Need Help Disabling Windows Firewall Profiles via PowerShell for Ansible Automation

Ambika Singh 0

We have a requirement to set Windows Firewall profiles to "off" using Ansible Automation. Despite various attempts, the profiles reset/enabling upon reboot due to Group Policies. I am not able to disable the windows firewall profiles through Powershell or Registry Keys as on rebooting GroupPolicies are taking over and resetting/enabling the Domain, Public and Private Profiles. This is a required step to work with Ansible automation.

Tried the following methods:

PowerShell:

Set-NetFirewallProfile -Profile Domain,Public,Private -Enabled False

%ProgramFiles%\Windows Defender\MpCmdRun.exe -wdenable

Registry Keys:

- `Set-GPRegistryValue -Name "Firewall Domain Profile" -Key "HKLM:\SOFTWARE\Policies\Microsoft\WindowsFirewall\DomainProfile" -ValueName "EnableFirewall" -Type DWORD -Value 0`

   - `Set-GPRegistryValue -Name "Firewall Private Profile" -Key "HKLM:\SOFTWARE\Policies\Microsoft\WindowsFirewall\PrivateProfile" -ValueName "EnableFirewall" -Type DWORD -Value 0`

      - `Set-GPRegistryValue -Name "Firewall Public Profile" -Key "HKLM:\SOFTWARE\Policies\Microsoft\WindowsFirewall\PublicProfile" -ValueName "EnableFirewall" -Type DWORD -Value 0`

Ansible Module:
- win_firewall:
- state: disabled
- profiles:
```
      - `Domain`

                  - `Private`

                              - `Public`
```
Any advice on ensuring these settings persist across reboots would be greatly appreciated.

MotoX80 34,346 Reputation points

2024-06-16T13:32:17.83+00:00

If the firewall is blocking some network traffic, just define a rule that allows that traffic.
Ambika Singh 0 Reputation points

2024-06-17T22:58:22.95+00:00

Thanks @MotoX80 for the reply but my requirement is to make all profiles off in windows advanced firewall setting via PowerShell or RegistryKeys so that i can use it in Ansible automation.
MotoX80 34,346 Reputation points

2024-06-18T00:32:56.67+00:00
I am not familiar with Ansible. Can you explain what the issue is?

Is network traffic being blocked?

Is this local group policy or Active Directory domain policy?

What output does this command produce?

reg.exe query HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\WindowsFirewall /s
Ambika Singh 0 Reputation points

2024-06-18T17:36:50.22+00:00

reg.exe query HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\WindowsFirewall /s - this was getting reset after reboot. came close by using To disable Windows Defender Firewall services:

Please open cmd.exe with administrator privilege and run the following command:

reg add hklm\system\currentcontrolset\services\mpssvc /t reg_dword /v start /d 4 /f help from the link below :

https://learn.microsoft.com/en-us/answers/questions/64486/disable-windows-firewall-on-2k19?page=1#answers
MotoX80 34,346 Reputation points

2024-06-18T20:36:58.0366667+00:00

Is network traffic being blocked? Is there a reason that you cannot just write a rule to allow that traffic? See new-netfirewallrule.

Is the PC in question a member of an Active Directory domain and is the firewall being reset by an AD domain policy? Your images only show LOCAL policies.

Share via

Need Help Disabling Windows Firewall Profiles via PowerShell for Ansible Automation

Your answer