What causes the advanced firewall to automatically turn on?

佳宝 张 1 Reputation point
2020-10-10T07:37:02.517+00:00

OS:Windows Server 2012 R2
Description:
sometimes when using Remote desktop login OS, Advanced firewalls (Domain Profile Settings\Prova Profile Settings\Domain Profile Settings) is automatically enabled(State ON).

Question:
What causes the advanced firewall to automatically turn on?


Advanced firewalls default State is OFF:

netsh advfirewall show allprofiles

Domain Profile Settings:

State OFF
Firewall Policy BlockInbound,BlockOutbound
LocalFirewallRules N/A (GPO-store only)
LocalConSecRules N/A (GPO-store only)
InboundUserNotification Disable
RemoteManagement Not Configured
UnicastResponseToMulticast Enable

Logging:
LogAllowedConnections Disable
LogDroppedConnections Disable
FileName %systemroot%\system32\LogFiles\Firewall\pfirewall.log
MaxFileSize 4096

Private Profile Settings:

State OFF
Firewall Policy BlockInbound,BlockOutbound
LocalFirewallRules N/A (GPO-store only)
LocalConSecRules N/A (GPO-store only)
InboundUserNotification Disable
RemoteManagement Not Configured
UnicastResponseToMulticast Enable

Logging:
LogAllowedConnections Disable
LogDroppedConnections Disable
FileName %systemroot%\system32\LogFiles\Firewall\pfirewall.log
MaxFileSize 4096

Public Profile Settings:

State OFF
Firewall Policy BlockInbound,BlockOutbound
LocalFirewallRules N/A (GPO-store only)
LocalConSecRules N/A (GPO-store only)
InboundUserNotification Disable
RemoteManagement Not Configured
UnicastResponseToMulticast Enable

Logging:
LogAllowedConnections Disable
LogDroppedConnections Disable
FileName %systemroot%\system32\LogFiles\Firewall\pfirewall.log
MaxFileSize 4096

Ok.

Windows Server 2012
Windows Server 2012
A Microsoft server operating system that supports enterprise-level management, data storage, applications, and communications.
1,509 questions
0 comments No comments
{count} votes

2 answers

Sort by: Most helpful
  1. Dave Patrick 426K Reputation points MVP
    2020-10-10T12:50:27.667+00:00

    Might check for clues in
    Applications and Services logs\Microsoft\Windows\Windows Firewall with Advanced Security\Firewall log

    --please don't forget to Accept as answer if the reply is helpful--


  2. Gloria Gu 3,886 Reputation points
    2020-10-12T07:28:50.58+00:00

    @佳宝 张 Hi,

    Thank you for posting in Q&A!

    Since the specific reason why the advanced firewall to automatically turn on need to be analyzed through the logs.
    Disabling windows firewall services would cause disconnection with server . But If you need to turn off the Windows Firewall with Advanced Security (wf.msc) you may do this via administrator command prompt:

    netsh advfirewall set allprofiles state off

    31615-43.png

    ============================================

    If the Answer is helpful, please click "Accept Answer" and upvote it.
    Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.