Note
Access to this page requires authorization. You can try signing in or changing directories.
Access to this page requires authorization. You can try changing directories.
If the user interface for the feature shows the state of the firewall rules, it should use the INetFwPolicy2::get_IsRuleGroupCurrentlyEnabled method, which provides a Boolean response regardless of whether the firewall rule group is enabled locally or by a domain administrator through Group Policy.
It may be prudent to check whether modifying the local policy will have any impact on the resultant policy. The firewall "shields-up" feature or the domain administrator may be disallowing local policy exceptions, in which case any API calls would be fruitless. The INetFwPolicy2::get_LocalPolicyModifyState method indicates whether local policy changes will take effect. If they do not, the API provides a return code to indicate why the changes will not take effect. This provides application developers with sufficient information to assist the user with correcting the problem.