Windows Firewall flags Microsoft software code as potential threat
In a recent development, users of the Windows 11 24H2 latest preview update have reported errors with the Windows Firewall. These errors are attributed to the optional update KB5060829, released on June 26, 2025.
The update introduces an experimental feature that is not yet fully implemented, causing false error warnings in the Event Viewer related to Windows Firewall With Advanced Security. Specifically, users will see an event with ID 2042 labeled "Config Read Failed" along with the message "More data is available" in the security event logs. These errors persist even after restarting the PC but do not impact the firewall’s functionality or overall system security.
Microsoft has acknowledged this issue and clarified that the firewall continues to operate normally, enforcing rules and filtering network traffic as expected. The error is harmless and can be safely ignored. For users who prefer a clean event log, Microsoft suggests filtering out Event ID 2042 or uninstalling the KB5060829 update as a temporary workaround.
Regarding the resolution, Microsoft is actively working on a fix that will stop these unnecessary error events from appearing in the Event Viewer. This fix is expected to be included in the July 2025 Patch Tuesday update, so users can anticipate a resolution within that update release cycle.
Here is a summary of the issue:
| Issue | Cause | Impact | Resolution Timeline | |----------------------------|------------------------------------------------------|--------------------------------|--------------------------------| | Windows Firewall errors in Event Viewer (Event ID 2042) | Experimental feature in KB5060829 update for Windows 11 24H2 | False error warnings only; no actual firewall or security impact | Fix expected in July 2025 Patch Tuesday update |
Users can rest assured that their Windows Firewall continues to function as intended despite these false error warnings. For more information, users are advised to refer to Microsoft's official statement on the matter.
The experimental feature in the KB5060829 update for Windows 11 24H2, introduced in the recent preview update, is causing false error warnings related to the Windows Firewall, specifically Event ID 2042 in the security event logs, even though it doesn't affect the overall security provided by the AI in data-and-cloud-computing technology. Microsoft is working on a fix that will stop these error events from appearing in the Event Viewer, with the resolution expected in the July 2025 Patch Tuesday update.
