1. Check whether the high-risk ports are closed: netstat -na
2. Click [Start] -> [Administrative Tools] -> [Windows Firewall with Advanced Security], and follow the steps below to configure relevant policies.
.1 Click Inbound Rules, and click New Rule on the right.
.2 Click to select [Port], click Next.
.3 Enter the 135 and 445 port numbers that need to be closed in [Specific local port], and then click Next.
.4 Check Block the connection and click Next.
.5 After clicking Next, check all three options and click Next.
.6 Enter a name and tap Finish.