windows-firewall-endpoint-isolation Source: https://medium.com/@cryps1s/endpoint-isolation-with-the-windows-firewall-462a795f4cfb Just put that in a policy ... If you want to use that, you have to enter/modify your domain stuff (regarding the GPO-Secure-* rules)