Windows Firewall Settings not applying from Google MDM

[ThatBoringBloke]

Just in the testing stage on this but I can't seem to get Firewall settings to apply through Google. All other policies are applying, I just can't seem to get the Firewall rules to work.

 

Summary of the setup:-

Clean Windows install, Manual Chrome install, Manual GCPW install.

Device shows up in Admin Console and user has the appropriate licence.

Attempting to deploy software through PDQ Deploy to the PC works with the firewall turned off, just not with it turned on.

 

Attempting to apply the below settings as detailed in PDQ's documentation

 

Allow SMB inbound:-

 

 

 

<Rule Name="PDQ Deploy SMB Inbound (TCP 445)" Description="Allows inbound TCP 445 (SMB) traffic from PDQ Server for deployment" Group="" Action="Allow" Protocol="6" LocalPort="445" Direction="In" Enabled="true" InterfaceTypes="All" Profile="Domain,Private" RemoteAddress="PDQ Server Address"/>

 

ICMP:-

 

 

<Rule Name="PDQ Deploy ICMPv4 Inbound (Ping)" Description="Allows inbound ICMPv4 (Ping) traffic from PDQ Server for status check" Group="" Action="Allow" Protocol="1" Direction="In" Enabled="true" InterfaceTypes="All" Profile="Domain,Private" RemoteAddress="PDQ Server Address"/>

 

Do we have any pointers as to where I'm going wrong?

My little project will fail at the first step if I can't get the software to deploy without having to turn off the firewall. 

 

 

Edited November 14, 2025 by ThatBoringBloke

[TheHyperTechie]

Hi, 

 

Never used PDQ before, but I assume you host it locally?

 

GCPW, and Google in general can be a bit funny when you don't give it an IP address for example in RemoteAddress= try listing the IP address of the server instead of the DNS name.

 

More than likely won't be this, but I have seen it happen before in similar situations.

[ThatBoringBloke]

23 minutes ago, HyperTech said:

Hi, 

 

Never used PDQ before, but I assume you host it locally?

 

GCPW, and Google in general can be a bit funny when you don't give it an IP address for example in RemoteAddress= try listing the IP address of the server instead of the DNS name.

 

More than likely won't be this, but I have seen it happen before in similar situations.

Yep, PDQ is locally hosted, RemoteAddress is set to the server's IP. So you're right, it's not that! 😂

[ThatBoringBloke]

Just to bring this to a close (a bit late) I ended up having to create a Powershell script to open the ports up.