The Windows Firewall Service Was Unable To Retrieve The Security Policy From The Local Storage The Service Will Continue Enforcing The Current Policy

The Windows Firewall Service was unable to retrieve the security policy from the local storage. The service will continue enforcing the current policy.

Configuration

query

EventID:5027

config

Key | Value — | — type | aggregation-v1 query | EventID:5027 streams | [5f74fe0891d2ba1b645adb8d] conditions | {expression:null} search_within_ms | 3600000 execute_every_ms | 3600000

SIEM Microsoft Events to Monitor

https://docs.

notes

Last modified December 31, 1969