Procedures Used in This Guide

• Applies to:

  ✅ Windows 10, ✅ Windows 11, ✅ Windows Server 2016, ✅ Windows Server 2019, ✅ Windows Server 2022

The procedures in this section appear in the checklists found earlier in this document. They should be used only in the context of the checklists in which they appear. They are presented here in alphabetical order.

• Add Production Devices to the Membership Group for a Zone

• Add Test Devices to the Membership Group for a Zone

• Assign Security Group Filters to the GPO

• Change Rules from Request to Require Mode

• Configure Authentication Methods

• Configure Data Protection (Quick Mode) Settings

• Configure Group Policy to Autoenroll and Deploy Certificates

• Configure Key Exchange (Main Mode) Settings

• Configure the Rules to Require Encryption

• Configure the Windows Defender Firewall with Advanced Security Log

• Configure the Workstation Authentication Certificate Template

• Configure Windows Defender Firewall with Advanced Security to Suppress Notifications When a Program Is Blocked

• Confirm That Certificates Are Deployed Correctly

• Copy a GPO to Create a New GPO

• Create a Group Account in Active Directory

• Create a Group Policy Object

• Create an Authentication Exemption List Rule

• Create an Authentication Request Rule

• Create an Inbound ICMP Rule

• Create an Inbound Port Rule

• Create an Inbound Program or Service Rule

• Create an Outbound Port Rule

• Create an Outbound Program or Service Rule

• Create Inbound Rules to Support RPC

• Create WMI Filters for the GPO

• Enable Predefined Inbound Rules

• Enable Predefined Outbound Rules

• Exempt ICMP from Authentication

• Link the GPO to the Domain

• Modify GPO Filters to Apply to a Different Zone or Version of Windows

• Open the Group Policy Management Console to IP Security Policies

• Open the Group Policy Management Console to Windows Defender Firewall with Advanced Security

• Open Windows Defender Firewall with Advanced Security

• Restrict Server Access to Members of a Group Only

• Turn on Windows Defender Firewall with Advanced Security and Configure Default Behavior

• Verify That Network Traffic Is Authenticated