When you have installed WFC, did you check that checkbox named 'Start automatically at user logon' ? If you go to Main Panel from WFC, under the Options tab, do you have the 'Start automatically at user logon' checked ? After you restart your computer you should see both processes started. This is just my first impression on this topic.Ĭlick to expand.Windows Firewall has two parts: wfcs.exe (Windows service) and wfc.exe (the GUI, with the tray icon). If you have in mind another approach for this, please share it. As you can see, it is not something trivial even if it seems to be. This will make the rules to allow the traffic only in the local network. These rules must have the Remote Addresses field set to the keyword LocalSubnet. To achieve what you have called 'High Filtering - External Only' you should have the following setup: Medium Filtering profile, no custom rules made by the user (they must be disabled, but based on what ?), two new rules that will allow all inbound/oubound connections for all programs. When the user switches to a different profile, these two rules are deleted. When High Filtering profile is used in WFC two new rules are added, one that blocks all outbound connections for all programs and one that blocks all inbound connections for all programs. Block rules have always higher precedence in Windows Firewall than allow rules.

Click to expand.I don't think this is possible so easy.

Windows firewall control software