Improves description of DisplayGroup & Group parameters of *-NetFirewallRule cmdlets

docset/winserver2016-ps/NetSecurity/Copy-NetFirewallRule.md

@@ -431,24 +431,19 @@ Accept wildcard characters: False
 
 ### -DisplayGroup
 Specifies that only matching firewall rules of the indicated group association are copied.
-Wildcard characters are accepted. 
-The *Group* parameter specifies the source string for this parameter.
-If the value for this parameter is a localizable string, then the *Group* parameter contains an indirect string. 
-Rule groups can be used to organize rules by influence and allows batch rule modifications.
-Using the Set-NetFirewallRule cmdlet, if the group name is specified for a set of rules or sets, then all of the rules or sets in that group receive the same set of modifications.
-It is good practice to specify the *Group* parameter value with a universal and world-ready indirect @FirewallAPI name. 
-This parameter cannot be specified upon object creation using the New-NetFirewallRule cmdlet, but can be modified using dot-notation and the Set-NetFirewallRule cmdlet.
+The **Group** property specifies the source string for **DisplayGroup**.
+If the **Group** property contains an indirect string, then you should use a localized string, located at the address specified in the **Group** property, as a value for this parameter.
 
 ```yaml
 Type: String[]
 Parameter Sets: ByQuery
-Aliases: 
+Aliases:
 
 Required: False
 Position: Named
 Default value: None
 Accept pipeline input: False
-Accept wildcard characters: False
+Accept wildcard characters: True
 ```
 
 ### -DisplayName
@@ -547,13 +542,9 @@ Accept wildcard characters: False
 
 ### -Group
 Specifies that only matching firewall rules of the indicated group association are copied.
-Wildcard characters are accepted. 
-This parameter specifies the source string for the *DisplayGroup* parameter.
-If the *DisplayGroup* parameter value is a localizable string, then this parameter contains an indirect string.
-Rule groups can be used to organize rules by influence and allows batch rule modifications.
-Using the Set-NetFirewallRule cmdlets, if the group name is specified for a set of rules or sets, then all of the rules or sets in that group receive the same set of modifications.
-It is good practice to specify this parameter value with a universal and world-ready indirect @FirewallAPI name. 
-The *DisplayGroup* parameter cannot be specified upon object creation using the New-NetFirewallRule cmdlet, but can be modified using dot-notation and the Set-NetFirewallRule cmdlet.
+
+> [!TIP]
+> For most built-in rules, the group string is specified as an indirect string (for example, `@FirewallAPI.dll,-34002`). To retrieve such rules you should use those indirect strings in this parameter, rather their localized counterparts displayed in the UI. Alternatively, you can use the **DisplayGroup** parameter to filter by group display names.
 
 ```yaml
 Type: String[]
@@ -564,7 +555,7 @@ Required: False
 Position: Named
 Default value: None
 Accept pipeline input: False
-Accept wildcard characters: False
+Accept wildcard characters: True
 ```
 
 ### -InputObject

docset/winserver2016-ps/NetSecurity/Disable-NetFirewallRule.md

@@ -140,7 +140,7 @@ PS C:\>Disable-NetFirewallRule -Group "@FirewallAPI.dll,-28502"
 ```
 
 This example disables all of the File and Printer Sharing rules on the local computer.
-Use the universal and world-ready indirect string @FirewallAPI to specify the group.
+"@FirewallAPI.dll,-28502" is an indirect string that specifies a "File and Printer Sharing" group.
 
 ### EXAMPLE 3
 ```
@@ -427,24 +427,19 @@ Accept wildcard characters: False
 
