Event ID 852

A change has been made to Windows Firewall exception list. A rule was deleted

A change has been made to Windows Firewall exception list. A rule was deleted. 

Profile changed: %1 
Deleted Rule: 
    Rule Id: %2 
    Rule Name: %3

Lookup Audit Policy Configuration Settings


  C:\> AuditPol.exe /get /category:"Policy Change"

How to enable Windows Auditing

Recommended Audit Policy

Operating Systems:

Windows 2003 Windows XP

Audit Category:

Policy Change

Corresponding Events:

4946 4947 4948

LEFT/RIGHT arrow keys for navigation

Back to List