Windows Firewall Security Events When F/W Off

Ex_Brit · Nov 2, 2008

I noticed my Vista Ultimate SP1 Event Viewer occasionally throws up Audit Failures in Security for Windows Firewall, which I have turned off (use McAfee), so why is it throwing up these? It seems to be only at initial startup.
Text follows:

Log Name: Security
Source: Microsoft-Windows-Security-Auditing
Date: 02/11/2008 6:02:31 AM
Event ID: 5032
Task Category: Other System Events
Level: Information
Keywords: Audit Failure
User: N/A
Computer: R2D2
Description:
Windows Firewall was unable to notify the user that it blocked an application from accepting incoming connections on the network.
Error Code: 2
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
<System>
<Provider Name="Microsoft-Windows-Security-Auditing" Guid="{54849625-5478-4994-a5ba-3e3b0328c30d}" />
<EventID>5032</EventID>
<Version>0</Version>
<Level>0</Level>
<Task>12292</Task>
<Opcode>0</Opcode>
<Keywords>0x8010000000000000</Keywords>
<TimeCreated SystemTime="2008-11-02T11:02:31.882Z" />
<EventRecordID>10748</EventRecordID>
<Correlation />
<Execution ProcessID="960" ThreadID="1096" />
<Channel>Security</Channel>
<Computer>R2D2</Computer>
<Security />
</System>
<EventData>
<Data Name="ErrorCode">2</Data>
</EventData>
</Event>

I've since turned off those warnings...I hope, by going into the MMC console as per the Technet article on that error, but the question remains, why would WF throw up security failures when disabled?

Windows Firewall Security Events When F/W Off

Ex_Brit

If you're going through hell, keep going

My Computer

System One