 ### -DisplayGroup
 Specifies that only matching firewall rules of the indicated group association are disabled.
-Wildcard characters are accepted. 
-The *Group* parameter specifies the source string for this parameter.
-If the value for this parameter is a localizable string, then the *Group* parameter contains an indirect string.
-Rule groups can be used to organize rules by influence and allows batch rule modifications.
-Using the Set-NetFirewallRule cmdlet, if the group name is specified for a set of rules or sets, then all of the rules or sets in that group receive the same set of modifications.
-It is a good practice to specify the *Group* parameter value with a universal and world-ready indirect @FirewallAPI name. 
-This parameter cannot be specified upon object creation using the New-NetFirewallRule cmdlet, but can be modified using dot-notation and the Set-NetFirewallRule cmdlet.
+The **Group** property specifies the source string for **DisplayGroup**.
+If the **Group** property contains an indirect string, then you should use a localized string, located at the address specified in the **Group** property, as a value for this parameter.
 
 ```yaml
 Type: String[]
 Parameter Sets: ByQuery
-Aliases: 
+Aliases:
 
 Required: False
 Position: Named
 Default value: None
 Accept pipeline input: False
-Accept wildcard characters: False
+Accept wildcard characters: True
 ```
 
 ### -DisplayName
@@ -539,13 +534,9 @@ Accept wildcard characters: False
 
 ### -Group
 Specifies that only matching firewall rules of the indicated group association are disabled.
-Wildcard characters are accepted. 
-This parameter specifies the source string for the *DisplayGroup* parameter.
-If the *DisplayGroup* parameter value is a localizable string, then this parameter contains an indirect string.
-Rule groups can be used to organize rules by influence and allows batch rule modifications.
-Using the Set-NetFirewallRule cmdlets, if the group name is specified for a set of rules or sets, then all of the rules or sets in that group receive the same set of modifications.
-It is good practice to specify this parameter value with a universal and world-ready indirect @FirewallAPI name. 
-The *DisplayGroup* parameter cannot be specified upon object creation using the New-NetFirewallRule cmdlet, but can be modified using dot-notation and the Set-NetFirewallRule cmdlet.
+
+> [!TIP]
+> For most built-in rules, the group string is specified as an indirect string (for example, `@FirewallAPI.dll,-34002`). To retrieve such rules you should use those indirect strings in this parameter, rather their localized counterparts displayed in the UI. Alternatively, you can use the **DisplayGroup** parameter to filter by group display names.
 
 ```yaml
 Type: String[]
@@ -556,7 +547,7 @@ Required: False
 Position: Named
 Default value: None
 Accept pipeline input: False
-Accept wildcard characters: False
+Accept wildcard characters: True
 ```
 
 ### -InputObject

docset/winserver2016-ps/NetSecurity/Enable-NetFirewallRule.md

@@ -126,7 +126,7 @@ PS C:\>Enable-NetFirewallRule -Group "@FirewallAPI.dll,-28502"
 ```
 
 This example enables all of the File and Printer Sharing rules.
-Use the universal and world-ready indirect string @FirewallAPI to specify the group.
+"@FirewallAPI.dll,-28502" is an indirect string that specifies a "File and Printer Sharing" group.
 
 ### EXAMPLE 2
 ```
@@ -424,24 +424,19 @@ Accept wildcard characters: False
 
 ### -DisplayGroup
 Specifies that only matching firewall rules of the indicated group association are enabled.
-Wildcard characters are accepted. 
-The *Group* parameter specifies the source string for this parameter.
-If the value for this parameter is a localizable string, then the *Group* parameter contains an indirect string.
-Rule groups can be used to organize rules by influence and allows batch rule modifications.
-Using the Set-NetFirewallRule cmdlet, if the group name is specified for a set of rules or sets, then all of the rules or sets in that group receive the same set of modifications.
-It is good practice to specify the *Group* parameter value with a universal and world-ready indirect @FirewallAPI name. 
-This parameter cannot be specified upon object creation using the New-NetFirewallRule cmdlet, but can be modified using dot-notation and the Set-NetFirewallRule cmdlet.
+The **Group** property specifies the source string for **DisplayGroup**.
+If the **Group** property contains an indirect string, then you should use a localized string, located at the address specified in the **Group** property, as a value for this parameter.
 
 ```yaml
 Type: String[]
 Parameter Sets: ByQuery
-Aliases: 
+Aliases:
 
 Required: False
 Position: Named
 Default value: None
 Accept pipeline input: False
-Accept wildcard characters: False
+Accept wildcard characters: True
 ```
 
