I have an strange issue with some of my internal users. Our virus scan product is set to automatically update when there is a new component. Some of my users are not updating automatically. Manual update works. I have narrowed down the issue to the Network Location profile, incoming firewall rules. under network and sharing, it looks like they are using the Domain Profile. When I got to the FW incoming rules on one of the machines that is not working. I see a rule for the virus product but the network location type for the rule is set to public. I can create a new rule with the correct port and network location type set to Domain. The user must logoff and log back on the push the updates but if I go back in, it seems that the rule that was create for the Domain is no longer there. I've logged in with the local Administrator account, created the Domain rule, rebooted the machine, logged off, logged in with the user account and no rule. What wouldn't the rule be saved? when these laptops were configured, I do not know what location profile was input (I would choose Work) when I configured the laptop but it appears as though Public may have been selected for the user's that are not updating in some cases. Another user seems to be connected to the Domain but yet the Location profile icon is the park bench which seems to indicate this is actually Public. Is there a way to delete the locations and let me set them again for the user? Any input you can provide would be appreciated. Thanks in advance for your time.

Hi, If it is in a domain, Windows Firewall can be managed with Group Policy: Using Group Policy Windows Firewall and IPsec Policy Deployment Step-by-Step Guide Please check the related Group Policy settings. Also see this: I Cannot Configure Windows Firewall with Advanced Security If the issue persists, please help collect the following information for further research: Collect the gpresult --------------------------- 1. Click "Start", type "CMD" (without quotation marks) in the "Start Search" box. Right click on the "CMD.exe" file, choose "Run as Administrator". 2. Copy and paste "gpresult /z > %userprofile%\desktop\gpresult.txt" (without quotation marks) in the "Open" box, and click "OK". 3. Please upload the gpresult.txt Regards, Sabrina TechNet Subscriber Support in forum. If you have any feedback on our support, please contact tngfb@microsoft.com This posting is provided "AS IS" with no warranties or guarantees, and confers no rights. |Please remember to click “Mark as Answer” on the post that helps you, and to click “Unmark as Answer” if a marked post does not actually answer your question. This can be beneficial to other community members reading the thread.

Hi, How are you? I would appreciate it if you could drop me a note to let me know the status of the issue. If you have any questions or concerns, please feel free to let me know. I am happy to be of further assistance. :) Regards, Sabrina TechNet Subscriber Support in forum. If you have any feedback on our support, please contact tngfb@microsoft.com This posting is provided "AS IS" with no warranties or guarantees, and confers no rights. |Please remember to click “Mark as Answer” on the post that helps you, and to click “Unmark as Answer” if a marked post does not actually answer your question. This can be beneficial to other community members reading the thread.

Sorry for the delay, it's taken me a while to have time to work on this issue again. thanks for the information but GPO is not exactly the answer I am looking for on why this is happening. I'm trying to understand why when creating a inbound rule in the FW settings under the user account or the local admin account, after a couple of reboots or a couple of days the rule disappears. This seems to be an issue with Windows 7. what would cause a rule to disappear on the laptop? there is only one location profile on this machine and the only two accounts I am logging in with are the user acount and the local admin account. thanks for reading.

I think I may have found what I was looking for. I found a registry key HKLM\SW\MS\WIN NT\CV\networklist\profile. i found the profile that seems to be causing a problem. I deleted the profile key, rebooted the laptop, logged in with the user account. it seems that the profile was re-created, checked the Windows firewall for the Domain rule on the virus scan service/port and it is there. I made the same change to another user having the problem so will re-check their machines today when they log in and see if all is still there. Although the user was connected to the domain and the profile showed domain, everything acted as though it was under the public profile. everytime i made a change to WF rule and added the Domain, it would disappear after a reboot. The first time a user account logs into Windows 7, you are asked which location profile you want to use, I think some of our laptops were set up with Public and some with Domain (or Work). I was trying to get information on how to delete this so that the system would ask which location profile to use. I don't know if this is the right answer, time will tell.

Hi, Thank you for your update. If you would like further assistance, please do not hesitate to let me know. It is my pleasure to help. Regards, Sabrina TechNet Subscriber Support in forum. If you have any feedback on our support, please contact tngfb@microsoft.comThis posting is provided "AS IS" with no warranties or guarantees, and confers no rights. |Please remember to click Mark as Answer on the post that helps you, and to click Unmark as Answer if a marked post does not actually answer your question. This can be beneficial to other community members reading the thread.