none
Windows Firewall Logs RRS feed

  • Frage

  • Hello,

    i have activated the windows firewall logging in the group policys and the Clients start logging the traffic among C:\Windows\System32\LogFiles\Firewall. But i cant open the text file. It appears an error with the foloing cintent: "C:\Windows\System32\LogFiles\Firewall\pfirewall.log You have no rights to open this file. Please contact the owner of this file or the system administrator." I am logged in with the domain administrator so i cant retrace this error. I just can open this file when i activate the local administrator and sign up the local administrator.

    How can I open this log files with domain administrator accounts?

    Mittwoch, 18. September 2019 17:43

Antworten

  • The problem you are describing seems to be a bug, please have a look at this thread for more information:

    No, it is NOT a bug, it is "works as designed" and results from UAC enabled... If you want to open the FW logs, you must run as administrator. Explorer does not, and if you simply double click, you will get the above error. Open an elevated command prompt, navigate to the log folder and open from the commandline. This WILL work. For the builtin admin, UAC is disabled by default, that's the reason it works there.

    Thanks to CSG for still providing meaningless and often wrong answers to common problems...


    Greetings/Grüße, Martin - https://mvp.microsoft.com/en-us/PublicProfile/5000017 Mal ein gutes Buch über GPOs lesen? - http://www.amazon.de/Windows-Server-2012--8-Gruppenrichtlinien/dp/3866456956 Good or bad GPOs? My blog - http://evilgpo.blogspot.com And if IT bothers me? Coke bottle design refreshment - http://sdrv.ms/14t35cq

    • Als Antwort markiert rthzrhrthzrth Donnerstag, 19. September 2019 17:29
    Donnerstag, 19. September 2019 16:01
    Beantworter

Alle Antworten

  • Hello rthzrhrthzrh,

    You've posted a question in the German Windows Server GPO forum page. You may want to re-post your question in the corresponding English forum.

    The problem you are describing seems to be a bug, please have a look at this thread for more information:

    https://social.technet.microsoft.com/Forums/en-US/b8ba16b4-8b7e-4c3a-a610-a67fed2e87ae/is-this-a-permissionbug-in-windows-firewall-logging?forum=win10itprosecurity

    Regards,

    Yavor

    Donnerstag, 19. September 2019 08:10
    Moderator
  • The problem you are describing seems to be a bug, please have a look at this thread for more information:

    No, it is NOT a bug, it is "works as designed" and results from UAC enabled... If you want to open the FW logs, you must run as administrator. Explorer does not, and if you simply double click, you will get the above error. Open an elevated command prompt, navigate to the log folder and open from the commandline. This WILL work. For the builtin admin, UAC is disabled by default, that's the reason it works there.

    Thanks to CSG for still providing meaningless and often wrong answers to common problems...


    Greetings/Grüße, Martin - https://mvp.microsoft.com/en-us/PublicProfile/5000017 Mal ein gutes Buch über GPOs lesen? - http://www.amazon.de/Windows-Server-2012--8-Gruppenrichtlinien/dp/3866456956 Good or bad GPOs? My blog - http://evilgpo.blogspot.com And if IT bothers me? Coke bottle design refreshment - http://sdrv.ms/14t35cq

    • Als Antwort markiert rthzrhrthzrth Donnerstag, 19. September 2019 17:29
    Donnerstag, 19. September 2019 16:01
    Beantworter
  • Thank you both for your fast answers. It works when i open the log files with the admin command prompt
    Donnerstag, 19. September 2019 17:31