Windows firewall not logging packets


  1. Posts : 19
    Windows 10 Pro x64
       #1

    Windows firewall not logging packets


    I need to troubleshoot firewall but it doesn't generate logs.
    I use firewall policy from local group policy and logging is enabled there.

    things I tried so far:
    change log file path to E:/logs/firewall_log.txt
    create file manually
      My Computer


  2. Posts : 5,478
    2004
       #2

    Do you mean here ?

    Windows firewall not logging packets-capture.png

    If you changed the path from default it seems you need to check the authority of the containing folder as it says above (circled).

    I tried moving log file to C:\Temp and it didn't work. The log files were created in C:\Temp but not written to.

    Changed back to default %systemroot%\system32\LogFiles\Firewall\pfirewall.log and it was fine.

    Granted Everyone full authority to C:\Temp and changed it back and it works fine.

    Windows firewall not logging packets-capture3.png
    Windows firewall not logging packets-capture2.png

    Probably there is some lesser authority you can grant but I didn't look into it.
      My Computer


  3. Posts : 19
    Windows 10 Pro x64
    Thread Starter
       #3

    yes, that's where I set up logging too.
    I gave access permission to "everyone" as you said but no log file created, switched back to default into system32... and still nothing.

    I have both check boxes checked, to log dropped packets and successful connections.
      My Computer


  4. Posts : 19
    Windows 10 Pro x64
    Thread Starter
       #4

    I fixed the problem this way:

    create folder %systemroot%\system32\LogFiles\Firewall\
    add full control to the folder for user "NT Service\MPSSVC"
      My Computer


  5. Posts : 5,478
    2004
       #5

    Thanks for that, I saw that the log files had mpssvc authority but couldn't figure out how to add it.
      My Computer


 

  Related Discussions
Our Sites
Site Links
About Us
Windows 10 Forums is an independent web site and has not been authorized, sponsored, or otherwise approved by Microsoft Corporation. "Windows 10" and related materials are trademarks of Microsoft Corp.

Designer Media Ltd
All times are GMT -5. The time now is 06:16.
Find Us




Windows 10 Forums