On the Specify the rules for a compliant device page of the Create Compliance Policy Wizard, you discover that the buttons to create, edit, and delete rules are unavailable (appear dimmed). This issue occurs after you upgrade from System Center Configuration Manager version 1602 to version 1606. Additionally, you cannot add a rule that uses the “Network firewall on” condition to an existing compliance policy.
Hotfix information for System Center Configuration Manager, version 1606This hotfix is available for installation in the Updates and Servicing node of the Configuration Manager console for version 1606.
If the service connection point is in offline mode, and this issue occurs after the update is imported, you have to re-import the update so that it is listed in the Configuration Manager console. Refer to Install Updates for System Center Configuration Manager for additional detail.