Windows Security Log Event ID 857
Operating Systems Windows XP
Windows Server 2003
CategoryPolicy Change
Type Success
Corresponding events
in Windows 2008
and Vista
 
Discussions on Event ID 857
Ask a question about this event

857: The Windows Firewall setting to allow remote administration, allowing port TCP 135 and DCOM/RPC, has changed

On this page

Windows logs this event when an administrator changes the local policy of the Windows Firewall or a group policy refresh results in setting the Windows Firewall setting to allow or disable remote administration.

  • Policy origin: Group Policy or Local Policy
  • Profile changed: Standard or Domain

New Settings:

  • Allow remote administration: Enabled or Disabled

Old Settings:

  • Allow remote administration: Enabled or Disabled

 

Top 10 Windows Security Events to Monitor

The Windows Firewall setting to allow remote administration, allowing port TCP 135 and DCOM/RPC, has changed.
 
Policy origin: Group Policy
Profile changed: Standard
New Setting:
     Allow remote administration: Enabled
Old Setting:
     Allow remote administration: Disabled

Keep me up-to-date on the Windows Security Log.
Email*:
*We will NOT share this



Training for the Windows Security Log