The Windows Firewall settings list some applications twice, and one of the duplicated listings has its check box selected and is grayed out

Cause: The domain Group Policy settings are selected for Windows Firewall, but the local computer Group Policy setting is not configured.

Solution: This is expected. Both the local Group Policy setting and the domain Group Policy settings are displayed in the Windows Firewall Exceptions tab.