How to Enable or Disable Shield Up in Windows Firewall on Windows 11

How to Turn On or Off “Shield up” Mode in Windows Firewall

You can easily turn Windows Firewall Shield Up mode on or off using the Windows Security app. This feature adds an extra layer of protection by blocking all incoming connections to your computer, helping to keep it safe from unwanted access.

1. Open the Windows Security app.
   

   Alternatively, select Start > Settings > Update & Security > Windows Security > Open Windows Security.

   
   
2. In the Windows Security app, select “Firewall & network protection.”
   

   

   
   
3. Select the “Private network” profile.
   

   

   
   

4. Check the box next to “Block all incoming connections, including those in the list of allowed apps” to turn on “Shield up” mode.
   

   To turn it off, uncheck the box .

   
   

   

   
   

5. When prompted, click the Yes button to confirm the changes.
6. Close the Windows Security app when done.

Use Control Panel to Block All Incoming Connections

You can use the Control Panel to block all incoming connections, which is a good way to keep your computer safe. By going to System and Security, then Windows Defender Firewall, you can find the option to turn this protective feature on or off.

1. Open the 🎛️ Control Panel.
   

   Then, select System and Security > Windows Defender Firewall.

   
   
2. Click the “Turn Windows Firewall on or off” link on the Windows Defender Firewall settings page.
   

   

   
   

3. Check or uncheck the box next to “Block all incoming connections, including those in the list of allowed apps” to turn it on or off.
   

   

   
   

4. Close the 🎛️ Control Panel when you are done.

Turn On or Off Shield Up Mode Using the Windows Registry

You can turn Windows Firewall Shield Up mode on or off by making changes in the Windows Registry editor. This advanced method requires administrator permission, and involves navigating to a specific folder key to adjust the settings for this security feature.

Another way to enable or disable the “Shield up” feature is to use the Windows Registry editor.

1. Open the Windows Registry and navigate to the folder key path below:
   

   Computer\HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\Firewall\StandardProfile

   
   
2. Right-click StandardProfile > New > DWORD (32-bit) Value and name the new DWORD DoNotAllowExceptions.
3. Double-click DoNotAllowExceptions and change the value to 1 to block all incoming connections in the “Private network” profile.
   

   💡Tip

   Enter 0 to turn it off and allow connections.

   
   

   

   
   
4. To do the same for the “Public network” profile, use this registry path:
   

   Computer\HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\Firewall\PublicProfile

   
   

   Then block or unblock all incoming connections using the DoNotAllowExceptions value name and enter 1 or 0.

   
   
5. For the “Domain network” profile, use this path:
   

   Computer\HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\Firewall\DomainProfile

   
   

   Then block or unblock all incoming connections using the DoNotAllowExceptions value name and enter 1 or 0.
6. Save your changes and 🔄 restart your computer.

Summary

Turning Shield Up mode on or off in Windows Firewall is a simple way to increase your computer’s safety by blocking unwanted connections. You have several options to do this, including using the Windows Security app, the Control Panel, or the Windows Registry.

• Multiple ways to do it: You can enable or disable “Shield up” mode through the Windows Security app, 🎛️ Control Panel, or Windows Registry.
• Complete protection: When you turn on this mode, it blocks all incoming connections. It overrides any apps you’ve previously allowed.
• Easy to use: The steps are simple and take just a few minutes to complete.
• Different network types: You can apply these settings to Private, Public, or Domain networks based on what you need.
• Easy to change back: You can turn “Shield up” off anytime if you need to allow incoming connections again.

By following the steps in this article, you can keep your Windows 11 device safer and protect it from unauthorized access.

Reference: Microsoft