Stop programs from editing Windows Firewall

Page 1 of 2 12 LastLast

  1. Posts : 14
    Windows 10 64-bit
       #1

    Stop programs from editing Windows Firewall


    So I having a program (Warframe) that is able to modify the windows firewall as it wish, delete everything, add anything. And I don't want a program to modify the firewall however it want. I believe that it gain the ability to do so because I'm on a admin account. I haven't given the program admin, but just because I'm on a admin account is enough.

    I'm using Windows Firewall Control (WFC) and know that an old version can block every change that is not made by it. But was removed in newer version, and rather not use old version. But I must be able to block programs to change the firewall as it wish?
      My Computer

  2. Ztruker's Avatar
    Posts : 10,257
    Windows 10 Pro X64 1909 18363.815
       #2
      My Computers


  3. Posts : 14
    Windows 10 64-bit
    Thread Starter
       #3

    Ztruker said:
    I know I can block everything from changing the Firewall, but I rather not do that.

    I just don't want some random program be able to disable my firewall. Kinda makes the firewall pointless.
      My Computer

  4. TairikuOkami's Avatar
    Posts : 4,138
    Home 2004 x64 10.0.19041.264
       #4

    Unfortunately it can not be done without 3rd party software, since MS has abandoned firewall development.

    Free Firewall can work as the second firewall, just allow/block.

    If you need more control, there is simplewall to handle/lock Windows Firewall.

    Windows Firewall Control was bought by Malwarebytes, but it still being updated.
    I like Sphinx Firewall Control, but free version is useless, it does not block Windows processes.
      My Computer

  5. das10's Avatar
    Posts : 1,969
    Win 10 pro 1909
       #5

    Has the functionality of Secure Profile and Secure Rules changed in the latest version, because in the latest Pdf help file it says ;

    Secure Prifile:
    In Windows, a software executed with administrative privileges can import a custom policy file and modify outbound and inbound filtering settings of the firewall, or can even disable Windows Firewall. Windows Firewall Control can prevent these external changes.

    Secure Rules:

    Windows Firewall Control is notified when a new firewall rule is added and can delete or disable any unauthorized rule that is being added by other programs.

    Do these not work as before ?
      My Computer


  6. Posts : 14
    Windows 10 64-bit
    Thread Starter
       #6

    @das10
    In 5.4.1.0 it could block programs from modifying the firewall, but that feature was removed as it could cause problems.
      My Computer


  7. das10's Avatar
    Posts : 1,969
    Win 10 pro 1909
       #7

    Ok, thanks for the clarification.
      My Computer


  8. Posts : 14
    Windows 10 64-bit
    Thread Starter
       #8

    So I'm still trying to block random programs from editing the firewall, and the creator of WFC said this,

    If you are using an administrator account, if you launch a software it will be executed usually under your administrator account and will have administrative privileges. In Windows any software that has administrative privileges can change Windows Firewall rules and settings. If you use WFC 5.3.1.0 you can block this software messing up with your firewall rules. Secure Rules from version 5.3.1.0 removes the permission in Windows Registry so that only WFC can add/modify/remove rules. Other programs, including Windows Store, the operating system, any software executed with admin privileges, etc, will fail changing your rules because they will not have the required permissions.
    So that means I can change the registry to only allow WFC to change it right?

    Does anyone know where I can do that?
      My Computer

  9. das10's Avatar
    Posts : 1,969
    Win 10 pro 1909
       #9

    Have you looked under : Main WFC Panel > Security Tab ? There should be 'tickable' options for Secure Boot, Secure Profile, and Secure Rules. ( See the latest Malwarebytes-WFC-User-Guide.pdf for more details ).
      My Computer


  10. Posts : 14
    Windows 10 64-bit
    Thread Starter
       #10

    das10 said:
    Have you looked under : Main WFC Panel > Security Tab ? There should be 'tickable' options for Secure Boot, Secure Profile, and Secure Rules. ( See the latest Malwarebytes-WFC-User-Guide.pdf for more details ).
    That's only for 5.3.1.0, the new one only blocks importing and disabling the firewall. Not deleting or adding any rules.

    Edit:
    I read profile and not rules. But Secure Rules will delete firewalls rules not created by WFC, but it will not block programs from deleting rules.

    Program A remove the old rules and add it own. I want to block program A from deleting firewall rules.
    So I could "fix" program A by setting rules as read only. But that seems to not exist. But I believe WFC can set what program can add/delete rules by changing the registry somehow.
    Last edited by frejoh466; 13 Apr 2019 at 04:38.
      My Computer


 

Related Threads
Our Sites
Site Links
About Us
Windows 10 Forums is an independent web site and has not been authorized, sponsored, or otherwise approved by Microsoft Corporation. "Windows 10" and related materials are trademarks of Microsoft Corp.

Designer Media Ltd
All times are GMT -5. The time now is 13:15.
Find Us




Windows 10 Forums