How to open up ports on Windows Firewall via GPO

1. Open Group Policy Management on your domain controller
2. Create a new Group Policy Object and give it a descriptive name; i.e “Block64-GPO”
3. Edit the new GPO
4. Select Computer Configuration
5. Select Policies
6. Select Administrative Templates
7. Select Network
8. Select Network Connections
9. Select Windows Firewall
10. Select Domain Profile
11. Double click "Allow inbound file and printer sharing exception"
12. Click "Enabled"
13. Enter the Host Machine’s IP address under "Allow unsolicited incoming messages from these IP addresses:"
14. Click "Apply" and "OK"
15. Double click "Allow inbound remote administration exception"
16. Click "Enabled"
17. Enter the Host Machine’s IP address under "Allow unsolicited incoming messages from these IP addresses:"
18. Click "Apply" and "OK"
19. Double click "Allow ICMP exceptions"
20. Click "Enabled"
21. Select "Allow Inbound Echo Request"
22. Click "Apply" and "OK"
23. Ensure the GPO has been linked to the top-level of your domain if step 3 was not followed
24. Verify that Enforce has been selected on the GPO (Option can be found in Screenshot 3)
25. Wait for changes to propagate across your environment, devices should run GPO updates automatically; to test immediately you may run ` gpupdate /force` on a desired device

To enable the WinRM service for endpoint inventory, navigate to our WinRM GPO Documentation

Please see the screenshots below for more information: