The client msi install creates two rules that allow the service network access on all network profiles (domain, private, public):
"Dameware Mini Remote Control Service"
"Dameware Mini Remote Control Service GPO"
These rules are identical except that the first allows editing so that one can choose on which network profile access is allowed; the second displays "This rule has been applied by the system administrator and cannot be modified." This is on a manually installed client, not pushed or configured via domain policies. I would like to allow connections only on the domain profile but could not find where these settings are controlled in the msi builder app.