 ### -DisplayName
@@ -540,13 +535,9 @@ Accept wildcard characters: False
 
 ### -Group
 Specifies that only matching firewall rules of the indicated group association are enabled.
-Wildcard characters are accepted. 
-This parameter specifies the source string for the *DisplayGroup* parameter.
-If the *DisplayGroup* parameter value is a localizable string, then this parameter contains an indirect string.
-Rule groups can be used to organize rules by influence and allows batch rule modifications.
-Using the Set-NetFirewallRule cmdlets, if the group name is specified for a set of rules or sets, then all of the rules or sets in that group receive the same set of modifications.
-It is good practice to specify this parameter value with a universal and world-ready indirect @FirewallAPI name. 
-The *DisplayGroup* parameter cannot be specified upon object creation using the New-NetFirewallRule cmdlet, but can be modified using dot-notation and the Set-NetFirewallRule cmdlet.
+
+> [!TIP]
+> For most built-in rules, the group string is specified as an indirect string (for example, `@FirewallAPI.dll,-34002`). To retrieve such rules you should use those indirect strings in this parameter, rather their localized counterparts displayed in the UI. Alternatively, you can use the **DisplayGroup** parameter to filter by group display names.
 
 ```yaml
 Type: String[]
@@ -557,7 +548,7 @@ Required: False
 Position: Named
 Default value: None
 Accept pipeline input: False
-Accept wildcard characters: False
+Accept wildcard characters: True
 ```
 
 ### -InputObject

docset/winserver2016-ps/NetSecurity/Get-NetFirewallRule.md

@@ -393,13 +393,8 @@ Accept wildcard characters: False
 
 ### -DisplayGroup
 Specifies that only matching firewall rules of the indicated group association are retrieved.
-Wildcard characters are accepted. 
-The *Group* parameter specifies the source string for this parameter.
-If the value for this parameter is a localizable string, then the *Group* parameter contains an indirect string.
-Rule groups can be used to organize rules by influence and allows batch rule modifications.
-Using the Set-NetFirewallRule cmdlet, if the group name is specified for a set of rules or sets, then all of the rules or sets in that group receive the same set of modifications.
-It is good practice to specify the *Group* parameter value with a universal and world-ready indirect @FirewallAPI name. 
-This parameter cannot be specified upon object creation using the New-NetFirewallRule cmdlet, but can be modified using dot-notation and the Set-NetFirewallRule cmdlet.
+The **Group** property specifies the source string for **DisplayGroup**.
+If the **Group** property contains an indirect string, then you should use a localized string, located at the address specified in the **Group** property, as a value for this parameter.
 
 ```yaml
 Type: String[]
@@ -410,7 +405,7 @@ Required: False
 Position: Named
 Default value: None
 Accept pipeline input: False
-Accept wildcard characters: False
+Accept wildcard characters: True
 ```
 
 ### -DisplayName
@@ -509,13 +504,9 @@ Accept wildcard characters: False
 
 ### -Group
 Specifies that only matching firewall rules of the indicated group association are retrieved.
-Wildcard characters are accepted. 
-This parameter specifies the source string for the *DisplayGroup* parameter.
-If the *DisplayGroup* parameter value is a localizable string, then this parameter contains an indirect string.
-Rule groups can be used to organize rules by influence and allows batch rule modifications.
-Using the Set-NetFirewallRule cmdlet, if the group name is specified for a set of rules or sets, then all of the rules or sets in that group receive the same set of modifications.
-It is a good practice to specify this parameter value with a universal and world-ready indirect @FirewallAPI name. 
-The *DisplayGroup* parameter cannot be specified upon object creation using the New-NetFirewallRule cmdlet, but can be modified using dot-notation and the Set-NetFirewallRule cmdlet.
+
+> [!TIP]
+> For most built-in rules, the group string is specified as an indirect string (for example, `@FirewallAPI.dll,-34002`). To retrieve such rules you should use those indirect strings in this parameter, rather their localized counterparts displayed in the UI. Alternatively, you can use the **DisplayGroup** parameter to filter by group display names.
 
 ```yaml
 Type: String[]
@@ -526,7 +517,7 @@ Required: False
 Position: Named
 Default value: None
 Accept pipeline input: False
-Accept wildcard characters: False
+Accept wildcard characters: True
 ```
 
