Microsoft-Windows-Firewall

1 events across 1 channel

Event ID	Title	Channel
6400	An attempt to programmatically disable the Windows Defender Firewall using a …	System

Event ID 6400 — An attempt to programmatically disable the Windows Defender Firewall using a call to INetFwProfile.

Provider: Microsoft-Windows-Firewall
Channel: System
Opcode: Info

Message #

An attempt to programmatically disable the Windows Defender Firewall using a call to INetFwProfile.FirewallEnabled(FALSE) interface was rejected because this API is not supported on Windows Vista. This has most likely occurred due to an application which is incompatible with Windows Vista. Please contact the application's vendor to make sure you have a Windows Vista compatible application version.

Error Code:		E_NOTIMPL
Caller Process Name: %1
Process Id: %2
Publisher: %3

Fields #

Name	Description
`Caller_Process_Name` UnicodeString	—
`Process_Id` UInt32	—
`Publisher` UnicodeString	—
`CallerProcessName` UnicodeString	—
`ProcessId` UInt32	—

References #

Microsoft Learn https://learn.microsoft.com/en-us/windows/security/threat-protection/auditing/event-6400
Ultimate Windows Security https://www.ultimatewindowssecurity.com/securitylog/encyclopedia/event.aspx?eventid=6400