For some reason, the network firewall profile in our AD Domain environment that is effective for our workstations is the "Standard" profile. I tried disabling the standard profile with the netsh command unsuccessfully. The standard setting works, but, as I understand, the "Domain" profile settings should be used. The standard should only be effective if the workstation is removed from the Domain.
The Standard profile and Domain profile firewall settings serve two different purposes. The Standard profile is meant to be used when users aren't authenticating to a Domain Controller. The Domain profile
meant for when they are authenticating to a Domain Controller. Therefore, you can have, say, a stronger set of restrictions while out of the office as opposed to when they're in the office.
Additional Expert Help:
Be sure to check our Answer FAQ for more expert advice.
For faster answers, visit ITKnowledge Exchange.
Dig Deeper on Windows systems and network management