Windows Security Log Event ID 5025

Operating Systems Windows 2008 R2 and 7
Windows 2012 R2 and 8.1
Windows 2016 and 10
Windows Server 2019 and 2022
 • Subcategory
 • Other System Events
Type Success
Corresponding events
in Windows 2003
and before

5025: The Windows Firewall Service has been stopped

On this page

This event is produced when the Windows Firewall Service (MpsSvc) is stopped via the Services MMC.

Free Security Log Resources by Randy

Supercharger Free Edition



Additional Resources