Problem With Firewall Service on Windows 10 with lots of users login

[mc303]

Hello,

We have a long term problem with Windows 10 ( 1909, 20h2)

We use Dell optiplex 3010/3020 with i3 ,120 gb SSD, 4gb ram,Windows Defender with SCCM, windows 10 64bits 20h2 Education ( plan to migrate to 21h2 soon)

 

When a lots of pupils open a session on a pc ( 20 or more) , the process localservicenonetworkfirewal is using a lot of CPU at user login.

They have a normal local profil with redirected Documents folder.

 

We found a lots of rules on Windows firewall ( with Get-NetworkFirewallrule),sometimes more than 5 000

The best workaround is to reinstall the pc ( each 2 months for some ...)

 

We tried removing some users profiles manually (with the gui)and it's delete those multiples rules (Delprof2 not removing those rules when deleting profils and cause problem with modern app

 

We also use try the Cleanupprofiles GPO, but that not ideal because it as to be set to 7 days or less.

 

We also found the registry key "DeleteUserAppContainersOnLogoff" but it seems not working on windows 10 (tested with 20h2).

 

Have you other solutions ?

 

Thanks,

[DaveTheTech]

new firewall rules created for each user (microsoft.com)

The above thread had some info. Plus a link towards a page on Stack Overflow which could be ueful

firewall - speed up powershell's remove-netfirewallrule - Stack Overflow

 

Seems that a new rule gets created for each metro app for each user that logs on.

[psydii]

If you upgrade a workstation to 21H2 does the performance issue persist?

[free780]

You have to delete the firewall rules via powershell script as a scheduled task. For Server 2016 there was a registry fix for RDS hosts. Clearly Windows 10 was/is aimed at 1:1 devices.

[mc303]

new firewall rules created for each user (microsoft.com)

 

The above thread had some info. Plus a link towards a page on Stack Overflow which could be ueful

 

firewall - speed up powershell's remove-netfirewallrule - Stack Overflow

 

 

 

Seems that a new rule gets created for each metro app for each user that logs on.

 

 

 

Yes, that exactly the problem and info are still valid even it's a 2016.

 

 

scripts on stack overflow doesn't work anymore on recent windows version(20h2), we made a similar script but we need some more testing for this( Modern apps seems doesn't like scripts)

 

 

 

 

If you upgrade a workstation to 21H2 does the performance issue persist?

 

 

 

We have tested a little but the problem is same ( hundred of firewall rules with lots of CPU Usage).

 

 

 

You have to delete the firewall rules via powershell script as a scheduled task. For Server 2016 there was a registry fix for RDS hosts. Clearly Windows 10 was/is aimed at 1:1 devices.

 

 

Ok, so that's no official / supported way to address this issue. Scripts are good but it can mess up in a future update / upgrade.

 

 

we know about the registry fix ( we uesd it on our 2019 RDS), but it's not working on windows 10...

 

For now GPO/registry CleanupProfile seems work well even it's very slow... ( it's remove rules and appx in registry)