At the end of June, Microsoft released Windows 11 setup and recovery updates (KB5062233/ KB5060843/ KB5062197/ KB5061090) following the month's non-security previews for 24H2 (KB5060829) and 23H2/22H2 (KB5060826).
Today, the company has confirmed that KB5060829 is causing some troubles for systems in regards to Firewall. Microsoft says that IT admins and system admins may notice a recurring error entry in the Security event log related to Windows Firewall With Advanced Security wherein the Event Viewer records event ID 2042, labeled “Config Read Failed” with the message “More data is available” each time the device restarts.
Although logged as an error, the tech giant notes that this entry does not indicate a malfunction of the Windows Firewall and as such it can be "safely ignored and disregarded," and that Windows Firewall continues to enforce rules and filter network traffic normally as intended. Microsoft assures that "there is no impact to Windows processes associated to this event."
IT support teams and even general users often rely on error-level event entries to detect misconfiguration and other issues (Microsoft itself recommends you do so), so unexpected log noise can trigger unnecessary alerts like these.
Interestingly, in this case, the logged event stems from an upcoming feature as Microsoft notes that the "event is related to a feature that is currently under development and not fully implemented." No additional information regarding this new feature has been provided at this time.
For those who prefer a cleaner log, administrators can filter out event 2042 in Event Viewer or via PowerShell. In Event Viewer, create a custom view filtering out ID 2042 under the Security log and in PowerShell, use the Get-WinEvent -FilterHashtable parameter.
Microsoft says that the team is currently working on a fix and an update will be released later. However, no ETA has been shared today. You can find the issue entry here on Microsoft's official Windows Health dashboard website.
0 Comments - Add comment