The Group setting specifies the name of a FirewallGroup. The available rule groups differ by Windows® edition.

To see the rule groups available on a computer

  1. Run the wf.msc command. This opens the Windows Firewall with Advanced Security window.

  2. In the Windows Firewall window, select Inbound Rules. This shows each of the inbound rules.

  3. In the Actions window, select Filter by Group. The list of available groups is displayed.

In unattended installations, you can use a string for the Group setting—for example, "Remote Desktop." However, to specify a Group in an answer file that applies to multilingual unattended installations, you can reference an indirect string resource stored in the FirewallAPI.dll binary. For example, to enable Remote Desktop, use the following:

  Copy Code

For more information, see the MSDN topic: Firewall Groups.



Specifies the name of a Windows Firewall rule group. GroupName is a string. The default value is an empty string.

Parent Hierarchy

Valid Passes


Applies To

For a list of the supported Windows editions and architectures that this component supports, see Networking-MPSSVC-Svc.

XML Example

The following XML output shows how to set two Windows Firewall groups. The first group is set using the name of the group. The second is set using information from the @FirewallAPI.dll file.

  Copy Code
	<FirewallGroup wcm:action="add" wcm:keyValue="WindowsMediaPlayer">
	<Group>Windows Media Player</Group> 
	<FirewallGroup wcm:action="add" wcm:keyValue="RemoteDesktop">

See Also