Windows Fails to Start Windows Firewall Service

I guess I'll call them.

I get those error messages WHILE TRYING TO MANUALLY START THE SERVICE by the
way, so your suggest made no sense.

"Mr. Arnold" wrote:

>
> "Jacob" <Jacob@discussions.microsoft.com> wrote in message
> news:BCD24CF0-1A04-4D1D-A1F5-D6A9C868046D@microsoft.com...
> > Did you even read my post? The service crashes on start.
> > That's what the error message came from.
> >
> I read your post. It still doesn't mean you couldn't go and manually start
> the service. I suggest that if you have a retail version of Vista and it's
> within the 180 days period of activation, then call MS for support. What I
> suspect is maybe malware has taken out the FW.
>
>

"Jacob" <Jacob@discussions.microsoft.com> wrote in message
news:0B6868A8-0013-4B0E-870A-3740CCAD14DF@microsoft.com...
>I guess I'll call them.
>
> I get those error messages WHILE TRYING TO MANUALLY START THE SERVICE by
> the
> way, so your suggest made no sense.

Well, I have had a service terminate or stop that I have written. I went and
started the service and it started. So, it made perfect sense to me that you
went and tried to start a service manually.

Anyway, call MS and see if they can help you.

Like I said, you probably have malware that has compromised the machine and
it has taken/knocked out the FW, WITH YOU SITTING AT THE HELM, CAPTAIN.

Error 5 is typically 'Access Denied'.
from an elevated command prompt, type 'net start mpssvc <enter>'. If the
service doesn't start, type 'sc query mpssvc <enter>' and reply back with
the output.

Even if the service does start, we still need to investigate why it didn't
start on its own.
There are many reasons for it not to start. The easy ones are:
1) another firewall on the box has turned it off to prevent configuration
conflicts between the two programs.
2) a service the firewall depends on is not starting
3) a security profile has been applied to the machine which disables the
service
4) domain group policy has turned it off


--
David
Microsoft Windows Networking
This posting is provided "AS IS" with no warranties, and confers no rights.


"Jacob" <Jacob@discussions.microsoft.com> wrote in message
news:167BAEA5-518C-46D4-BE9C-972596D65C1B@microsoft.com...
> When I try to start windows fire wall i get a pop up telling me the
> service
> isn't running, and I tell the pop-up to start the service.
>
> It then says that the service has failed to start.
>
> It gives me the service-specific error code 5. (0x5)
>
> Any ideas on how to fix this?
> Any way to reinstall the windows firewall service?

Wouldn't start.

I think I had SDHelper at one point but that's all, and I don't see why that
would mess up my firewall.

Anyway, here's the sc query text:
SERVICE_NAME:mpssvc
TYPE: 20 WIN32_SHARE_Process
STATE: 1 STOPPED
WIN32_EXIT_CODE: 1066 (0x42a)
SERVICE_EXIT_CODE: 5 (0x5)
CHECKPOINT: 0x0
WAIT_HINT: 0x0


thanks for your help!

"David Beder [MSFT]" wrote:

> Error 5 is typically 'Access Denied'.
> from an elevated command prompt, type 'net start mpssvc <enter>'. If the
> service doesn't start, type 'sc query mpssvc <enter>' and reply back with
> the output.
>
> Even if the service does start, we still need to investigate why it didn't
> start on its own.
> There are many reasons for it not to start. The easy ones are:
> 1) another firewall on the box has turned it off to prevent configuration
> conflicts between the two programs.
> 2) a service the firewall depends on is not starting
> 3) a security profile has been applied to the machine which disables the
> service
> 4) domain group policy has turned it off
>
>
> --
> David
> Microsoft Windows Networking
> This posting is provided "AS IS" with no warranties, and confers no rights.
>
>
> "Jacob" <Jacob@discussions.microsoft.com> wrote in message
> news:167BAEA5-518C-46D4-BE9C-972596D65C1B@microsoft.com...
> > When I try to start windows fire wall i get a pop up telling me the
> > service
> > isn't running, and I tell the pop-up to start the service.
> >
> > It then says that the service has failed to start.
> >
> > It gives me the service-specific error code 5. (0x5)
> >
> > Any ideas on how to fix this?
> > Any way to reinstall the windows firewall service?
>
>
>

Microsoft Windows [Version 6.0.6000]
Copyright (c) 2006 Microsoft Corporation. All rights reserved.

