I have functioning Powershell code that works to edit existing windows firewall rules under a GPO policy, but after we migrated to AGPM and having Controlled GPO policies, even after I successfully check-out a Controlled GPO i'm no longer able to use prior Powershell code to add new IP addresses to an existing Firewall in the Controlled GPO. I don't get any errors when submitting the FW changes, using cmdlets listed below.

I'm just using regular Get-NetFirewallRule, Get-NetFirewallAddressFilter and Set-NetFirewallRule cmdlets and using the -PolicyStore param, so nothing special.

What i'm confused is what changed with AGPM and controlled GPOs, that the prior code no longer works? Thank you.