Windows Security Log Event ID 5025

Operating Systems	Windows 2008 R2 and 7 Windows 2012 R2 and 8.1 Windows 2016 and 10 Windows Server 2019 and 2022
Category • Subcategory	System • Other System Events
Type	Success
Corresponding events in Windows 2003 and before

5025: The Windows Firewall Service has been stopped

On this page

Description of this event
Field level details
Examples

This event is produced when the Windows Firewall Service (MpsSvc) is stopped via the Services MMC.

Free Security Log Resources by Randy

Supercharger Free Edition

Your entire Windows Event Collection environment on a single pane of glass.

Free.

Examples of 5025

The Windows Firewall Service has been stopped.

Top 10 Windows Security Events to Monitor

Free Tool for Windows Event Collection

Upcoming Webinars

Identifying the Tier 0 Assets in Your Active Directory Environment is Step #1 in ITDR

Additional Resources

Encyclopedia

•	Event IDs
•	All Event IDs
•	Audit Policy

Go To Event ID:

Security Log
Quick Reference
Chart
Download now!

User name:
Password:
	/ Forgot?
	Register

January 2025 Patch Tuesday	"Patch Tuesday - 8 Zero Days and 14 Critical " - sponsored by Supercharger

Home

Follow @randyfsmith

About | Newsletter | Contact

Ultimate IT Security is a division of Monterey Technology Group, Inc. ©2006-2025 Monterey Technology Group, Inc. All rights reserved.
Disclaimer: We do our best to provide quality information and expert commentary but use all information at your own risk. For complaints, please contact abuse@ultimatewindowssecurity.com.