<div>
are you a local admin of your server or a domain admin? you need admin rights to enable any kind of audit
</div>


are you a local admin of your server or a domain admin? you need admin rights to enable any kind of audit

<div>
Enable audit for next time. <a href="http://social.technet.microsoft.com/Forums/ar-SA/winservergen/thread/7e6d6f95-74cc-48f2-9d17-fae367efd976" rel="ugc nofollow">http://social.technet.microsoft.com/Forums/ar-SA/winservergen/thread/7e6d6f95-74cc-48f2-9d17-fae367efd976</a>
</div>


Enable audit for next time. http://social.technet.microsoft.com/Forums/ar-SA/winservergen/thread/7e6d6f95-74cc-48f2-9d17-fae367efd976 [http://social.technet.microsoft.com/Forums/ar-SA/winservergen/thread/7e6d6f95-74cc-48f2-9d17-fae367efd976]

<div>
I'm an admin. &nbsp;I'll turn on auditing and go from there.
</div>


I'm an admin.  I'll turn on auditing and go from there.

<div>
<div class="content wysiwyg-content">
Hi All, &nbsp;<br />
<br />
Troubleshooting an issue where the windows server firewall turned on or blocked a port. &nbsp;I am trying to track down when this change was made and who/what might be turning it on. &nbsp;Either GPO or a Admin is playing a dirty game which is causing my application to be blocked. &nbsp; <br />
<br />
How would i be able to track by using the windows even logs. &nbsp;1) who/what is turning it on 2)when this action is being performed. &nbsp;<br />
<br />
Sorry for being Derp :p , probably an easy question but it's the first time i've had to do this. &nbsp;<br />
<br />
Thanks for all your help, <br />
<br />
-Mav
</div>
</div>


Hi All,  

Troubleshooting an issue where the windows server firewall turned on or blocked a port.  I am trying to track down when this change was made and who/what might be turning it on.  Either GPO or a Admin is playing a dirty game which is causing my application to be blocked.   

How would i be able to track by using the windows even logs.  1) who/what is turning it on 2)when this action is being performed.  

Sorry for being Derp :p , probably an easy question but it's the first time i've had to do this.  

Thanks for all your help, 

-Mav

Identify Who Turned On Windows Firewall

Windows Server 2008 and Windows Server 2008 R2, based on the Microsoft Vista codebase, is the last 32-bit server operating system released by Microsoft. It has a number of versions, including including Foundation, Standard, Enterprise, Datacenter, Web, HPC Server, Itanium and Storage; new features included server core installation and Hyper-V.

Windows Server 2008

Windows Server 2003 was based on Windows XP and was released in four editions: Web, Standard, Enterprise and Datacenter. It also had derivative versions for clusters, storage and Microsoft’s Small Business Server. Important upgrades included integrating Internet Information Services (IIS), improvements to Active Directory (AD) and Group Policy (GP), and the migration to Automated System Recovery (ASR).

Windows Server 2003

The Microsoft Server topic includes all of the legacy versions of the operating system, including the Windows NT 3.1, NT 3.5, NT 4.0 and Windows 2000 and Windows Home Server versions.