You need to ensure that administrators can manage the Workgroup1 computers from the Workgroup2 computers…
You need to save the Windows Firewall with Advanced Security configuration settings from the reference computer