Procedure and the consequence when enabling the built-in firewall profiles for Domain Controllers?

Hi @Thameur-BOURBITA ,
I assume after clicking the [Use recommended settings] button, the Firewall will be enabled automatically for all 3 profiles for my domain controllers.

and because nothing is blocking from the below command result, so it will be OK?

Get-NetFirewallRule : No matching MSFT_NetFirewallRule objects found by CIM query for instances of the root/standardcimv2/MSFT_NetFirewallRule class on the  CIM server: SELECT * FROM 
MSFT_NetFirewallRule  WHERE ((Enabled = 1)) AND ((Direction = 2)) AND ((Action = 4)). Verify query parameters and retry.
At line:2 char:5
+     Get-NetFirewallRule -Action Block -Enabled True -Direction Outbou ...
+     ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
    + CategoryInfo          : ObjectNotFound: (MSFT_NetFirewallRule:String) [Get-NetFirewallRule], CimJobException
    + FullyQualifiedErrorId : CmdletizationQuery_NotFound,Get-NetFirewallRule
 
Get-NetFirewallRule : No matching MSFT_NetFirewallRule objects found by CIM query for instances of the root/standardcimv2/MSFT_NetFirewallRule class on the  CIM server: SELECT * FROM 
MSFT_NetFirewallRule  WHERE ((Enabled = 1)) AND ((Direction = 1)) AND ((Action = 4)). Verify query parameters and retry.
At line:8 char:5
+     Get-NetFirewallRule -Action Block -Enabled True -Direction Inboun ...
+     ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
    + CategoryInfo          : ObjectNotFound: (MSFT_NetFirewallRule:String) [Get-NetFirewallRule], CimJobException
    + FullyQualifiedErrorId : CmdletizationQuery_NotFound,Get-NetFirewallRule

@EnterpriseArchitect

You should check if the default rules allows all required ports for domain controllers.

When you add new roles on windows server a firewall rule will be created automatically during the roles installation to allow all required ports.

You should check if all rules required for domain controllers alreday exist on your domain controller before enable recommened settings just to avoid any incident. You can also make network trace to check which ports used by the server. In a big and complex envirement this kind of action should be well prepared

Please don't forget to accept helpful answer