Vista - Windows Firewall Security Events When F/W Off

**Ex_Brit** · 11-02-2008

I noticed my Vista Ultimate SP1 Event Viewer occasionally throws up Audit Failures in Security for Windows Firewall, which I have turned off (use McAfee), so why is it throwing up these? It seems to be only at initial startup.
Text follows:

Quote:

Log Name: Security
Source: Microsoft-Windows-Security-Auditing
Date: 02/11/2008 6:02:31 AM
Event ID: 5032
Task Category: Other System Events
Level: Information
Keywords: Audit Failure
User: N/A
Computer: R2D2
Description:
Windows Firewall was unable to notify the user that it blocked an application from accepting incoming connections on the network.
Error Code: 2
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
<System>
<Provider Name="Microsoft-Windows-Security-Auditing" Guid="{54849625-5478-4994-a5ba-3e3b0328c30d}" />
<EventID>5032</EventID>
<Version>0</Version>
<Level>0</Level>
<Task>12292</Task>
<Opcode>0</Opcode>
<Keywords>0x8010000000000000</Keywords>
<TimeCreated SystemTime="2008-11-02T11:02:31.882Z" />
<EventRecordID>10748</EventRecordID>
<Correlation />
<Execution ProcessID="960" ThreadID="1096" />
<Channel>Security</Channel>
<Computer>R2D2</Computer>
<Security />
</System>
<EventData>
<Data Name="ErrorCode">2</Data>
</EventData>
</Event>

I've since turned off those warnings...I hope, by going into the MMC console as per the Technet article on that error, but the question remains, why would WF throw up security failures when disabled?

11-02-2008	#1 (permalink)
Ex_Brit Vista Ultimate SP2/Windows 7 Ultimate x64 524 posts	Windows Firewall Security Events When F/W Off I noticed my Vista Ultimate SP1 Event Viewer occasionally throws up Audit Failures in Security for Windows Firewall, which I have turned off (use McAfee), so why is it throwing up these? It seems to be only at initial startup. Text follows: Quote: Log Name: Security Source: Microsoft-Windows-Security-Auditing Date: 02/11/2008 6:02:31 AM Event ID: 5032 Task Category: Other System Events Level: Information Keywords: Audit Failure User: N/A Computer: R2D2 Description: Windows Firewall was unable to notify the user that it blocked an application from accepting incoming connections on the network. Error Code: 2 Event Xml: <Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event"> <System> <Provider Name="Microsoft-Windows-Security-Auditing" Guid="{54849625-5478-4994-a5ba-3e3b0328c30d}" /> <EventID>5032</EventID> <Version>0</Version> <Level>0</Level> <Task>12292</Task> <Opcode>0</Opcode> <Keywords>0x8010000000000000</Keywords> <TimeCreated SystemTime="2008-11-02T11:02:31.882Z" /> <EventRecordID>10748</EventRecordID> <Correlation /> <Execution ProcessID="960" ThreadID="1096" /> <Channel>Security</Channel> <Computer>R2D2</Computer> <Security /> </System> <EventData> <Data Name="ErrorCode">2</Data> </EventData> </Event> I've since turned off those warnings...I hope, by going into the MMC console as per the Technet article on that error, but the question remains, why would WF throw up security failures when disabled? Last edited by Ex_Brit; 11-02-2008 at 08:57 AM..
My System Specs

Similar Threads
Thread	Forum
Windows firewall security issue	.NET General
Windows Firewall with Advanced Security	Tutorials
Windows Firewall with Advanced Security question	System Security
Windows Security will not turn on the Firewall	Vista security
Windows Firewall - McAfee Security Center	Vista security