. This policy determines whether a user can enable the firewall and Firewall service to function correctly on the computer when connecting.

To do this: Run the Group Policy console, expand the "Computer Configuration" → "Administrative Templates" → "Network" → "Network connections" option, and then in the right window, double-click the "Prohibit Internet Connection Firewall on DNS domain network" policy entry, Pop-up Policy Properties dialog box.

Select the Enabled button and the user can then enable or configure the firewall, and the Firewall service cannot run on the computer, and the option to enable the firewall through the Advanced tab is removed. Additionally, you will not be able to enable the firewall by creating a remote access connection through the Make New Connection wizard, and disable the Network Setup Wizard.