I ahve always disabled users windows firewall because of having VSE on every machine. Plus FW causes ping/RD issues on the LAN.
Is it wise or un-wise to not allow users to control their FW if they take their laptops home? More of a best practice question than anything.
You can disable the firewall on the domain but enable it when machines are not on the domain via Group Policy- domain and standard profile:
Retrieving data ...