Allow an App Through Firewall Is Disabled in Windows 11/10

Sometimes, however, you may need to allow a trusted application through the firewall. For example, a game, printer software, remote desktop tool, file-sharing app, or business application might require firewall access to function properly. Normally, you can do this by opening the firewall settings and selecting Allow an app or feature through Windows Defender Firewall.

The problem occurs when the Allow another app, Change settings, or the entire firewall exception section appears grayed out or disabled. When this happens, you cannot add or modify firewall rules, even if you are the only user of the PC.

In this guide, you’ll learn several steps to restore access to firewall settings and allow apps through the firewall again.

Allow an App Through the Firewall Is Disabled in Windows 11/10

If the Allow an app through Windows Defender Firewall option is disabled or grayed out in Windows 11 or Windows 10, the issue is typically caused by missing administrator rights, a stopped firewall service, damaged Windows files, Group Policy restrictions, or third-party antivirus software taking control of firewall settings. You can fix the problem by running the firewall service, repairing system files, resetting firewall settings, checking Group Policy configurations, and temporarily disabling conflicting security software.

Follow the solutions below in order until the firewall settings become accessible again.

Step 1: Run Firewall Settings as an Administrator

One of the most common reasons firewall settings become unavailable is that Windows does not detect administrator privileges.

Windows protects important system settings from being modified by standard user accounts. If you are signed in with a non-administrator account, the Change settings button may appear grayed out.

Start by clicking the Start Menu and typing Control Panel. Open the Control Panel and navigate to System and Security. Select Windows Defender Firewall.

Look for the Change settings button near the top of the window. If it is available, click it and approve the User Account Control prompt.

If the button remains disabled, verify that your account has administrator rights. Open Settings, select Accounts, and then choose Your Info. Under your account name, Windows should display Administrator.

If it shows Standard User, sign in using an administrator account or contact the person who manages the computer.

After confirming administrator access, reopen the firewall settings and check whether the app exception options are available.

Step 2: Restart the Windows Defender Firewall Service

The firewall configuration window depends on several Windows services. If one of these services stops running, firewall options can become unavailable or grayed out.

Press Windows + R to open the Run dialog box. Type services.msc and press Enter.

The Services window will appear. Scroll through the list and locate Windows Defender Firewall.

Double-click the service to open its properties. Verify that the Startup Type is set to Automatic. If it is not, select Automatic from the drop-down menu.

Next, check the Service Status section. If the service is stopped, click Start.

Click Apply and then OK.

Now restart your computer and revisit the firewall settings. In many cases, restarting this service immediately restores access to firewall exceptions.

Step 3: Restart the Base Filtering Engine Service

The Base Filtering Engine (BFE) service is another critical component that works alongside Windows Defender Firewall.

This service manages filtering policies that determine how network traffic is handled. If it becomes disabled, firewall controls may stop functioning properly.

Open the Services window again by pressing Windows + R, typing services.msc, and pressing Enter.

Locate Base Filtering Engine in the list.

Double-click it and make sure the startup type is set to Automatic.

If the service is not running, click Start.

Save the changes and restart your PC.

Once Windows loads again, open the firewall settings and check whether the disabled options are now available.

Step 4: Remove Group Policy Restrictions

In some situations, firewall settings are intentionally restricted through Local Group Policy. This is especially common on workplace computers or systems that were previously connected to an organization.

Press Windows + R, type gpedit.msc, and press Enter.

When the Local Group Policy Editor opens, navigate to:

Computer Configuration > Administrative Templates > Network > Network Connections > Windows Defender Firewall

Check both the Domain Profile and Standard Profile folders.

Look for policies that prevent firewall configuration or restrict user access to firewall settings.

Double-click any suspicious policy and set it to Not Configured.

Apply the changes and restart your computer.

After Windows starts again, check whether the firewall options are still grayed out.

If you are using Windows Home Edition and cannot access the Group Policy Editor, proceed to the next solution.

Step 5: Reset Windows Defender Firewall Settings

Corrupted firewall rules can sometimes cause unusual behavior, including disabled configuration options.

