Windows Server 2008 Enterprise 64 bit GUI installation. Hyper V not enabled. Getting lots of entries in the security log as follows: The Windows Filtering Platform has blocked a bind to a local port.Application Information:Process ID: 1044Application Name: \device\harddiskvolume1\windows\system32\svchost.exeNetwork Information:Source Address: 0.0.0.0Source Port: 50298Protocol: 17Filter Information:Filter Run-Time ID: 0Layer Name: Resource AssignmentLayer Run-Time ID: 36Can someone tell me how to debug this to resolve?Thanks in advance

Hi,This issue may occur if the WFP audit is enabled. For more information about WFP audit, please refer to the article.http://msdn.microsoft.com/en-us/library/bb309058(VS.85).aspx I suggest you try to disable WFP auditing to troubleshoot this issue. Run the following command: auditpol /set /subcategory:"Filtering Platform Packet Drop" /success:disable /failure: disableauditpol /set /subcategory:"Filtering Platform Connection" /success: disable /failure: disableThank.

How does turning off the error fix the problem? All your command does it tell Auditing runtime to stop logging Success and Failure of those 2 sub categories. This doesnt fix the problem, it just ignores the errors.

If the Filter Run-Time ID field is 0, and its Vista/Win2008 (not R2), then its actually an audit bug. try http://support.microsoft.com/kb/969257