| Event Id | 5479 |
| Source | Microsoft-Windows-Security-Auditing |
| Description | IPsec Services has been shut down successfully. The shutdown of IPsec Services can put the computer at greater risk of network attack or expose the computer to potential security risks. |
| Event Information | According to Microsoft : Cause : This event is logged when IPsec Services has been shut down successfully. Resolution : Restart the service If you manually stopped the IPsec Policy Agent service, you can use the following procedure to restart it. To restart the IPsec Policy Agent service: Note: To perform this procedure, you must have membership in the local Administrators group, or you must have been delegated the appropriate authority. 1.Restart the service. You can do this from a command prompt or from the Services Microsoft Management Console (MMC) snap-in. Do either of the following: a)Start an administrative command prompt. ClickStart, clickAll Programs, clickAccessories, right-clickCommand Prompt, and then click Run as administrator. At that command prompt, run the commandnet start policyagent. b)ClickStart, type services.msc in theStart Search box, and then press ENTER. In theName column of the Services snap-in, right-click IPsec Policy Agent, and then clickStart. 2.If the attempt to restart the service fails, then restart the computer. This forces all related and dependent services to restart. 3.If the error persists after the computer restarts, then the executable files for the driver or service might be corrupted, and the operating system must be reinstalled. |
| Reference Links | Event ID 5479 from Source Microsoft-Windows-Security-Auditing |
Catch threats immediately
We work side-by-side with you to rapidly detect cyberthreats
and thwart attacks before they cause damage.