Inconsistent workstation firewall lockdown
We're on CC3 and in the course of troubleshooting some internet problems, it has become apparent that on some workstations the Windows Firewall is controllable locally. On all the others, it is greyed out and only global policies apply.
Funnily enough these are the machine that had the internet problem. The problem was caused by the firewall not allowing RMSmartCache Client traffic through. It was solved on these particular workstations by logging in locally and adding a program exception. For all the other PCs we could solve it by applying a port exception in RMMC.
What is happening with these workstations?