Do the following if you want to turn on Windows Firewall and prevent local administrators from turning off Windows Firewall:
In the Windows Firewall: Protect all network connections properties dialog box, on the Settings tab, click Enabled, and then click OK.