Windows Firewall information for the private profile is unexpectedly logged in the log file for the public profile on a Windows Vista-based computer

Hotfix Download Available
View and request hotfix downloads

View products that this article applies to.

SYMPTOMS

Consider the following scenario. In an Active Directory domain environment, you configure the Windows Firewall with Advanced Security Group Policy setting. Specifically, you specify three firewall log files for these three profiles, respectively. Then, you apply this Group Policy setting to a Windows Vista-based client computer. However, when the network profile is changed in this scenario, you notice that the firewall information for the private profile is unexpectedly logged in the log file for the public profile.

Back to the top

CAUSE

When the network profile is changed, the Windows Firewall service verifies whether the profile change generates any log-setting changes. This verification process should also include the file location. However, this process does not correctly compare the log file paths.

Back to the top

RESOLUTION

Hotfix information

A supported hotfix is available from Microsoft. However, this hotfix is intended to correct only the problem that is described in this article. Apply this hotfix only to systems that are experiencing this specific problem. This hotfix might receive additional testing. Therefore, if you are not severely affected by this problem, we recommend that you wait for the next software update that contains this hotfix.

If the hotfix is available for download, there is a "Hotfix download available" section at the top of this Knowledge Base article. If this section does not appear, contact Microsoft Customer Service and Support to obtain the hotfix.

Note If additional issues occur or if any troubleshooting is required, you might have to create a separate service request. The usual support costs will apply to additional support questions and issues that do not qualify for this specific hotfix. For a complete list of Microsoft Customer Service and Support telephone numbers or to create a separate service request, visit the following Microsoft Web site:

http://support.microsoft.com/contactus/?ws=support (http://support.microsoft.com/contactus/?ws=support)

Note The "Hotfix download available" form displays the languages for which the hotfix is available. If you do not see your language, it is because a hotfix is not available for that language.

Prerequisites

No prerequisites are required.

Restart requirement

You must restart the computer after you apply this hotfix.

Hotfix replacement information

This hotfix does not replace any other previously released hotfixes.

Registry information

To use this hotfix, you do not have to make any changes to the registry.

File information

The English version of this hotfix has the file attributes (or later file attributes) that are listed in the following table. The dates and times for these files are listed in Coordinated Universal Time (UTC). When you view the file information, it is converted to local time. To find the difference between UTC and local time, use the Time Zone tab in the Date and Time item in Control Panel.

Windows Vista, x86-based versions

Collapse this tableExpand this table

File name	File version	File size	Date	Time	Platform
Package_1_for_kb939929~31bf3856ad364e35~x86~~6.0.2.0.mum	Not Applicable	1,781	31-Jul-2007	15:37	Not Applicable
Package_2_for_kb939929~31bf3856ad364e35~x86~~6.0.2.0.mum	Not Applicable	1,997	31-Jul-2007	15:37	Not Applicable
Update.mum	Not Applicable	1,913	31-Jul-2007	15:37	Not Applicable
X86_5263689aff1dbe5210d46414b3642c62_31bf3856ad364e35_6.0.6000.20650_none_0feb8dfe7b1b660f.manifest	Not Applicable	695	31-Jul-2007	15:37	Not Applicable
X86_cbc7a6733fe0befda22840c01a0dfcda_31bf3856ad364e35_6.0.6000.20650_none_f52e3b284169f233.manifest	Not Applicable	691	31-Jul-2007	15:37	Not Applicable
X86_networking-mpssvc-svc-dir_31bf3856ad364e35_6.0.6000.20650_none_6a4fb35098b58244.manifest	Not Applicable	2,334	31-Jul-2007	15:37	Not Applicable
X86_networking-mpssvc-svc_31bf3856ad364e35_6.0.6000.20650_none_9881881be3fc5b00.manifest	Not Applicable	213,651	31-Jul-2007	15:37	Not Applicable
Mpssvc.dat	Not Applicable	49	30-Jul-2007	22:59	Not Applicable
Firewallapi.dll	6.0.6000.20650	392,192	31-Jul-2007	02:14	x86
Firewallapi.mof	Not Applicable	1,913	07-Jan-2007	05:30	Not Applicable
Icfupgd.dll	6.0.6000.20650	86,016	31-Jul-2007	02:15	x86
Mpsdrv.mof	Not Applicable	1,088	07-Jan-2007	05:29	Not Applicable
Mpsdrv.sys	6.0.6000.20650	63,488	31-Jul-2007	01:26	x86
Mpssvc.dll	6.0.6000.20650	396,288	31-Jul-2007	02:15	x86
Mpssvc.mof	Not Applicable	1,900	07-Jan-2007	05:30	Not Applicable
Wfapigp.dll	6.0.6000.20650	16,896	31-Jul-2007	02:16	x86
Wfapigp.mof	Not Applicable	1,083	07-Jan-2007	05:30	Not Applicable

