The Windows Firewall can swap the set of predefined firewall rules (ports blocked or allowed) it uses based on the type of network to which it is connected. The different sets of rules are called “profiles,” and there is one each for Domain networks, Private networks, and Public networks.
Domain networks are detected automatically (by Network Location Awareness service) by the presence of a domain controller from the client computer’s domain.
When NLA starts to detect the network location, the machine will contact the domain controller via port 389. If this detection successful, it will get the domain firewall profile and we cannot change the network location profile. If the domain was not found or process failed, NLA will let you to determine which firewall profile will be used, private or public.
For a non-domain networks, you get to choose between Private (typically a home or small office) and Public (such as coffee shop or public library Wi-Fi hotspots). By default, a network is assigned to the Public profile. You can assign a network to the Private profile when you know and trust the users and computers on that network.
A network connection can only have one active profile at a time so there is no presidence to consider.
