Quoting chrisWhite
hmm, I think I would stipulate that if users are using a laptop and they regularly access public and non-corporate private networks they should leave the Windows 7 firewall on when not connected to their home or work networks.
Great article man, very thorough!
You can set firewall policy based upon 2 different conditions: Work/Home, and Public (covering the 3 different network types that MS has defined). On my systems, I have my home network defined as a Home network and have the firewall turned off for them (since I"m behind a hardware router), but for public networks, it's on.
Really thoughtful design on that setup, makes it a bit easier to get all the little features that require different holes in the firewalls to work properly.