Windows Firewall should allow or block inbound connections by default as appropriate for the Domain Profile.
[enabled/disabled]
(1) GPO: Computer Configuration\Windows Settings\Security Settings\Windows Firewall with Advanced Security\Windows Firewall with Advanced Security\Windows Firewall Properties\Domain Profile\Windows Firewall: Domain: Inbound connections
oval:org.secpod.oval:def:18997
SCAP Repo OVAL Definition
2014-05-29