We just finished forcing all Windows Firewall profiles to be enabled by policy, so why don't we now do an about face and try the opposite. Sometimes there is a business case for disabling the built-in Windows Firewall on all workstations. While I do not personally recommend this approach, perhaps you have a third-party firewall tool for which you forked over a lot of cash, and aren't ready to give it up yet. Multiple firewalling tools on the same machine sounds like it would be super safe, but in reality they get nasty with each other and cause all kinds of problems as they fail to coexist. So, let's pretend we now have the need to forcibly disable Windows Firewall on the client system—all three firewall profiles.

We do not need to walk through all the steps again, simply create a new GPO (or modify the existing one), and set all three firewall profiles to Off. Once this GPO filters down to the client machines, the Windows Firewall will be completely disabled on those workstations: