MS Intune Windows Firewall Rules

🔒 Secure Bits 💡
Did you know 𝗙𝗶𝗿𝗲𝘄𝗮𝗹𝗹 𝗥𝘂𝗹𝗲𝘀 𝗰𝗿𝗲𝗮𝘁𝗲𝗱 𝘃𝗶𝗮 𝗠𝗶𝗰𝗿𝗼𝘀𝗼𝗳𝘁 𝗜𝗻𝘁𝘂𝗻𝗲 𝗮𝗿𝗲 𝗻𝗼𝘁 𝘃𝗶𝘀𝗶𝗯𝗹𝗲 in Windows Firewall (WF) console?

I’ve seen 𝗺𝗮𝗻𝘆 𝗮𝗱𝗺𝗶𝗻𝗶𝘀𝘁𝗿𝗮𝘁𝗼𝗿𝘀 𝗰𝗼𝗻𝗳𝘂𝘀𝗲𝗱 by this, so here’s a little trick.

𝗪𝗶𝘁𝗵 𝗔𝗰𝘁𝗶𝘃𝗲 𝗗𝗶𝗿𝗲𝗰𝘁𝗼𝗿𝘆 𝗚𝗣𝗢𝘀, 𝘆𝗼𝘂 𝘀𝗲𝗲:
“𝐹𝑜𝑟 𝑦𝑜𝑢𝑟 𝑠𝑒𝑐𝑢𝑟𝑖𝑡𝑦, 𝑠𝑜𝑚𝑒 𝑠𝑒𝑡𝑡𝑖𝑛𝑔𝑠 𝑎𝑟𝑒 𝑐𝑜𝑛𝑡𝑟𝑜𝑙𝑙𝑒𝑑 𝑏𝑦 𝐺𝑟𝑜𝑢𝑝 𝑃𝑜𝑙𝑖𝑐𝑦.”

With Intune, 𝘁𝗵𝗲𝗿𝗲’𝘀 𝗻𝗼 𝗰𝗹𝗲𝗮𝗿 𝗶𝗻𝗱𝗶𝗰𝗮𝘁𝗶𝗼𝗻 in WF.msc that the firewall is being managed—it just works silently in the background.

𝗛𝗼𝘄 𝘁𝗼 𝗖𝗵𝗲𝗰𝗸 𝗳𝗼𝗿 𝗜𝗻𝘁𝘂𝗻𝗲 𝗙𝗶𝗿𝗲𝘄𝗮𝗹𝗹 𝗥𝘂𝗹𝗲𝘀:
You won’t see them in the GUI, but you can verify them with:

🔹𝗖𝗵𝗲𝗰𝗸 𝘁𝗵𝗲 𝗥𝗲𝗴𝗶𝘀𝘁𝗿𝘆:
KEY_LOCAL_MACHINESYSTEMCurrentControlSetServicesSharedAccessParametersFirewallPolicyMdm

🔹𝗨𝘀𝗲 𝗣𝗼𝘄𝗲𝗿𝗦𝗵𝗲𝗹𝗹:
Get-NetFirewallRule -PolicyStore ActiveStore | ?{$_.DisplayName -like “*NAME of your MS Intune rule*”}

Btw. you can also find the rule in the Monitoring tab.

💡 Have you encountered other surprising limitations in Intune?