Event ID: 853

A change has been made to Windows Firewall settings. Settings restored to factory defaults. 

A change has been made to Windows Firewall settings. Settings restored to factory defaults.

Lookup Audit Policy Configuration Settings

C:\> AuditPol.exe /get /category:"Policy Change"
How to enable Windows Auditing
Recommended Audit Policy

Operating Systems:
Windows 2003 Windows XP

Audit Category:
Policy Change

LEFT/RIGHT arrow keys for navigation

Back to List