Go back to event viewer and export the events to a log file by right clicking on security again and Save Filtered Log File As.Open cmd and make sure that no one is listening on the port 8000 using netstat.It shows the process running on that port. Filter out only the bind and listen events by right clicking on the Security and Filter Current Log -> Specify event IDs 5154,5158 In the Local Address column you can see the port number after the : sign.Open event viewer (you can use Cortana search box to get there), browse to Windows Logs -> Security.

Can you confirm that the Antivirus on your system was disabled during the repro?Īuditpol /set /category:'Object Access' /SubCategory:'Filtering Platform Connection' /success:enable /failure:enable.

Meanwhile, I have gotten some instructions from the core networking team to gather some additional logs. And, even worse, we don't know of any workarounds.

We understand how blocking this issue can be, but unfortunately, we don't have a full understanding of the root cause.

Windows open port