PDA

View Full Version : Turning off auditing for Windows Firewall on XP SP2


Amihai Bareket
February 9th 05, 06:28 AM
I have a network where users run XP SP2.
The Windows Firewall is turned off through GPO, but there are still a lot of
failure audit events in the security log.
We don't want to turn off auditing for security events, but I don't want
Windows FW reporting an event on each listening application.

How can I turn off auditing just for the Windows Firewall?

Ron j
February 9th 05, 11:59 AM
Hello Amihai,
The logs you are speaking of are not controlled by Windows firewall.
They are turned on or off by the admin. You might find it a lot less trouble
not to log your failures. Unless you are trouble shooting , it can keep you
pretty busy just from having to stop working to clear the logs, ie ,
whenever the securitylog becomes full the system will lock up and only an
admin can log on to clear it. Hope this was some help. Best of luck to you.
Ron






"Amihai Bareket" wrote:

> I have a network where users run XP SP2.
> The Windows Firewall is turned off through GPO, but there are still a lot of
> failure audit events in the security log.
> We don't want to turn off auditing for security events, but I don't want
> Windows FW reporting an event on each listening application.
>
> How can I turn off auditing just for the Windows Firewall?
>
>
>

Gary Karasik
February 9th 05, 11:17 PM
I have the same issue as Amihai. Logging is not turned on, but the event
logs are full of these failure audits due to apps listening. How do I turn
them off?

GaryK

"Ron j" > wrote in message
...
>
> Hello Amihai,
> The logs you are speaking of are not controlled by Windows firewall.
> They are turned on or off by the admin. You might find it a lot less
> trouble
> not to log your failures. Unless you are trouble shooting , it can keep
> you
> pretty busy just from having to stop working to clear the logs, ie ,
> whenever the securitylog becomes full the system will lock up and only an
> admin can log on to clear it. Hope this was some help. Best of luck to
> you.
> Ron
>
>
>
>
>
>
> "Amihai Bareket" wrote:
>
>> I have a network where users run XP SP2.
>> The Windows Firewall is turned off through GPO, but there are still a lot
>> of
>> failure audit events in the security log.
>> We don't want to turn off auditing for security events, but I don't want
>> Windows FW reporting an event on each listening application.
>>
>> How can I turn off auditing just for the Windows Firewall?
>>
>>
>>

Google