Event ID: 5034

The Windows Firewall Driver was stopped. 

The Windows Firewall Driver was stopped.


This event generates when Windows Firewall driver (Windows Firewall Authorization Driver service) was stopped.

This event is NOT logged during the operating system shutdown process.

Auditing:     Always


Volume:     Low


Microsoft Documentation

Event ID - 5034


Lookup Audit Policy Configuration Settings

C:\> AuditPol.exe /get /subcategory:"Other System Events"
How to enable Windows Auditing
Recommended Audit Policy

Operating Systems:
Windows Vista Windows 2008 Windows 2008 R2 Windows 7 Windows 2012 Windows 2012 R2 Windows 8 Windows 8.1 Windows 10 Windows 2016 Windows 2019 Windows 11 Windows 2022

Tags:
Audit Success
Audit Category:
System

Audit Subcategory:
Other System Events

LEFT/RIGHT arrow keys for navigation

Back to List