don't configure windows firewall computer by computer

Don't configure Windows Firewall settings on a computer-by-computer basis

This can make your organization more accessible to attack because each computer has a different attack surface. When you configure Windows Firewall settings on a computer-by-computer basis, it becomes difficult to determine which computers are accessible to an attack by a worm or other malicious program that relies on unsolicited incoming traffic to spread.