windows-itpro-docs/windows/device-security/auditing/event-5029.md

title, description, ms.pagetype, ms.prod, ms.mktglfcycl, ms.sitesec, author

title	description	ms.pagetype	ms.prod	ms.mktglfcycl	ms.sitesec	author
5029(F) The Windows Firewall Service failed to initialize the driver. The service will continue to enforce the current policy. (Windows 10)	Describes security event 5029(F) The Windows Firewall Service failed to initialize the driver. The service will continue to enforce the current policy.	security	w10	deploy	library	Mir0sh

5029(F): The Windows Firewall Service failed to initialize the driver. The service will continue to enforce the current policy.

Applies to

• Windows 10
• Windows Server 2016

Windows logs an error if either the Windows Firewall service or its driver fails to start, or if they unexpectedly terminate. The error message indicates the cause of the service failure by including an error code in the text of the message.

There is no example of this event in this document.

Subcategory: Audit Other System Events

Event Schema:

The Windows Firewall service failed to initialize the driver. Windows Firewall will continue to enforce the current policy.

Error Code:%1

Required Server Roles: None.

Minimum OS Version: Windows Server 2008, Windows Vista.

Event Versions: 0.

Security Monitoring Recommendations

• This event can be a sign of software or operating system issues, or a sign of malicious activity that corrupted Windows Firewall Driver. We recommend monitoring this event and investigating the reason for the condition.