mirror of
https://github.com/MicrosoftDocs/windows-itpro-docs.git
synced 2025-05-13 13:57:22 +00:00
51 lines
1.8 KiB
Markdown
51 lines
1.8 KiB
Markdown
---
|
||
title: Turn on Windows Defender Firewall with Advanced Security and Configure Default Behavior (Windows 10)
|
||
description: Turn on Windows Defender Firewall with Advanced Security and Configure Default Behavior
|
||
ms.assetid: 3c3fe832-ea81-4227-98d7-857a3129db74
|
||
ms.prod: w10
|
||
ms.mktglfcycl: deploy
|
||
ms.sitesec: library
|
||
ms.pagetype: security
|
||
author: brianlic-msft
|
||
ms.date: 08/17/2017
|
||
---
|
||
|
||
# Turn on Windows Defender Firewall with Advanced Security and Configure Default Behavior
|
||
|
||
**Applies to**
|
||
- Windows 10
|
||
- Windows Server 2016
|
||
|
||
To enable Windows Defender Firewall with Advanced Security and configure its default behavior, use the Windows Defender Firewall with Advanced Security node in the Group Policy Management console.
|
||
|
||
**Administrative credentials**
|
||
|
||
To complete these procedures, you must be a member of the Domain Administrators group, or otherwise be delegated permissions to modify the GPOs.
|
||
|
||
## To enable Windows Defender Firewall and configure the default behavior
|
||
|
||
1. Open the Group Policy Management Console to [Windows Defender Firewall with Advanced Security](open-the-group-policy-management-console-to-windows-firewall-with-advanced-security.md).
|
||
|
||
2. In the details pane, in the **Overview** section, click **Windows Defender Firewall Properties**.
|
||
|
||
3. For each network location type (Domain, Private, Public), perform the following steps.
|
||
|
||
>**Note:** The steps shown here indicate the recommended values for a typical deployment. Use the settings that are appropriate for your firewall design.
|
||
|
||
1. Click the tab that corresponds to the network location type.
|
||
|
||
2. Change **Firewall state** to **On (recommended)**.
|
||
|
||
3. Change **Inbound connections** to **Block (default)**.
|
||
|
||
4. Change **Outbound connections** to **Allow (default)**.
|
||
|
||
|
||
|
||
|
||
|
||
|
||
|
||
|
||
|