Resetting the firewall restores all settings to their default state.

Open the Control Panel and go to System and Security. Select Windows Defender Firewall. In the left pane, click Restore Defaults.

Click the Restore Defaults button and confirm the action.

Windows will remove custom firewall rules and return everything to the original configuration.

Restart the computer after the reset completes.

Once the system boots up, revisit the firewall window and verify whether the app exception settings are working again.

Step 6: Repair Corrupted System Files

Damaged Windows system files can interfere with firewall functionality and prevent settings from loading correctly.

Fortunately, Windows includes built-in repair tools that can scan and fix these files automatically.

Open the Start Menu, type Command Prompt, and choose Run as administrator. In the Command Prompt window, enter the following command: SFC /scannow

Press Enter and wait for the scan to finish.

The process may take several minutes. Windows will automatically repair any detected integrity violations.

After the scan completes, restart your computer and check the firewall settings again.

Many users find that system file repairs resolve grayed-out Windows security features.

Step 7: Run DISM Commands

If the System File Checker cannot fix the issue, Microsoft’s Deployment Image Servicing and Management (DISM) tool may help.

Open Command Prompt as administrator again.

Enter the following commands one at a time and press Enter after each command:

DISM /Online /Cleanup-Image /CheckHealth
DISM /Online /Cleanup-Image /ScanHealth
DISM /Online /Cleanup-Image /RestoreHealth

Allow each command to complete before moving to the next one.

The repair process may take some time, depending on your computer and internet connection.

Once all commands finish successfully, restart Windows and test the firewall settings.

Step 8: Check for Third-Party Antivirus Interference

Many antivirus programs include their own firewall components. When installed, they may disable or take control of Windows Defender Firewall settings.

Examples include security suites that manage network protection independently from Windows.

Open your antivirus application and review its firewall or network protection settings.

Look for options that indicate the software is controlling firewall rules.

Temporarily disable the firewall component or pause the antivirus software for testing purposes.

Afterward, open Windows Defender Firewall and see if the disabled settings become available.

If the issue disappears, consider updating, reconfiguring, or reinstalling the antivirus software.

Step 9: Create a New Administrator Account

User profile corruption can occasionally prevent access to certain Windows features.

Creating a new administrator account helps determine whether the issue is account-related.

• Open Settings and select Accounts.
• Navigate to Family & Other Users.
• Choose Add Account and create a new local account.
• After creating the account, change its type to Administrator.

Sign out of your current profile and sign in using the newly created account.

Open Windows Defender Firewall and verify whether the settings are functioning normally.

If they are, your original profile may be damaged.

Step 10: Perform a Windows Security Reset

When all other methods fail, resetting Windows Security components can restore normal firewall behavior.

Open Windows Terminal (Admin) or PowerShell (Admin). Execute the following command:

Get-AppxPackage Microsoft.SecHealthUI -AllUsers | Reset-AppxPackage

Allow Windows to complete the process. Restart the computer and test the firewall settings once again.

This refreshes core Windows Security components without affecting personal files.

FAQs

Why is Allow an App Through Firewall grayed out?

This usually happens because the account lacks administrator permissions, firewall services are disabled, system files are corrupted, or a third-party security application has taken control of firewall settings.

How do I enable the Change Settings button in Windows Firewall?

Sign in using an administrator account and ensure that the Windows Defender Firewall service is running. If the issue persists, reset firewall settings and repair Windows system files.

Can antivirus software disable firewall settings?

Yes. Many third-party antivirus suites include their own firewall management features. These programs can disable or override Windows Defender Firewall controls.

Is it safe to reset Windows Firewall?

Yes. Resetting the firewall simply restores default firewall rules and settings. However, any custom rules you created previously will be removed.

Does Windows Home support firewall management?

Yes. Windows Home includes Windows Defender Firewall. However, some advanced administrative tools, such as Local Group Policy Editor, are not available by default.

Will updating Windows fix firewall issues?

In some cases, yes. Installing the latest Windows updates can repair bugs, security issues, and corrupted components that affect firewall functionality.