AV is always first. Depending on your sys and third party firewall ( Some third party firewalls might disable WF automatically others do not ) disable Windows firewall and install OA. Do your corresponding exclusions.