Windows Security Log Event ID 5025

Operating Systems Windows 2008 R2 and 7
Windows 2012 R2 and 8.1
Windows 2016 and 10
Windows Server 2019
 • Subcategory
 • Other System Events
Type Success
Corresponding events
in Windows 2003
and before
Discussions on Event ID 5025
Ask a question about this event

5025: The Windows Firewall Service has been stopped

On this page

This event is produced when the Windows Firewall Service (MpsSvc) is stopped via the Services MMC.

Free Security Log Resources by Randy

Supercharger Enterprise


Examples of 5025

The Windows Firewall Service has been stopped.

Keep me up-to-date on the Windows Security Log.
*We will NOT share this

Top 10 Windows Security Events to Monitor

Free Tool for Windows Event Collection


Additional Resources