If you enable a particular Rule Group, then the corresponding firewall rule will be added to the firewall configuration.Table 7.3 shows the Rule Groups defined within Server 2008. Windows Firewall has some default Rule Groups that correspond to MMCs. In some situations, it may be more appropriate to limit the number of MMCs that can connect. To enable Remote Administration in Windows Firewall, use the command netsh advfirewall firewall set rule group='Remote Administration' new enable=yes.This will enable remote management for any MMC snap-in. If you install a particular role on a Server Core machine, then the required ports to fulfill the role service will be opened.

If you want to enable the Windows Firewall, use the same syntax but substitute mode=disable with mode=enable. However, this should only be done in a test environment, not in a production environment. You can turn it off with the command netsh firewall set opmode mode=disable. The Windows Firewall is turned on by default on a Windows Server 2008 machine.

Windows core firewall management