This message was deleted.

a bit to easy 😉 It´s AVD, not using hdxteams.exe I use these rules, however they dont work:

New-NetFirewallRule -DisplayName "Teams.exe" -Program "%LocalAppData%\Microsoft\Teams\current\Teams.exe" -Profile Domain,Public,Private -Direction Inbound -Action Allow -Protocol TCP -EdgeTraversalPolicy DeferToUser
New-NetFirewallRule -DisplayName "Teams.exe" -Program "%LocalAppData%\Microsoft\Teams\current\Teams.exe" -Profile Domain,Public,Private -Direction Inbound -Action Allow -Protocol UDP -EdgeTraversalPolicy DeferToUser

From memory (weirdly) you need to add a Block rule for the same teams.exe for Public & Private. Only Allow on Domain profile.

also tried that. Created the rules:

New-NetFirewallRule -DisplayName "Teams.exe" -Program "%LocalAppData%\Microsoft\Teams\current\Teams.exe" -Profile Domain -Direction Inbound -Action Allow -Protocol TCP -EdgeTraversalPolicy DeferToUser
New-NetFirewallRule -DisplayName "Teams.exe" -Program "%LocalAppData%\Microsoft\Teams\current\Teams.exe" -Profile Domain -Direction Inbound -Action Allow -Protocol UDP -EdgeTraversalPolicy DeferToUser
New-NetFirewallRule -DisplayName "Teams.exe" -Program "%LocalAppData%\Microsoft\Teams\current\Teams.exe" -Profile Public,Private -Direction Inbound -Action Block -Protocol TCP -EdgeTraversalPolicy DeferToUser
New-NetFirewallRule -DisplayName "Teams.exe" -Program "%LocalAppData%\Microsoft\Teams\current\Teams.exe" -Profile Public,Private -Direction Inbound -Action Block -Protocol UDP -EdgeTraversalPolicy DeferToUser

However the prompt appears, and if the user clicks Cancel two deny rules are created:

Pretty sure you can't use user variables in this fashion with firewall rules (unless something changed)…I had a problem with this a while back and had to script it https://jkindon.com/conquering-per-user-firewall-rules-with-citrix-wem-privilege-elevation/

Correct, that stupid firewall prompt is madness as either way it creates a rule (cancel = block)