Help: Change the name and location of the Windows Firewall log file

Applies To: Windows Server 2003, Windows Server 2003 R2, Windows Server 2003 with SP1, Windows Server 2003 with SP2

To change the name and location of the Windows Firewall log file

Open Windows Firewall, and click the Advanced tab.
In Security Logging, click Settings.
Click Save As, and navigate to the location where you want to save the log file.
In File name, type the new log file name, or leave it blank to accept the default name of pfirewall.log.
Click Save, and then click OK.

Notes

To perform this procedure, you must be a member of the Administrators group on the local computer, or you must have been delegated the appropriate authority. If the computer is joined to a domain, members of the Domain Admins group might be able to perform this procedure.
To start Windows Firewall, click Start, point to Control Panel, and then click Windows Firewall.
You can also use the netsh command with the firewall context to perform this procedure and configure other Windows Firewall settings.
You can also use Group Policy settings to perform this procedure and configure other Windows Firewall settings.
If a Windows Firewall setting appears dimmed in the graphical user interface, and on the General tab, you see For your security, some settings are controlled by Group Policy, the setting might be managed by Group Policy. If all Windows Firewall settings appear dimmed, and on the General tab, you see You must be a computer administrator to change these settings, you do not have administrative rights to configure Windows Firewall.
On Windows Server 2003, Windows Firewall is turned off by default and the Windows Firewall/Internet Connection Sharing service is disabled by default. You might have to start the Windows Firewall/Internet Connection Sharing service if you try to perform this procedure and you have never started Windows Firewall.
Windows Firewall is not included in the original release of the Windows Server 2003 operating systems.