If you see the message Security or firewall might be blocking the connection following completion of Windows Network Diagnostics to determine what’s causing internet or network connection issues on ...

Problem: customer wants us to disallow any network connections unless we're on the domain network or VPN (which windows NLA correctly identifies as a domain network) Exceptions: we will need to allow ...

No root required either.