| Event Id | 4710 |
| Source | Microsoft-Windows-Security-Auditing |
| Description | IPsec Services was disabled. %1/ %2 |
| Event Information | According to Microsoft : Cause : This event is logged when IPsec Services was disabled. Resolution : 1.Examine the status code reported and then restart the service Windows logs an error if the IPsec Policy Agent service fails to start, or if it unexpectedly terminates. The error message indicates the cause of the service failure by including an error code in the text of the message. Review the information for the error code, enable the service if necessary, and then restart the Windows Firewall service. Note To perform these procedures, you must have membership in the localAdministrators group, or you must have been delegated the appropriate authority. 2.Review the error code To determine the meaning of the error code, open a command prompt, and then type net helpmsg errnum, where errnum is the error code displayed in the event message. Take the corrective action indicated by that error code. If the error indicates that the service fails to start because it is disabled, then you must enable the service and then attempt to start it. Enable the IPsec Policy Agent service To enable the IPsec Policy Agent service: 1.Start the Services MMC snap-in. ClickStart, then in theStart Search box, typeservices.msc and then press ENTER. 2.In theName column of the Services snap-in, right-clickIPsec Policy Agent, and then clickProperties. 3.In the IPsec Policy Agent Properties dialog box, click the list next toStartup type, and then clickAutomatic. 4.ClickStart to start the service. 5.If the attempt to start the service fails, then restart the computer. This forces all related and dependent services to restart. Start the IPsec Policy Agent service To start the IPsec Policy Agent service: 1.Restart the service. You can do this at a command prompt or from the Services Microsoft Management Console (MMC) snap-in. Do either of the following: a)Start an administrative command prompt. ClickStart, clickAll Programs, clickAccessories, right-clickCommand Prompt, and then click Run as administrator. At that command prompt, run the commandnet start policyagent. b)ClickStart, type services.msc in theStart Search box, and then press ENTER. In theName column of the Services snap-in, right-click IPsec Policy Agent, and then clickStart. 2.If the attempt to restart the service fails, then restart the computer. This forces all related and dependent services to restart. 3.If the error persists after the computer restarts, then the executable files for the driver or service might be corrupted, and the operating system must be reinstalled. |
| Reference Links | Event ID 4710 from Source Security |
Catch threats immediately
We work side-by-side with you to rapidly detect cyberthreats
and thwart attacks before they cause damage.