C:\Users\Jacob>sc query mpssvc

SERVICE_NAME: mpssvc
TYPE : 20 WIN32_SHARE_PROCESS
STATE : 1 STOPPED
WIN32_EXIT_CODE : 1066 (0x42a)
SERVICE_EXIT_CODE : 5 (0x5)
CHECKPOINT : 0x0
WAIT_HINT : 0x0

C:\Users\Jacob>net start mpssvc
The Windows Firewall service is starting.
The Windows Firewall service could not be started.

A service specific error occurred: 5.

More help is available by typing NET HELPMSG 3547.


C:\Users\Jacob>sc query mpssvc

SERVICE_NAME: mpssvc
TYPE : 20 WIN32_SHARE_PROCESS
STATE : 1 STOPPED
WIN32_EXIT_CODE : 1066 (0x42a)
SERVICE_EXIT_CODE : 5 (0x5)
CHECKPOINT : 0x0
WAIT_HINT : 0x0


"David Beder [MSFT]" wrote:

> Error 5 is typically 'Access Denied'.
> from an elevated command prompt, type 'net start mpssvc <enter>'. If the
> service doesn't start, type 'sc query mpssvc <enter>' and reply back with
> the output.
>
> Even if the service does start, we still need to investigate why it didn't
> start on its own.
> There are many reasons for it not to start. The easy ones are:
> 1) another firewall on the box has turned it off to prevent configuration
> conflicts between the two programs.
> 2) a service the firewall depends on is not starting
> 3) a security profile has been applied to the machine which disables the
> service
> 4) domain group policy has turned it off
>
>
> --
> David
> Microsoft Windows Networking
> This posting is provided "AS IS" with no warranties, and confers no rights.
>
>
> "Jacob" <Jacob@discussions.microsoft.com> wrote in message
> news:167BAEA5-518C-46D4-BE9C-972596D65C1B@microsoft.com...
> > When I try to start windows fire wall i get a pop up telling me the
> > service
> > isn't running, and I tell the pop-up to start the service.
> >
> > It then says that the service has failed to start.
> >
> > It gives me the service-specific error code 5. (0x5)
> >
> > Any ideas on how to fix this?
> > Any way to reinstall the windows firewall service?
>
>
>

interesting.
how about some output from "sc qc mpssvc". I'm particularly interested in
the value for service_start_name.

Also, if you can fire up the services control panel, what are the settings
on the log-on and recovery tabs?

--
David
Microsoft Windows Networking
This posting is provided "AS IS" with no warranties, and confers no rights.


"Jacob" <Jacob@discussions.microsoft.com> wrote in message
news:CF29D1EA-6F21-42D3-8F7A-86240C4E2064@microsoft.com...
> Microsoft Windows [Version 6.0.6000]
> Copyright (c) 2006 Microsoft Corporation. All rights reserved.
>
> C:\Users\Jacob>sc query mpssvc
>
> SERVICE_NAME: mpssvc
> TYPE : 20 WIN32_SHARE_PROCESS
> STATE : 1 STOPPED
> WIN32_EXIT_CODE : 1066 (0x42a)
> SERVICE_EXIT_CODE : 5 (0x5)
> CHECKPOINT : 0x0
> WAIT_HINT : 0x0
>
> C:\Users\Jacob>net start mpssvc
> The Windows Firewall service is starting.
> The Windows Firewall service could not be started.
>
> A service specific error occurred: 5.
>
> More help is available by typing NET HELPMSG 3547.
>
>
> C:\Users\Jacob>sc query mpssvc
>
> SERVICE_NAME: mpssvc
> TYPE : 20 WIN32_SHARE_PROCESS
> STATE : 1 STOPPED
> WIN32_EXIT_CODE : 1066 (0x42a)
> SERVICE_EXIT_CODE : 5 (0x5)
> CHECKPOINT : 0x0
> WAIT_HINT : 0x0
>
>
> "David Beder [MSFT]" wrote:
>
>> Error 5 is typically 'Access Denied'.
>> from an elevated command prompt, type 'net start mpssvc <enter>'. If the
>> service doesn't start, type 'sc query mpssvc <enter>' and reply back with
>> the output.
>>
>> Even if the service does start, we still need to investigate why it
>> didn't
>> start on its own.
>> There are many reasons for it not to start. The easy ones are:
>> 1) another firewall on the box has turned it off to prevent configuration
>> conflicts between the two programs.
>> 2) a service the firewall depends on is not starting
>> 3) a security profile has been applied to the machine which disables the
>> service
>> 4) domain group policy has turned it off
>>
>>
>> --
>> David
>> Microsoft Windows Networking
>> This posting is provided "AS IS" with no warranties, and confers no
>> rights.
>>
>>
>> "Jacob" <Jacob@discussions.microsoft.com> wrote in message
>> news:167BAEA5-518C-46D4-BE9C-972596D65C1B@microsoft.com...
>> > When I try to start windows fire wall i get a pop up telling me the
>> > service
>> > isn't running, and I tell the pop-up to start the service.
>> >
>> > It then says that the service has failed to start.
>> >
>> > It gives me the service-specific error code 5. (0x5)
>> >
>> > Any ideas on how to fix this?
>> > Any way to reinstall the windows firewall service?
>>
>>
>>

sc qc mpssvc returns:

