The How-To Geek Forums Have Migrated to Discourse


How-To Geek Forums / Windows Vista

Windows Firewall service will not start.

(17 posts)
  • Started 9 years ago by nyess418
  • Latest reply from i3laze
  • Topic Viewed 49028 times

nyess418
Posts: 0

My windows firewall will not start.

I am not able to re-start the service.

Posted 9 years ago
Top
 
ScottW
Posts: 0

Nyess, welcome to the forum. What happens when you try to start the service, do you get an error message? Have you tried the command that I listed in the other thread? They are not expected to fix the problem, only provide status:

> sc queryex mpssvc
> sc qc mpssvc

Run them at the command prompt and post the output here.

Posted 9 years ago
Top
 
nyess418
Posts: 0

Yes I get the same message.

DISPLAY_NAME : Windows Firewall
DEPENDENCIES : mpsdrv
:bfe

Posted 9 years ago
Top
 
ScottW
Posts: 0

Please post the entire output of both commands:

C:\>sc queryex mpssvc

SERVICE_NAME: mpssvc
TYPE : 20 WIN32_SHARE_PROCESS
STATE : 4 RUNNING
(STOPPABLE, NOT_PAUSABLE, IGNORES_SHUTDOWN)
WIN32_EXIT_CODE : 0 (0x0)
SERVICE_EXIT_CODE : 0 (0x0)
CHECKPOINT : 0x0
WAIT_HINT : 0x0
PID : 1684
FLAGS :

C:\>sc qc mpssvc
[SC] QueryServiceConfig SUCCESS

SERVICE_NAME: mpssvc
TYPE : 20 WIN32_SHARE_PROCESS
START_TYPE : 2 AUTO_START
ERROR_CONTROL : 1 NORMAL
BINARY_PATH_NAME : C:\Windows\system32\svchost.exe -k LocalServiceNoNe
twork
LOAD_ORDER_GROUP : NetworkProvider
TAG : 0
DISPLAY_NAME : Windows Firewall
DEPENDENCIES : mpsdrv
: bfe
SERVICE_START_NAME : NT Authority\LocalService

Posted 9 years ago
Top
 
nyess418
Posts: 0

C:\>sc queryex mpssvc

SERVICE_NAME: mpssvc
TYPE : 20 WIN32_SHARE_PROCESS
STATE : 4 RUNNING
(STOPPABLE, NOT_PAUSABLE, IGNORES_SHUTDOWN)
WIN32_EXIT_CODE : 0 (0x0)
SERVICE_EXIT_CODE : 0 (0x0)
CHECKPOINT : 0x0
WAIT_HINT : 0x0
PID : 1808
FLAGS :

C:\>sc qc mpssvc
[SC] QueryServiceConfig SUCCESS

SERVICE_NAME: mpssvc
TYPE : 20 WIN32_SHARE_PROCESS
START_TYPE : 2 AUTO_START
ERROR_CONTROL : 1 NORMAL
BINARY_PATH_NAME : C:\Windows\system32\svchost.exe -k LocalServiceNoNe
twork
LOAD_ORDER_GROUP : NetworkProvider
TAG : 0
DISPLAY_NAME : Windows Firewall
DEPENDENCIES : mpsdrv
: bfe
SERVICE_START_NAME : NT Authority\LocalService

C:\>

Posted 9 years ago
Top
 
nyess418
Posts: 0

scott I am a fool I am on my desktop my laptop is haveing the problem one second

Posted 9 years ago
Top
 
nyess418
Posts: 0

OK my laptop

Microsoft Windows [Version 6.0.6000]
Copyright (c) 2006 Microsoft Corporation. All rights reserved.

C:\Windows\system32>cd\

C:\>sc queryex mpssvc

SERVICE_NAME: mpssvc
TYPE : 20 WIN32_SHARE_PROCESS
STATE : 1 STOPPED
WIN32_EXIT_CODE : 1066 (0x42a)
SERVICE_EXIT_CODE : 5 (0x5)
CHECKPOINT : 0x0
WAIT_HINT : 0x0
PID : 0
FLAGS :

C:\>sc qc mpssvc
[SC] QueryServiceConfig SUCCESS

SERVICE_NAME: mpssvc
TYPE : 20 WIN32_SHARE_PROCESS
START_TYPE : 2 AUTO_START
ERROR_CONTROL : 1 NORMAL
BINARY_PATH_NAME : C:\Windows\system32\svchost.exe -k LocalServiceNoNe
twork
LOAD_ORDER_GROUP : NetworkProvider
TAG : 0
DISPLAY_NAME : Windows Firewall
DEPENDENCIES : mpsdrv
: bfe
SERVICE_START_NAME : NT Authority\LocalService

C:\>

Posted 9 years ago
Top
 
ScottW
Posts: 0

Win32 exit code 1066 means, "The service has returned a service-specific error code."
Service exit code 5 -- I can't find it. {sigh}

Do you get an error code when trying to start the service? You can use "net start mpssvc" to get the command line output for easy copy/paste. Also, check the event log, eventvwr.msc -> custom views -> administrative events for errors, especially from the Service Control Manager.

