IPSEC PolicyAgent Service
On this page
This event varies depending on the OS.
General purpose event for IPSEC Policy Agent events. "IPSEC Policy Agent" becomes "IPSEC Services" in w3. Also this event switches categories to Policy Change.
If you assign an IP Security Policy in a GPO in AD, event ID 615's description specifies IPSEC PolicyAgent Service: Using the Active Directory Storage policy. If you assign the IPSec policy through the local GPO, event ID 615's description specifies IPSEC Policy-Agent Service: Using the Active Local Registry policy, as (i) there's no Active Directory Storage policy or (ii) the Active Directory Storage policy couldn't be applied successfully and there's no Cached policy. If Win2K encounters a problem applying the policy, the OS logs event ID 616 (IPSec policy agent encountered a potentially serious failure).
This is an all purpose event for Windows to log any events regarding IPSec. The 3 example events below show 3 consecutive events that were logged on a computer when applying group policy after a relavant group policy object's IPSecurity policy had been modified. The first 2 events identify the name of the IP Security Policy that was assigned.
IPSec Services: PAStore Engine loaded directory storage IPSec policy "Client (Respond Only)" on the machine.
IPSec Services: PAStore Engine applied Active Directory storage IPSec policy "Client (Respond Only)" on the machine.
IPSec Services: PAStore Engine polled for changes to the active IPSec policy and detected no changes.
IPSec Services: IPSec Services has shut down successfully. Stopping IPSec Services can be a potential security hazard to the machine.
IPSec Services: IPSec Services has started successfully.