# Firewall Configuration via GPO

On the Domain Controller:

1. Open **Group Policy Management**
2. Create new GPO: `SCCM Firewall Policy`
3. Edit the GPO:
    
    
    - Allow RDP:
        
        
        - Computer Config > Policies > Admin Templates > Windows Components > Remote Desktop Services > RD Session Host > Connection: Enable remote desktop
        - Security: Enable user authentication
    - Add inbound rules (ports: **80, 443, 1433, 4022, 8530, 8531, 3389**)
    - Add predefined rules:
        
        
        - File and Printer Sharing (inbound & outbound)
        - Windows Management Instrumentation (WMI)