How to lock Client Security or Server Security firewall profile so that a local user cannot change it?

Issue:

How to lock / force Client Security or Server Security firewall profile so that a local user cannot change it from the local user interface even if the user has administrator privileges? 

Resolution:

You can force a user to use a specific firewall profile by following these steps:

1. Log in to the Policy Manager Console
2. Select a host or policy domain from the Domain tree
3. Go to the Settings tab
4. Go to the Firewall settings page
5. In the General section, click on the Lock on the right side of Workstation host profile or Server host profile
6. Distribute the policy (Ctrl + D)

Once the policy has been taken into use, the firewall profile selection drop-down menu will be grayed out and a local user cannot change the profile from the one pre-selected by the admin. 

If you only want to hide specific firewall profiles from the local user interface, you can add them to the Hidden firewall profiles list:

1. Log in to the Policy Manager Console
2. Select a host or policy domain from the Domain tree
3. Go to the Settings tab
4. Go to the Firewall settings page
5. Scroll down to the Changing profiles section and click the Hide profiles from users link
6. Click Add
7. Select the profile you want to hide and click OK 
8. Click Close
9. Distribute the policy (Ctrl + D)

Now the hidden firewall profile isn't visible or shown to the local user.