diff --git a/assets/win2016-eval.xml b/assets/win2016-eval.xml
index 836ef7a..06de1d4 100644
--- a/assets/win2016-eval.xml
+++ b/assets/win2016-eval.xml
@@ -376,7 +376,7 @@
           <CommandLine>reg.exe add "HKLM\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate\AU" /v "NoAutoUpdate" /t REG_DWORD /d 1 /f</CommandLine>
           <Description>Turn off Windows Update auto download</Description>
         </SynchronousCommand>
-        <SynchronousCommand>
+        <SynchronousCommand wcm:action="add">
           <Order>24</Order>
           <CommandLine>netsh advfirewall firewall set rule group="Network Discovery" new enable=Yes</CommandLine>
           <Description>Enable Network Discovery and File Sharing</Description>