Windows event ID 5449 - A Windows Filtering Platform provider context has been changed

Event ID: 

5449

Category: 

Policy Change

Subcategory: 

Filtering Platform Policy Change

Supported on: 

Windows Vista, Windows Server 2008

A Windows Filtering Platform provider context has been changed.

Subject:
Security ID: %2
Account Name: %3

Process Information:
Process ID: %1

Provider Information:
Provider ID: %4
Provider Name: %5

Change Information:
Change Type: %6

Provider Context:
ID: %7
Name: %8
Type: %9

Related content