Windows Firewall Can’t Change Some Settings? Fix

If you see “Windows Firewall can’t change some of your settings” when trying to turn on or modify firewall rules, it usually means your user account lacks administrator rights, a group policy is overriding local settings, or third-party security software has taken control of the firewall. You can often fix it by running Windows Security as an administrator, checking Group Policy, or temporarily disabling conflicting antivirus software.

What Causes This Error?

Windows Firewall is a security component that protects your PC from unauthorized network traffic. To prevent malware or unauthorized users from weakening your defenses, Microsoft restricts changes to firewall settings. The error message appears when your current attempt to modify those settings is blocked. Common triggers include:

Not running as administrator – Even if you have an admin account, Windows may require explicit elevation (right-click → “Run as administrator”).
Group Policy restrictions – On domain-joined computers, IT administrators can enforce firewall settings that cannot be changed locally.
Third-party antivirus/firewall – Many security suites disable the Windows Firewall and manage their own rules, which can cause conflicts.
Corrupted system files – Damaged Windows Firewall service files or registry entries can prevent changes.
Windows Defender Security Center issues – A glitch in the security app itself can block modifications.

How to Fix It: Step-by-Step

Try these solutions in order, as they move from simplest to more advanced.

Run Windows Security as Administrator – Open the Start menu, type “Windows Security,” right-click it, and choose “Run as administrator.” Navigate to Firewall & network protection and try changing settings again.
Check your user account type – Go to Settings → Accounts → Your info. If it says “Standard user,” you’ll need an administrator to change firewall settings. If you are an admin, ensure User Account Control (UAC) is not set to always notify, which can block some changes.
Restart the Windows Firewall service – Press Win+R, type services.msc, and press Enter. Find “Windows Defender Firewall,” right-click it, and select “Restart” (if available). If it’s not running, set its startup type to “Automatic” and start it.
Use the Command Prompt as Admin – Right-click Start, choose “Terminal (Admin)” or “Command Prompt (Admin).” Run the following commands one by one:
netsh advfirewall reset
netsh advfirewall set allprofiles state on
This resets firewall policies to default and turns it on for all profiles.
Check Group Policy – Press Win+R, type gpedit.msc (Pro/Enterprise only). Navigate to Computer Configuration → Administrative Templates → Network → Network Connections → Windows Defender Firewall. Look for policies like “Prohibit use of Windows Defender Firewall” – if enabled, set it to “Not Configured.”
Disable third-party security software temporarily – If you have another antivirus or firewall, disable its protection temporarily (you can re-enable it after). This often restores control to Windows Firewall.
Run System File Checker – Open Command Prompt as admin and run sfc /scannow. This repairs corrupted system files that might affect the firewall.
Create a new administrator account – If nothing works, create a new local admin account and try changing firewall settings from there.

When the Error Persists: Advanced Solutions

If the above steps don’t resolve the issue, the problem may be deeper. Here are advanced options:

Reset Windows Firewall via Registry – Back up your registry first. Navigate to HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters and delete the FirewallPolicy key. Restart your PC. This resets all firewall settings to defaults.
Use Windows Defender Offline scan – Malware can sometimes block firewall changes. Run a full offline scan to remove infections.
Perform a system restore – If the error started recently, restore your PC to a point before the problem began.
In-place upgrade repair – As a last resort, you can use the Windows Media Creation Tool to perform an in-place upgrade, which reinstalls Windows while keeping your files and apps.

Preventing Future Conflicts

Once you regain control of Windows Firewall, you can avoid this error by following good practices:

Keep only one security suite active. If you use third-party antivirus, let it manage the firewall, or disable its firewall component and use Windows Firewall.
Regularly update Windows and your security software.
Don’t disable UAC entirely; it helps prevent unauthorized changes.
If you’re on a work or school computer, contact your IT department—they may have intentionally locked firewall settings.

What About “Windows Firewall Can’t Change Some Settings” on Windows 10 vs 11?

The error message is virtually identical on Windows 10 and Windows 11, and the fixes are the same. The main difference is the interface: Windows 11 uses the “Windows Security” app with a slightly different layout, but the underlying settings and troubleshooting steps remain consistent. If you’re using Windows 10, you might also see this in the classic Control Panel firewall applet; the solutions above apply to both.

Frequently Asked Questions

Why does Windows Firewall say I don’t have permission even though I’m the administrator?

Even with an admin account, Windows uses User Account Control (UAC) to require explicit elevation for certain tasks. Right-click the app (like Windows Security or Command Prompt) and select “Run as administrator.” Also, some settings are controlled by Group Policy, which overrides local admin rights.

Can I just disable Windows Firewall to fix this?

Disabling the firewall is not recommended because it leaves your PC exposed to network threats. The error usually means you can’t change settings, not that the firewall is broken. Try the fixes above to regain control rather than turning off protection.

Will resetting Windows Firewall delete my custom rules?

Yes, running netsh advfirewall reset or deleting the FirewallPolicy registry key will remove all custom inbound/outbound rules and restore defaults. You’ll need to re-add any specific rules you created for apps or ports.

My third-party antivirus is disabled, but the error still appears. What now?

Even if the antivirus is disabled, its firewall driver may still be active. Uninstall the third-party security software completely (using its official removal tool) and then restart. After that, Windows Firewall should regain control.

Is this error a sign of malware?

It can be. Malware often tries to disable or block firewall changes to avoid detection. If you see this error unexpectedly and other fixes fail, run a full system scan with Windows Defender Offline or a reputable on-demand scanner.

Do I need to be on a domain to see Group Policy restrictions?

No, local Group Policy (gpedit.msc) exists on Windows Pro and Enterprise editions and can be configured by anyone with admin rights. However, on a domain, IT policies are more likely to be enforced remotely.

General steps for current mainstream versions; menus can differ by device and version. See the disclaimer or report an error.

More in this bed

The whole Tech How-To bed →