Ratsnackbar  Freshman Member

Woops, sorry forgot the last link which shows how to deploy it with GPO's. Here you go: https://www.blumira.com/blog/windows-firewall-with-gpos

Because you have Active Directory available to you, what you might want to consider is to deploy custom Windows Firewall rules using Group Policy which blocks your internal subnets from communicating with external subnets and apply it only to the administrator accounts at login. Example of how to configure the firewall…