Thanks. I'd read through this documentation, and can't find any way of obtaining the group policy (or indeed even of telling whether or not the local policy is being overridden). Given the existence of the NET_FW_POLICY_TYPE enum, I'd like to think it's possible, but I'm starting to think maybe it's not...