Posted 9 years ago
Top
 
nyess418
Posts: 0

C:\>net start mpssvc
The Windows Firewall service is starting.
The Windows Firewall service could not be started.

A service specific error occurred: 5.

More help is available by typing NET HELPMSG 3547.

Log Name: System
Source: Service Control Manager
Date: 7/19/2008 12:33:01 AM
Event ID: 7024
Task Category: None
Level: Error
Keywords: Classic
User: N/A
Computer: G-1
Description:
The Windows Firewall service terminated with service-specific error 5 (0x5).
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
<System>
<Provider Name="Service Control Manager" Guid="{555908D1-A6D7-4695-8E1E-26931D2012F4}" EventSourceName="Service Control Manager" />
<EventID Qualifiers="49152">7024</EventID>
<Version>0</Version>
<Level>2</Level>
<Task>0</Task>
<Opcode>0</Opcode>
<Keywords>0x80000000000000</Keywords>
<TimeCreated SystemTime="2008-07-19T04:33:01.000Z" />
<EventRecordID>78180</EventRecordID>
<Correlation />
<Execution ProcessID="0" ThreadID="0" />
<Channel>System</Channel>
<Computer>G-1</Computer>
<Security />
</System>
<EventData>
<Data Name="param1">Windows Firewall</Data>
<Data Name="param2">5 (0x5)</Data>
</EventData>
</Event>

Posted 9 years ago
Top
 
ScottW
Posts: 0

Well, that event log is not very helpful. Despite all of the text and numbers that it spits out, a 7024 event means that the service terminated. Basically, this means the same as the 1066 exit code. Both messages refer to the service-specific error code, in this case the numeral 5. Thanks, Microsoft, very helpful error message! :-(

Fortunately, I have managed to google up some forum threads by folks with similar problems. Unfortunately, none of them show a guaranteed solution. According to the replies, error 5 means "access denied" and may be related to another installed firewall, or recently uninstalled firewall, or maybe a service pack. Have you done any of these lately? Take a look through these threads for other ideas:

http://www.vistaheads.com/foru.....-erro.html
http://www.vistax64.com/vista-.....rvice.html

Posted 9 years ago
Top
 
ScottW
Posts: 0

Wow! All that searching and I missed a Microsoft KB article. I fault Google for not picking this up based on my flawless search criteria! :P
http://support.microsoft.com/kb/943996

This looks like the MS answer to this exact problem. Give it a try and report back, please.

Posted 9 years ago
Top
 
nyess418
Posts: 0

I did all the rest but

I dont know how.
Registry key:
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Dhcp
permission needed: Query value, Create value, Enumerate Subkeys, Notify, Read Control

Cant change
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\DPS\Parameters

permission needed: Full Control, Read

Posted 9 years ago
Top
 
ScottW
Posts: 0

nyess, I don't understand your last post. You did all the rest of what? You modified the permissions for all the other registry keys except the ones you listed?

What is it about these two keys that you mention that you don't know how? Don't know how to change the permissions or it won't let you?

Posted 9 years ago
Top
 
brian7000
Posts: 0

Im on a laptop runnin XP Pro and have the same issue. netsh winsock reset command gives a netsh.exe unable to locate componet error. dot3api.dll was not found

Posted 9 years ago
Top
 
ScottW
Posts: 0

Brian, do you have the file, dot3api.dll? It should be in \Windows\System32. If you do, try registering it with regsvr32.exe. If you don't have it, try and get it back with the System File Checker (sfc) or from the XP install CD.

Posted 9 years ago
Top
 
randybw1
Posts: 0

I have the exact same problem. Info. This is an IBM Lenovo T60 that took Windows XP SP3, then Blue Screened. I found a MS KB article and removed SP3 and the machine run fines unless you try to remotely connect to it, edit any network info, or get the IP address of the machine. It gives the Error Dot3api.dll not found. I've searched my other XP SP2 machines and that file isn't on any of them. I've got 2 machines with this problem.

Posted 9 years ago
Top
 
i3laze
Posts: 0

Solved exactly same issue under Server 2008 :))
This one helped me: http://support.microsoft.com/kb/943996

Dunno what ruined my service, but helped adding MpsSvc and setting permissions for "Set & Query values" on the leaf:
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Epoch

Posted 8 years ago
Top
 



Topic Closed

This topic has been closed to new replies.