Microsoft's recent release of Windows 11 update KB5060829 has introduced a notable issue concerning the Windows Firewall. Users have reported encountering a recurring error in the Security event log, specifically Event ID 2042 labeled "Config Read Failed" with the message "More data is available." This error appears each time the device restarts.
Despite the error log entry, Microsoft has clarified that this does not indicate a malfunction of the Windows Firewall. The firewall continues to enforce rules and filter network traffic as intended. The company assures that there is no impact on Windows processes associated with this event. The logged event is related to a feature currently under development and not fully implemented. No additional information regarding this new feature has been provided at this time.
For those who prefer a cleaner event log, administrators can filter out Event ID 2042 in Event Viewer or via PowerShell. In Event Viewer, create a custom view filtering out ID 2042 under the Security log. In PowerShell, use the
Get-WinEvent -FilterHashtable parameter. Microsoft is working on a fix, with an update to be released later, though no estimated time of arrival has been shared.This issue has been discussed in various forums, with users noting the persistence of the error across different builds. Some have observed that the error appears in the System event log under Event ID 2042, with the description "Config Read Failed." Despite these entries, the firewall's functionality remains unaffected. Users have also noted that the error persists even after subsequent updates, indicating that the issue is widespread.
In summary, while the KB5060829 update introduces an error log entry related to the Windows Firewall, it does not impact the firewall's functionality. Administrators can filter out the error for a cleaner log, and Microsoft is actively working on a resolution.
Source: Neowin KB5060829: Microsoft confirms new upcoming Windows 11 24H2 feature is triggering Firewall