Firewall Management Logon Script
If you do not have suitable firewall management tools or can not use group policies for whatever reason, this option is available.
By means of the Logon-Sricpts a number of settings can be made at system startup. Either the commands for controlling the firewall are entered in the logon.bat or the same one starts another batch file, however this is implemented.
netsh advfirewall set allprofiles state on
netsh advfirewall firewall add rule name = "Block Port 135" dir = in action = block protocol = TCP localport = 135