Firewall Service API

Applies To: Windows Server 2008

Windows can detect when an application attempts to use an obsolete application programming interface (API) to disable the firewall.

When appropriate auditing events are enabled (https://go.microsoft.com/fwlink/?linkid=92666), Windows reports when applications attempt to use obsolete API calls.

Events

Event ID Source Message

5050

Microsoft-Windows-Security-Auditing

An attempt to programmatically disable the Windows Firewall using a call to INetFwProfile.FirewallEnabled(FALSE) interface was rejected because this API is not supported on Windows Vista. This has most likely occurred due to a program which is incompatible with Windows Vista. Please contact the program's manufacturer to make sure you have a Windows Vista compatible program version.

Error Code:%t%tE_NOTIMPL
Caller Process Name:%t%t%1
Process Id:%t%t%2
Publisher:%t%t%3

6400

Microsoft-Windows-Firewall

An attempt to programmatically disable the Windows Firewall using a call to INetFwProfile.FirewallEnabled(FALSE) interface was rejected because this API is not supported on Windows Vista. This has most likely occurred due to an application which is incompatible with Windows Vista. Please contact the application's vendor to make sure you have a Windows Vista compatible application version.

Error Code:%t%tE_NOTIMPL
Caller Process Name:%t%1
Process Id:%t%t%2
Publisher:%t%t%3

Windows Firewall Service

Windows Firewall with Advanced Security