C:\Users\Jacob>sc qc mpssvc
[SC] QueryServiceConfig SUCCESS

SERVICE_NAME: mpssvc
TYPE : 20 WIN32_SHARE_PROCESS
START_TYPE : 2 AUTO_START
ERROR_CONTROL : 1 NORMAL
BINARY_PATH_NAME : C:\Windows\system32\svchost.exe -k
LocalServiceNoNe
twork
LOAD_ORDER_GROUP : NetworkProvider
TAG : 0
DISPLAY_NAME : Windows Firewall
DEPENDENCIES : mpsdrv
: bfe
SERVICE_START_NAME : NT AUTHORITY\LocalService

C:\Users\Jacob>


Under the Log On tab for the Firewall service, "This Account" is selected
and the account name "Local Service" with a password written in is entered.

Recovery:
First Failure- Restart Service
2nd - Restart Service
Susequent - Take no action

Fail count reset every day, and the delay between failure restarts is 2
minutes.
The "Enable actions for stopes with errors." is not checked, and the rest is
grayed out.
"David Beder [MSFT]" wrote:

> interesting.
> how about some output from "sc qc mpssvc". I'm particularly interested in
> the value for service_start_name.
>
> Also, if you can fire up the services control panel, what are the settings
> on the log-on and recovery tabs?
>
> --
> David
> Microsoft Windows Networking
> This posting is provided "AS IS" with no warranties, and confers no rights.
>
>
> "Jacob" <Jacob@discussions.microsoft.com> wrote in message
> news:CF29D1EA-6F21-42D3-8F7A-86240C4E2064@microsoft.com...
> > Microsoft Windows [Version 6.0.6000]
> > Copyright (c) 2006 Microsoft Corporation. All rights reserved.
> >
> > C:\Users\Jacob>sc query mpssvc
> >
> > SERVICE_NAME: mpssvc
> > TYPE : 20 WIN32_SHARE_PROCESS
> > STATE : 1 STOPPED
> > WIN32_EXIT_CODE : 1066 (0x42a)
> > SERVICE_EXIT_CODE : 5 (0x5)
> > CHECKPOINT : 0x0
> > WAIT_HINT : 0x0
> >
> > C:\Users\Jacob>net start mpssvc
> > The Windows Firewall service is starting.
> > The Windows Firewall service could not be started.
> >
> > A service specific error occurred: 5.
> >
> > More help is available by typing NET HELPMSG 3547.
> >
> >
> > C:\Users\Jacob>sc query mpssvc
> >
> > SERVICE_NAME: mpssvc
> > TYPE : 20 WIN32_SHARE_PROCESS
> > STATE : 1 STOPPED
> > WIN32_EXIT_CODE : 1066 (0x42a)
> > SERVICE_EXIT_CODE : 5 (0x5)
> > CHECKPOINT : 0x0
> > WAIT_HINT : 0x0
> >
> >
> > "David Beder [MSFT]" wrote:
> >
> >> Error 5 is typically 'Access Denied'.
> >> from an elevated command prompt, type 'net start mpssvc <enter>'. If the
> >> service doesn't start, type 'sc query mpssvc <enter>' and reply back with
> >> the output.
> >>
> >> Even if the service does start, we still need to investigate why it
> >> didn't
> >> start on its own.
> >> There are many reasons for it not to start. The easy ones are:
> >> 1) another firewall on the box has turned it off to prevent configuration
> >> conflicts between the two programs.
> >> 2) a service the firewall depends on is not starting
> >> 3) a security profile has been applied to the machine which disables the
> >> service
> >> 4) domain group policy has turned it off
> >>
> >>
> >> --
> >> David
> >> Microsoft Windows Networking
> >> This posting is provided "AS IS" with no warranties, and confers no
> >> rights.
> >>
> >>
> >> "Jacob" <Jacob@discussions.microsoft.com> wrote in message
> >> news:167BAEA5-518C-46D4-BE9C-972596D65C1B@microsoft.com...
> >> > When I try to start windows fire wall i get a pop up telling me the
> >> > service
> >> > isn't running, and I tell the pop-up to start the service.
> >> >
> >> > It then says that the service has failed to start.
> >> >
> >> > It gives me the service-specific error code 5. (0x5)
> >> >
> >> > Any ideas on how to fix this?
> >> > Any way to reinstall the windows firewall service?
> >>
> >>
> >>
>
>
>

Those are the default settings as I recall, so something doesn't appear to
have 'adjusted' the service.

maybe the issue is with mpsdrv, but I'd have thought you'd get a different
error about a dependant service not being able to start.

maybe the issue is with registry access.

