well, in our network, firewall is off and when the computer/laptop is not here, as in some other network, the firewall is on.
and that's all done via gpo.