Windows Vista, x64-based versions

Collapse this tableExpand this table

File name	File version	File size	Date	Time	Platform
Amd64_2c2194f092b1c5f5a52a65692dc4ec9f_31bf3856ad364e35_6.0.6000.20650_none_a142a7602a8ee055.manifest	Not Applicable	695	31-Jul-2007	15:37	Not Applicable
Amd64_cc2e80974f0cfa2143d2b8063b67040e_31bf3856ad364e35_6.0.6000.20650_none_de095dccd6b24890.manifest	Not Applicable	1,375	31-Jul-2007	15:37	Not Applicable
Amd64_networking-mpssvc-svc-dir_31bf3856ad364e35_6.0.6000.20650_none_c66e4ed45112f37a.manifest	Not Applicable	2,336	31-Jul-2007	15:41	Not Applicable
Amd64_networking-mpssvc-svc_31bf3856ad364e35_6.0.6000.20650_none_f4a0239f9c59cc36.manifest	Not Applicable	213,705	31-Jul-2007	15:41	Not Applicable
Package_1_for_kb939929~31bf3856ad364e35~amd64~~6.0.2.0.mum	Not Applicable	2,220	31-Jul-2007	15:37	Not Applicable
Package_2_for_kb939929~31bf3856ad364e35~amd64~~6.0.2.0.mum	Not Applicable	2,009	31-Jul-2007	15:37	Not Applicable
Update.mum	Not Applicable	1,925	31-Jul-2007	15:37	Not Applicable
Wow64_networking-mpssvc-svc_31bf3856ad364e35_6.0.6000.20650_none_fef4cdf1d0ba8e31.manifest	Not Applicable	197,312	31-Jul-2007	15:41	Not Applicable
Mpssvc.dat	Not Applicable	49	30-Jul-2007	22:59	Not Applicable
Firewallapi.dll	6.0.6000.20650	679,936	31-Jul-2007	03:20	x64
Firewallapi.mof	Not Applicable	1,913	07-Jan-2007	05:30	Not Applicable
Icfupgd.dll	6.0.6000.20650	106,496	31-Jul-2007	03:21	x64
Mpsdrv.mof	Not Applicable	1,088	07-Jan-2007	05:29	Not Applicable
Mpsdrv.sys	6.0.6000.20650	81,408	31-Jul-2007	01:52	x64
Mpssvc.dll	6.0.6000.20650	580,608	31-Jul-2007	03:21	x64
Mpssvc.mof	Not Applicable	1,900	07-Jan-2007	05:30	Not Applicable
Wfapigp.dll	6.0.6000.20650	19,968	31-Jul-2007	03:23	x64
Wfapigp.mof	Not Applicable	1,083	07-Jan-2007	05:30	Not Applicable
Firewallapi.dll	6.0.6000.20650	392,192	31-Jul-2007	02:14	x86
Firewallapi.mof	Not Applicable	1,913	07-Jan-2007	05:30	Not Applicable
Mpsdrv.mof	Not Applicable	1,088	07-Jan-2007	05:29	Not Applicable
Mpssvc.mof	Not Applicable	1,900	07-Jan-2007	05:30	Not Applicable
Wfapigp.dll	6.0.6000.20650	16,896	31-Jul-2007	02:16	x86
Wfapigp.mof	Not Applicable	1,083	07-Jan-2007	05:30	Not Applicable

Back to the top

STATUS

Microsoft has confirmed that this is a problem in the Microsoft products that are listed in the "Applies to" section.

Back to the top

MORE INFORMATION

A Windows Firewall profile contains a set of Windows Firewall settings. The profile specifies the behavior of the firewall when the computer is connected to a specific network location. In Windows Vista, three profiles are supported. These include the domain profile, the private profile, and the public profile. For example, when you connect to a network, you are prompted for the network type to which you are trying to connect. If you click Home, the private profile for Windows Firewall is used.

To determine which Windows Firewall profile is used, run the following command at a command prompt:

netsh advfirewall show currentprofile

To configure the Windows Firewall with Advanced Security Group Policy setting, follow these steps:

Click Start, Click Run, type gpedit.msc in the Open box, and then click OK.
Expand Computer Configuration, expand Windows Settings, expand Security Settings, and then expand Windows Firewall with Advanced Security.

For more information about Windows Firewall, visit the following Microsoft Web site:

http://technet2.microsoft.com/windowsserver/en/library/6490c9fc-6c06-4304-b61c-5577af1445d01033.mspx?mfr=true (http://technet2.microsoft.com/windowsserver/en/library/6490c9fc-6c06-4304-b61c-5577af1445d01033.mspx?mfr=true)

For more information, click the following article number to view the article in the Microsoft Knowledge Base:

824684 (http://support.microsoft.com/kb/824684/ ) Description of the standard terminology that is used to describe Microsoft software updates

Back to the top