 ### -LocalOnlyMapping

docset/winserver2016-ps/NetSecurity/New-NetFirewallRule.md

@@ -379,14 +379,12 @@ Accept wildcard characters: False
 ```
 
 ### -Group
-Specifies that only matching firewall rules of the indicated group association are copied.
-Wildcard characters are accepted. 
-This parameter specifies the source string for the *DisplayGroup* parameter.
-If the *DisplayGroup* parameter value is a localizable string, then this parameter contains an indirect string.
-Rule groups can be used to organize rules by influence and allows batch rule modifications.
-Using the Set-NetFirewallRule cmdlets, if the group name is specified for a set of rules or sets, then all of the rules or sets in that group receive the same set of modifications.
-It is a good practice to specify this parameter value with a universal and world-ready indirect @FirewallAPI name. 
-The *DisplayGroup* parameter cannot be specified upon object creation using the New-NetFirewallRule cmdlet, but can be modified using dot-notation and the Set-NetFirewallRule cmdlet.
+Specifies a group for the rule. Rule groups can be used to organize rules and allows easy batch modifications. 
+It is a good practice to use an indirect string here, pointing to a localized string in a DLL (for example, `@FirewallAPI.dll,-34002`).
+The value of this property influences the value of the read-only **DisplayGroup** property:
+
+- When a rule's **Group** property contains an indirect string, the **DisplayGroup** property contains the string located at the specified index.
+- When a rule's **Group** property contains a regular string, the **DisplayGroup** property just returns that string.
 
 ```yaml
 Type: String

docset/winserver2016-ps/NetSecurity/Remove-NetFirewallRule.md

@@ -421,24 +421,19 @@ Accept wildcard characters: False
 
 ### -DisplayGroup
 Specifies that only matching firewall rules of the indicated group association are removed.
-Wildcard characters are accepted. 
-The *Group* parameter specifies the source string for this parameter.
-If the value for this parameter is a localizable string, then the *Group* parameter contains an indirect string.
-Rule groups can be used to organize rules by influence and allows batch rule modifications.
-Using the Set-NetFirewallRule cmdlet, if the group name is specified for a set of rules or sets, then all of the rules or sets in that group receive the same set of modifications.
-It is good practice to specify the *Group* parameter value with a universal and world-ready indirect @FirewallAPI name. 
-This parameter cannot be specified upon object creation using the New-NetFirewallRule cmdlet, but can be modified using dot-notation and the Set-NetFirewallRule cmdlet.
+The **Group** property specifies the source string for **DisplayGroup**.
+If the **Group** property contains an indirect string, then you should use a localized string, located at the address specified in the **Group** property, as a value for this parameter.
 
 ```yaml
 Type: String[]
 Parameter Sets: ByQuery
-Aliases: 
+Aliases:
 
 Required: False
 Position: Named
 Default value: None
 Accept pipeline input: False
-Accept wildcard characters: False
+Accept wildcard characters: True
 ```
 
