Event ID 4954
Group Policy settings for Windows Firewall were changed, and the new settings were applied.Group Policy settings for Windows Firewall were changed, and the new settings were applied.
Auditing:
Conditional
This event gets logged every time the local group policy is refreshed and does not necessarily indicate that firewall settings were changed.
Volume:
Low
Microsoft Documentation
Lookup Audit Policy Configuration Settings
C:\> AuditPol.exe /get /subcategory:"MPSSVC Rule-Level Policy Change"
LEFT/RIGHT arrow keys for navigation
Back to List