On a Windows Vista-based client computer, Windows Firewall applies local program exceptions and port exceptions in the private profile and in the public profile. This behavior occurs even when the Windows Firewall standard profile settings indicate that these exceptions are not allowed.

This behavior may cause the following problems.

Problem 1
On the client computer, you may unexpectedly receive a Windows Firewall notification.

Problem 2
A local administrator can unblock a program even though the Windows Firewall: Allow local program exceptions Group Policy setting is disabled.

Problem 3
A local administrator can add program exceptions and port exceptions through the Windows Firewall Control Panel program even though the following Group Policy settings are disabled:

• Windows Firewall: Allow local program exceptions
• Windows Firewall: Allow local port exceptions