Consider the following scenario:
1. You create a GPO, say, GPOv1; configured Several Inbound, Outbound and Connection Security Rules under Computer Configuration\Policies\Windows Settings\Security Settings\Windows Firewall with Advanced Security
2. On the DC, in the GPMC.msc console, under Group Policy Objects folder, right click GPOv1, Press Copy
3. Right click Group Policy Objects folder, Press Paste
4. There will be a Copy of GPOv1, rename it to GPOv2, Link it to same OU as GPOv1 linked to
5. Right click GPOv2 to Edit, locate the existing rules under Computer Configuration\Policies\Windows Settings\Security Settings\Windows Firewall with Advanced Security and rename them, modify them
6. Create several new rules under Inbound, Outbound and Connection Security Rules as well, Close the GP Editor window
7. On the client, run gpupdate /force
8. Confirm both GPOv1 and GPOv2 are both applied
In this scenario, You may expect a combination of all rules from both GPOv1 and GPOv2, however, only rules of GPOv1 and new rules of GPOv2 are displayed in client wf.msc console; those renamed rules under GPOv2(inherited from GPOv1) are missing.
If we go back to GPMc.msc, adjust the link order. Move the GPOv2 up.Run gpupdate /force on the client again, we will see only GPOv2 rules are applied then but those of GPOv1 ain't.
1. You create a GPO, say, GPOv1; configured Several Inbound, Outbound and Connection Security Rules under Computer Configuration\Policies\Windows Settings\Security Settings\Windows Firewall with Advanced Security
2. On the DC, in the GPMC.msc console, under Group Policy Objects folder, right click GPOv1, Press Copy
3. Right click Group Policy Objects folder, Press Paste
4. There will be a Copy of GPOv1, rename it to GPOv2, Link it to same OU as GPOv1 linked to
5. Right click GPOv2 to Edit, locate the existing rules under Computer Configuration\Policies\Windows Settings\Security Settings\Windows Firewall with Advanced Security and rename them, modify them
6. Create several new rules under Inbound, Outbound and Connection Security Rules as well, Close the GP Editor window
7. On the client, run gpupdate /force
8. Confirm both GPOv1 and GPOv2 are both applied
In this scenario, You may expect a combination of all rules from both GPOv1 and GPOv2, however, only rules of GPOv1 and new rules of GPOv2 are displayed in client wf.msc console; those renamed rules under GPOv2(inherited from GPOv1) are missing.
If we go back to GPMc.msc, adjust the link order. Move the GPOv2 up.Run gpupdate /force on the client again, we will see only GPOv2 rules are applied then but those of GPOv1 ain't.