Unable to create Defender Firewall Rules

Jon Mercer 996

Does anyone else when trying to create a Microsoft Defender Firewall Rules in Intune security can't put anything into the name box and you can't go further till you do? Using Edge Chromium to do this. Is this supposed to be a fillable field, or is there somewhere else that I am supposed to create something that gets put in there?

User's image

Accepted answer

Simon Ren-MSFT 35,471 Reputation points Microsoft Vendor

2023-03-08T02:26:56.82+00:00

Hi,

Thanks for your reply.

You can try to create the Microsoft Defender Firewall Rules in below configuration profile:

Go to Devices > Windows > Configuration profiles > Create profile > Choose Windows 10 and later as the platform, Choose Templates, then Endpoint protection as the profile type. Select Windows Defender Firewall, then Firewall rules.

Refer to: Create Windows Firewall rules in Intune

Hope it helps. Have a nice day!

Best regards,

Simon

If the response is helpful, please click "Accept Answer" and upvote it.

Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.
Please sign in to rate this answer.

0 comments No comments
Sign in to comment

Use comments to ask for clarification, additional information, or improvements to the question.

2 additional answers

Simon Ren-MSFT 35,471 Reputation points Microsoft Vendor

2023-03-03T07:04:03.67+00:00

Hi,

Thank you for posting in Microsoft Q&A forum.

During my test, I can create the Microsoft Defender Firewall Rules configuration profile and customize the rule name with my Global Administrator. Which account you are using? Could you change your account and browser to have a try?

Thanks for your time. Have a nice day!

Best regards,

Simon

If the response is helpful, please click "Accept Answer" and upvote it.

Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.
Please sign in to rate this answer.
Jon Mercer 996 Reputation points

2023-03-03T16:28:59.17+00:00

I am a global administrator and where did you go to get the screen you are seeing, because it doesn't look the same as what I am seeing. What I am trying to do, is there is a new call center application we are using, and if Windows 10 firewall is enabled, it comes up and says this program is blocked, if you want to allow it, talk with your admin to add a firewall rule. It only gives the option to cancel (non-admin user accounts). That is why I am in the Windows defender firewall rules to create a rule to allow the program through the Windows 10 firewall. I get to this screen, and it wants a name, and there is no way for me to insert anything.

I was getting the above at https://endpoint.microsoft.com/?ref=AdminCenter#view/Microsoft_Intune_Workflows/SecurityManagementMenu/~/firewall while doing this under Summary/Create Policy.

Jon Mercer 996 Reputation points

2023-03-07T16:45:47.3633333+00:00

Thank you for that. That should get me what I need. Could you change the above one so I can tag that as the answer?

Something I did find though while doing this, since the application I want to allow for some reason they decided to have it install in c:\users(alias)\local I can't use the file path since that would only work for my account. I tried the option for Package family name, which says to go to https://aka.ms/AppXPackageNameFromPowerShell to get the package family name under the endpoint protection/edit rule, but the document is for Server 2012 or Windows 8, and Windows 10 PS7 gives me an error. It works as admin in PS5. There is another document that mentions for that command in PS7.1 you have to use compatibility layer, which I am not sure what that means. https://learn.microsoft.com/en-us/powershell/windows/module-compatibility?view=windowsserver2022-ps
Sign in to comment

Use comments to ask for clarification, additional information, or improvements to the question.
Simon Ren-MSFT 35,471 Reputation points Microsoft Vendor

2023-03-08T02:39:34.7866667+00:00

Hi,

Thanks for your reply. If the response is helpful, it's appreciated that you could click "Accept Answer", this will help other users to search for useful information more quickly.

About PowerShell question, it's recommended to post a thread in PowerShell forum to get accurate help, the link is as below.

https://learn.microsoft.com/en-us/answers/tags/426/powershell

Thanks for your time.

Best regards,

Simon
Please sign in to rate this answer.
Jon Mercer 996 Reputation points

2023-03-08T16:11:04.44+00:00

Will do that. Though now I created the rule, and it says it runs in InTune reports, but I can't find it in the firewall settings on the users computers.

Simon Ren-MSFT 35,471 Reputation points Microsoft Vendor

2023-03-09T07:50:10.06+00:00

Hi,

Thanks for your reply.

Per my experience, Windows Defender Firewall MMC does not display every Firewall rules, there are multiple stores like Local, GroupPolicy etc. Please check the following:

1,Please open Windows Defender Firewall MMC and look at the monitoring/firewall section, check if the rules arrived on the devices.

2,We can also check the registry and see if the rules have applied under

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\SharedAccess\Parameters\FirewallPolicy\Mdm\FirewallRules

A helpful article for your reference: The Windows Defender Firewall rises

Thanks for your time. Have a nice day!

Best regards,

Simon

Jon Mercer 996 Reputation points

2023-03-09T19:57:56.8166667+00:00

Thanks, I had to manually do it on one system, but building out another one and can check.

Just to ask though, the application I need to let through is installed for some reason in the c:\users\alias\appdate location. Would doing a path like this c:\users%username%\AppData\Local\Programs\t work or should I do it like this %username%\AppData\Local\Programs\t

(Edit) It showed up under my profile (admin permission) but not under the users (user permissions). It did give me the option to add it though, but when we do this at scale, that will be a hassle.

Simon Ren-MSFT 35,471 Reputation points Microsoft Vendor

2023-03-10T08:30:30.9066667+00:00

Hi,

Thanks for your reply.

This should be because Windows Defender Firewall MMC doesn't show mdm deployed rules. Similar thread for your reference:

Windows Firewall rules not appearing in GUI

Best regards,

Simon

Jon Mercer 996 Reputation points

2023-03-14T18:42:45.2033333+00:00

It looks like it is in the registry going off the registry path in the link you provided. Two questions I have though, should either of these file paths work, or should I do one or the other? I am leaning toward the second one, since the %username% should imply the c:\users part.

c:\users%username%\AppData\Local\Programs\t or %username%\AppData\Local\Programs\t

For something new, I am trying to edit the firewall rules and when I pick the rule to edit, it gives me this. Self-diagnostic says everything is fine. It is in https://endpoint.microsoft.com/?ref=AdminCenter#view/Microsoft_Intune_DeviceSettings/PolicySummaryReportBlade/policyId/41496013-2519-4682-85ef-71c961d1dcb9/policyName/Firewall%20Rules/policyJourneyState~/0/policyType~/77/isAssigned~/true
Sign in to comment

Use comments to ask for clarification, additional information, or improvements to the question.

Share via

Unable to create Defender Firewall Rules

2 additional answers

Your answer