Following the rollout of the June 2025 Windows 11 non-security preview update (KB5060829), users and IT administrators have reported a new error event appearing in the Windows Event Viewer.
Specifically, after installing this update on Windows 11 version 24H2, the system logs an error from “Windows Firewall With Advanced Security” labeled as Event ID 2042, with the message “Config Read Failed” and the detail “More data is available”.
This error is recorded every time the device is restarted, prompting concerns among system administrators about potential firewall misconfigurations or security risks.
Microsoft has officially acknowledged the issue, clarifying that these error events do not indicate any malfunction or compromise of the Windows Firewall.
According to the company, “Windows Firewall is expected to function normally, and no action is required to prevent or resolve this error event.”
The error is linked to a feature that is still under development and has not been fully implemented in the current release.
As such, the error can be safely ignored, and there is no impact on Windows processes or firewall enforcement.
Technical Details and Workarounds
The error, as seen in the Event Viewer, is logged under:
textLog Name: Security
Source: Microsoft-Windows-Windows Firewall With Advanced Security
Event ID: 2042
Level: Error
Description: Config Read Failed. More data is available.
This event is purely informational regarding the under-development feature and does not reflect any real configuration or security failure.
Microsoft has stated there is “no impact to Windows processes associated with this event,” and firewall rules continue to be enforced as intended.
For IT professionals and users who prefer cleaner event logs, Microsoft suggests filtering out Event ID 2042.
This can be done by creating a custom view in Event Viewer or by using PowerShell with the following command:
powershellGet-WinEvent -FilterHashtable @{LogName='Security'; ID=2042}
Administrators can exclude this event from their monitoring tools to avoid unnecessary alerts until a fix is released.
Microsoft is actively working on a resolution and has promised an update in an upcoming Windows release.
No specific timeline has been provided for the patch, but users are advised that there is no need to uninstall the update or take corrective action at this time.
Summary for Users and IT Teams
- The error event (ID 2042) is a harmless byproduct of a new, incomplete feature in Windows Firewall With Advanced Security.
- Windows Firewall continues to operate normally, enforcing all configured rules and policies.
- No user or administrator action is required; the error can be ignored.
- Microsoft will address the logging issue in a future update.
This issue affects only Windows 11 version 24H2 and does not impact Windows Server platforms.
Find this Story Interesting! Follow us on LinkedIn and X to Get More Instant updates