A Windows Filtering Platform filter has been changed. Subject: Security ID: S-1-5-19 Account Name: NT AUTHORITY\LOCAL SERVICE Process Information: Process ID: 596 Provider Information: ID: {DECC16CA-3F33-4346-BE1E-8FB4AE0F3D62} Name: Windows Firewall Change Information: Change Type: %%16384 Filter Information: ID: {E5DA26F0-73C2-4B17-9F97-CC2F32D28282} Name: Core Networking - Router Advertisement (ICMPv6-Out) Type: %%16388 Run-Time ID: 115961 Layer Information: ID: {4A72393B-319F-44BC-84C3-BA54DCB3B6B4} Name: ALE Connect v6 Layer Run-Time ID: 50 Callout Information: ID: {00000000-0000-0000-0000-000000000000} Name: - Additional Information: Weight: 5764606698132078592 Conditions: Condition ID: {d9ee00de-c1ef-4617-bfe3-ffd8f5a08957} Match value: In range Condition value: fe800000000000000000000000000000 - fe80000000000000ffffffffffffffff Condition ID: {b235ae9a-1d64-49b8-a44c-5ff3d9095045} Match value: Equal to Condition value: ff020000000000000000000000000001 Condition ID: {0c1ba1af-5765-453f-af22-a8f791ac775b} Match value: Equal to Condition value: 0x0086 Condition ID: {3971ef2b-623e-4f9a-8cb1-6e79b806b9a7} Match value: Equal to Condition value: 0x3a Filter Action: %%16390 Log Name: <Security> Source: <Microsoft-Windows-Security-Auditing> Record Number: <1103185> User: <N/A> MS Event ID: <5447> MS Event Category: <13573> (13573) MS Event Type: <8> (Security audit success) MS Insertion Strings: <['596', 'S-1-5-19', 'NT AUTHORITY\\LOCAL SERVICE', '{DECC16CA-3F33-4346-BE1E-8FB4AE0F3D62}', 'Windows Firewall', '%%16384', '{E5DA26F0-73C2-4B17-9F97-CC2F32D28282}', 'Core Networking - Router Advertisement (ICMPv6-Out)', '%%16388', '115961', '{4A72393B-319F-44BC-84C3-BA54DCB3B6B4}', 'ALE Connect v6 Layer', '50', '5764606698132078592', ' \tCondition ID:\t{d9ee00de-c1ef-4617-bfe3-ffd8f5a08957} \tMatch value:\tIn range \tCondition value:\tfe800000000000000000000000000000 - fe80000000000000ffffffffffffffff \tCondition ID:\t{b235ae9a-1d64-49b8-a44c-5ff3d9095045} \tMatch value:\tEqual to \tCondition value:\tff020000000000000000000000000001 \tCondition ID:\t{0c1ba1af-5765-453f-af22-a8f791ac775b} \tMatch value:\tEqual to \tCondition value:\t0x0086 \tCondition ID:\t{3971ef2b-623e-4f9a-8cb1-6e79b806b9a7} \tMatch value:\tEqual to \tCondition value:\t0x3a ', '%%16390', '{00000000-0000-0000-0000-000000000000}', '-']>

May need to turn off the auditing. http://technet.microsoft.com/en-us/library/dd772640(WS.10).aspx http://support.microsoft.com/kb/947226 Regards, Dave Patrick .... Microsoft Certified Professional Microsoft MVP [Windows]