All Tweaks

Firewall & Security

Disable Unnecessary App Firewall Rules

Disable firewall rules for built-in Windows apps that may not be needed

Benefit

Reduces attack surface and network exposure for unused applications

Impact

medium

Commands (1)

$ErrorActionPreference='Continue'; $groupList = @(@{Primary='Connect'; Aliases=@('Connect','Connect','Conectar')},@{Primary='Contact Support'; Aliases=@('Contact Support','Contact Support','Soporte técnico')},@{Primary='Cortana'; Aliases=@('Cortana','Cortana')},@{Primary='DiagTrack'; Aliases=@('DiagTrack','DiagTrack')},@{Primary='Feedback Hub'; Aliases=@('Feedback Hub','Feedback Hub','Centro de comentarios','Hub de comentarios')},@{Primary='Microsoft Photos'; Aliases=@('Microsoft Photos','Microsoft Photos','Microsoft Fotos','Fotos')},@{Primary='OneNote'; Aliases=@('OneNote','OneNote')},@{Primary='Remote Assistance'; Aliases=@('Remote Assistance','Remote Assistance','Asistencia remota')},@{Primary='Windows Spotlight'; Aliases=@('Windows Spotlight','Windows Spotlight','Contenido destacado de Windows')}); foreach ($g in $groupList) { $found = $null; foreach ($alias in $g.Aliases) { $rules = Get-NetFirewallRule -Group $alias -ErrorAction SilentlyContinue; if (-not $rules) { $rules = Get-NetFirewallRule -ErrorAction SilentlyContinue | Where-Object { $_.DisplayGroup -eq $alias } } if ($rules) { $found = $rules; break } } if (-not $found) { Write-Host "[SKIP] $($g.Primary) - no matching rules on this system"; continue } $enabled = @($found | Where-Object { $_.Enabled -eq 'True' -or $_.Enabled -eq $true }); if ($enabled.Count -eq 0) { Write-Host "[OK] $($g.Primary) - already disabled ($($found.Count) rule(s))"; continue } try { $enabled | Disable-NetFirewallRule -ErrorAction Stop; Write-Host "[OK] $($g.Primary) - disabled $($enabled.Count) rule(s)" } catch { Write-Host "[ERR] $($g.Primary) - $($_.Exception.Message)" } }