Windows firewall not logging packets

I need to troubleshoot firewall but it doesn't generate logs.
I use firewall policy from local group policy and logging is enabled there.

things I tried so far:
change log file path to E:/logs/firewall_log.txt
create file manually

Do you mean here ?



If you changed the path from default it seems you need to check the authority of the containing folder as it says above (circled).

I tried moving log file to C:\Temp and it didn't work. The log files were created in C:\Temp but not written to.

Changed back to default %systemroot%\system32\LogFiles\Firewall\pfirewall.log and it was fine.

Granted Everyone full authority to C:\Temp and changed it back and it works fine.




Probably there is some lesser authority you can grant but I didn't look into it.

yes, that's where I set up logging too.
I gave access permission to "everyone" as you said but no log file created, switched back to default into system32... and still nothing.

I have both check boxes checked, to log dropped packets and successful connections.

I fixed the problem this way:

create folder %systemroot%\system32\LogFiles\Firewall\
add full control to the folder for user "NT Service\MPSSVC"

Thanks for that, I saw that the log files had mpssvc authority but couldn't figure out how to add it.