Windows Server / DNS, DHCP & Server Networking
Read effective firewall rules for a specific server workload
A local rule can be overridden or supplemented by managed policy. Inspect the effective policy store before changing the server.
Environment and inputs: Windows Server 2022 / 2025 baseline · Windows PowerShell with the specified role or RSAT modules; native utilities are identified in the text. Use delegated administration and elevation only where required.
Start with this check
Confirm the host, shell and access role. Replace sample names, paths, domains and interfaces with approved targets. These are diagnostic commands; assess policy and workload impact before making changes.
Get-NetFirewallRule -PolicyStore ActiveStore -Enabled True | Select-Object DisplayName, Direction, Action, ProfileRead the result
The active store reports applicable rule objects. Port, address and application filters require their associated filter views for a complete interpretation.
Resolve and verify
Find the relevant workload's rules and compare direction, profiles and filters with the actual client path. Request a narrow managed correction from the policy owner.
Before changing production
Do not disable the entire firewall or add an unrestricted inbound rule to test one service.