Default Domain Policy\Computer Configuration\Windows Settings\Security Settings\Windows Firewall with Advanced Security\Inbound Rules
Default Domain Policy\Computer Configuration\Administrative Templates\Network\Link-Layer Topology Discovery
Network discovery
Whether your computer can see (find) other computers and devices on the network and whether other computers on the network can see your computer.
Network discovery requires that the dnscache, fdrespub, ssdpsrv, and upnphost services are started, that the Windows Firewall exception for network discovery is enabled. By default, Windows 2008 R2 has SSDP Discovery service and uPnP Device Host service disabled. The Function Discovery Resource Publication service (fdrespub) has the startup state of manual. That is why the network discovery is always off. To turn the network discovery to on, you must start dnscache, ssdpsrv, fdrespub, and upnphost services.
Enable Network Discovery via Group Policy
Default Domain Policy\Computer Configuration\Windows Settings\Security Settings\Windows Firewall with Advanced Security\Inbound Rules
Default Domain Policy\Computer Configuration\Administrative Templates\Network\Link-Layer Topology Discovery
Restart all workstations.
Even though "Turn off network discovery" is selected, you still can see network devices.
