Stop programs from editing Windows Firewall

Page 1 of 2 12 LastLast

  1. Posts : 14
    Windows 10 64-bit
       #1

    Stop programs from editing Windows Firewall


    So I having a program (Warframe) that is able to modify the windows firewall as it wish, delete everything, add anything. And I don't want a program to modify the firewall however it want. I believe that it gain the ability to do so because I'm on a admin account. I haven't given the program admin, but just because I'm on a admin account is enough.

    I'm using Windows Firewall Control (WFC) and know that an old version can block every change that is not made by it. But was removed in newer version, and rather not use old version. But I must be able to block programs to change the firewall as it wish?
      My Computer


  2. Posts : 14,046
    Windows 11 Pro X64 22H2 22621.1848
       #2
      My Computers


  3. Posts : 14
    Windows 10 64-bit
    Thread Starter
       #3

    Ztruker said:
    I know I can block everything from changing the Firewall, but I rather not do that.

    I just don't want some random program be able to disable my firewall. Kinda makes the firewall pointless.
      My Computer


  4. Posts : 5,452
    Windows 11 Home
       #4

    Unfortunately it can not be done without 3rd party software, since MS has abandoned firewall development.

    Free Firewall can work as the second firewall, just allow/block.

    If you need more control, there is simplewall to handle/lock Windows Firewall.

    Windows Firewall Control was bought by Malwarebytes, but it still being updated.
    I like Sphinx Firewall Control, but free version is useless, it does not block Windows processes.
      My Computer


  5. Posts : 3,274
    Win10
       #5

    Has the functionality of Secure Profile and Secure Rules changed in the latest version, because in the latest Pdf help file it says ;

    Secure Prifile:
    In Windows, a software executed with administrative privileges can import a custom policy file and modify outbound and inbound filtering settings of the firewall, or can even disable Windows Firewall. Windows Firewall Control can prevent these external changes.

    Secure Rules:

    Windows Firewall Control is notified when a new firewall rule is added and can delete or disable any unauthorized rule that is being added by other programs.

    Do these not work as before ?
      My Computers


  6. Posts : 14
    Windows 10 64-bit
    Thread Starter
       #6

    @das10
    In 5.4.1.0 it could block programs from modifying the firewall, but that feature was removed as it could cause problems.
      My Computer


  7. Posts : 3,274
    Win10
       #7

    Ok, thanks for the clarification.
      My Computers


  8. Posts : 14
    Windows 10 64-bit
    Thread Starter
       #8

    So I'm still trying to block random programs from editing the firewall, and the creator of WFC said this,

    If you are using an administrator account, if you launch a software it will be executed usually under your administrator account and will have administrative privileges. In Windows any software that has administrative privileges can change Windows Firewall rules and settings. If you use WFC 5.3.1.0 you can block this software messing up with your firewall rules. Secure Rules from version 5.3.1.0 removes the permission in Windows Registry so that only WFC can add/modify/remove rules. Other programs, including Windows Store, the operating system, any software executed with admin privileges, etc, will fail changing your rules because they will not have the required permissions.
    So that means I can change the registry to only allow WFC to change it right?

    Does anyone know where I can do that?
      My Computer


  9. Posts : 3,274
    Win10
       #9

    Have you looked under : Main WFC Panel > Security Tab ? There should be 'tickable' options for Secure Boot, Secure Profile, and Secure Rules. ( See the latest Malwarebytes-WFC-User-Guide.pdf for more details ).
      My Computers


  10. Posts : 14
    Windows 10 64-bit
    Thread Starter
       #10

    das10 said:
    Have you looked under : Main WFC Panel > Security Tab ? There should be 'tickable' options for Secure Boot, Secure Profile, and Secure Rules. ( See the latest Malwarebytes-WFC-User-Guide.pdf for more details ).
    That's only for 5.3.1.0, the new one only blocks importing and disabling the firewall. Not deleting or adding any rules.

    Edit:
    I read profile and not rules. But Secure Rules will delete firewalls rules not created by WFC, but it will not block programs from deleting rules.

    Program A remove the old rules and add it own. I want to block program A from deleting firewall rules.
    So I could "fix" program A by setting rules as read only. But that seems to not exist. But I believe WFC can set what program can add/delete rules by changing the registry somehow.
    Last edited by frejoh466; 13 Apr 2019 at 04:38.
      My Computer


 

  Related Discussions
Our Sites
Site Links
About Us
Windows 10 Forums is an independent web site and has not been authorized, sponsored, or otherwise approved by Microsoft Corporation. "Windows 10" and related materials are trademarks of Microsoft Corp.

© Designer Media Ltd
All times are GMT -5. The time now is 12:03.
Find Us




Windows 10 Forums