Update windows/security/operating-system-security/network-security/windows-firewall/configure-the-windows-firewall-log.md

Co-authored-by: Paolo Matarazzo <74918781+paolomatarazzo@users.noreply.github.com>
This commit is contained in:
msarcletti
2023-10-09 15:34:27 +02:00
committed by GitHub
parent 2cf3cc7e1d
commit f5f96e8578

View File

@ -46,7 +46,7 @@ To complete these procedures, you must be a member of the Domain Administrators
Sometimes the log files are not created or no events are written the log files. This can be related to missing permissions for the Windows Defender Firewall Service (mpssvc) on the folder or the logfiles themselves. It can happen if you want to store the log files in a different folder or the permissions were removed or have not been set automatically.
If firewall logging is configured via Group Policy only, it also can happen that the `firewall` folder is not created in the default location `%windir%\System32\LogFiles\`. The same can happen if a custom path to a non-existant folder is configered via Group Policy. In this case, create the folder manually or via script and add the permissions for MPSSVC.
```
```PowerShell
New-Item -ItemType Directory -Path $env:windir\System32\LogFiles\Firewall
```