n my server i am getting lot of event id 4946. A change has been made to Windows Firewall exception list. A rule was added. i am getting this alert every day. can you help me to reslove this.
Regards, KArthick V
Asked
Active
Viewed 299 times
1 Answers
4
Most likely there are some Firewall rules defined via GPO. Everytime these GPOs are processed, the firewall rules are applied, resulting into the 4946 event in the Event Log.
In addition, the message of the event should include the names of the rules that have been added. Knowing the rules, it might be easier to trace what/why are adding them.
Tomas Dabasinskas
- 769
- 5
- 8