 ### -DisplayName
@@ -537,13 +532,9 @@ Accept wildcard characters: False
 
 ### -Group
 Specifies that only matching firewall rules of the indicated group association are removed.
-Wildcard characters are accepted. 
-This parameter specifies the source string for the *DisplayGroup* parameter.
-If the *DisplayGroup* parameter value is a localizable string, then this parameter contains an indirect string.
-Rule groups can be used to organize rules by influence and allows batch rule modifications.
-Using the Set-NetFirewallRule cmdlets, if the group name is specified for a set of rules or sets, then all of the rules or sets in that group receive the same set of modifications.
-It is good practice to specify this parameter value with a universal and world-ready indirect @FirewallAPI name. 
-The *DisplayGroup* parameter cannot be specified upon object creation using the New-NetFirewallRule cmdlet, but can be modified using dot-notation and the Set-NetFirewallRule cmdlet.
+
+> [!TIP]
+> For most built-in rules, the group string is specified as an indirect string (for example, `@FirewallAPI.dll,-34002`). To retrieve such rules you should use those indirect strings in this parameter, rather their localized counterparts displayed in the UI. Alternatively, you can use the **DisplayGroup** parameter to filter by group display names.
 
 ```yaml
 Type: String[]
@@ -554,7 +545,7 @@ Required: False
 Position: Named
 Default value: None
 Accept pipeline input: False
-Accept wildcard characters: False
+Accept wildcard characters: True
 ```
 
 ### -InputObject

docset/winserver2016-ps/NetSecurity/Rename-NetFirewallRule.md

@@ -404,24 +404,19 @@ Accept wildcard characters: False
 
 ### -DisplayGroup
 Specifies that only matching firewall rules of the indicated group association are renamed.
-Wildcard characters are accepted. 
-The *Group* parameter specifies the source string for this parameter.
-If the value for this parameter is a localizable string, then the *Group* parameter contains an indirect string.
-Rule groups can be used to organize rules by influence and allows batch rule modifications.
-Using the Set-NetFirewallRule cmdlet, if the group name is specified for a set of rules or sets, then all of the rules or sets in that group receive the same set of modifications.
-It is a good practice to specify the *Group* parameter value with a universal and world-ready indirect @FirewallAPI name. 
-This parameter cannot be specified upon object creation using the New-NetFirewallRule cmdlet, but can be modified using dot-notation and the Set-NetFirewallRule cmdlet.
+The **Group** property specifies the source string for **DisplayGroup**.
+If the **Group** property contains an indirect string, then you should use a localized string, located at the address specified in the **Group** property, as a value for this parameter.
 
 ```yaml
 Type: String[]
 Parameter Sets: ByQuery
-Aliases: 
+Aliases:
 
 Required: False
 Position: Named
 Default value: None
 Accept pipeline input: False
-Accept wildcard characters: False
+Accept wildcard characters: True
 ```
 
 ### -DisplayName
@@ -520,13 +515,9 @@ Accept wildcard characters: False
 
 ### -Group
 Specifies that only matching firewall rules of the indicated group association are renamed.
-Wildcard characters are accepted. 
-This parameter specifies the source string for the *DisplayGroup* parameter.
-If the *DisplayGroup* parameter value is a localizable string, then this parameter contains an indirect string.
-Rule groups can be used to organize rules by influence and allows batch rule modifications.
-Using the Set-NetFirewallRule cmdlets, if the group name is specified for a set of rules or sets, then all of the rules or sets in that group receive the same set of modifications.
-It is good practice to specify this parameter value with a universal and world-ready indirect @FirewallAPI name. 
-The *DisplayGroup* parameter cannot be specified upon object creation using the New-NetFirewallRule cmdlet, but can be modified using dot-notation and the Set-NetFirewallRule cmdlet.
+
+> [!TIP]
+> For most built-in rules, the group string is specified as an indirect string (for example, `@FirewallAPI.dll,-34002`). To retrieve such rules you should use those indirect strings in this parameter, rather their localized counterparts displayed in the UI. Alternatively, you can use the **DisplayGroup** parameter to filter by group display names.
 
 ```yaml
 Type: String[]
@@ -537,7 +528,7 @@ Required: False
 Position: Named
 Default value: None
 Accept pipeline input: False
-Accept wildcard characters: False
+Accept wildcard characters: True
 ```
 
 ### -InputObject