This is rather strange. I'll ask around and see if anyone can think of other
things to check.

--
David
Microsoft Windows Networking
This posting is provided "AS IS" with no warranties, and confers no rights.


"Jacob" <Jacob@discussions.microsoft.com> wrote in message
news:F4E5D8E8-85D5-4A7B-903F-784C020151E3@microsoft.com...
> sc qc mpssvc returns:
>
> C:\Users\Jacob>sc qc mpssvc
> [SC] QueryServiceConfig SUCCESS
>
> SERVICE_NAME: mpssvc
> TYPE : 20 WIN32_SHARE_PROCESS
> START_TYPE : 2 AUTO_START
> ERROR_CONTROL : 1 NORMAL
> BINARY_PATH_NAME : C:\Windows\system32\svchost.exe -k
> LocalServiceNoNe
> twork
> LOAD_ORDER_GROUP : NetworkProvider
> TAG : 0
> DISPLAY_NAME : Windows Firewall
> DEPENDENCIES : mpsdrv
> : bfe
> SERVICE_START_NAME : NT AUTHORITY\LocalService
>
> C:\Users\Jacob>
>
>
> Under the Log On tab for the Firewall service, "This Account" is selected
> and the account name "Local Service" with a password written in is
> entered.
>
> Recovery:
> First Failure- Restart Service
> 2nd - Restart Service
> Susequent - Take no action
>
> Fail count reset every day, and the delay between failure restarts is 2
> minutes.
> The "Enable actions for stopes with errors." is not checked, and the rest
> is
> grayed out.
> "David Beder [MSFT]" wrote:
>
>> interesting.
>> how about some output from "sc qc mpssvc". I'm particularly interested in
>> the value for service_start_name.
>>
>> Also, if you can fire up the services control panel, what are the
>> settings
>> on the log-on and recovery tabs?
>>
>> --
>> David
>> Microsoft Windows Networking
>> This posting is provided "AS IS" with no warranties, and confers no
>> rights.
>>
>>
>> "Jacob" <Jacob@discussions.microsoft.com> wrote in message
>> news:CF29D1EA-6F21-42D3-8F7A-86240C4E2064@microsoft.com...
>> > Microsoft Windows [Version 6.0.6000]
>> > Copyright (c) 2006 Microsoft Corporation. All rights reserved.
>> >
>> > C:\Users\Jacob>sc query mpssvc
>> >
>> > SERVICE_NAME: mpssvc
>> > TYPE : 20 WIN32_SHARE_PROCESS
>> > STATE : 1 STOPPED
>> > WIN32_EXIT_CODE : 1066 (0x42a)
>> > SERVICE_EXIT_CODE : 5 (0x5)
>> > CHECKPOINT : 0x0
>> > WAIT_HINT : 0x0
>> >
>> > C:\Users\Jacob>net start mpssvc
>> > The Windows Firewall service is starting.
>> > The Windows Firewall service could not be started.
>> >
>> > A service specific error occurred: 5.
>> >
>> > More help is available by typing NET HELPMSG 3547.
>> >
>> >
>> > C:\Users\Jacob>sc query mpssvc
>> >
>> > SERVICE_NAME: mpssvc
>> > TYPE : 20 WIN32_SHARE_PROCESS
>> > STATE : 1 STOPPED
>> > WIN32_EXIT_CODE : 1066 (0x42a)
>> > SERVICE_EXIT_CODE : 5 (0x5)
>> > CHECKPOINT : 0x0
>> > WAIT_HINT : 0x0
>> >
>> >
>> > "David Beder [MSFT]" wrote:
>> >
>> >> Error 5 is typically 'Access Denied'.
>> >> from an elevated command prompt, type 'net start mpssvc <enter>'. If
>> >> the
>> >> service doesn't start, type 'sc query mpssvc <enter>' and reply back
>> >> with
>> >> the output.
>> >>
>> >> Even if the service does start, we still need to investigate why it
>> >> didn't
>> >> start on its own.
>> >> There are many reasons for it not to start. The easy ones are:
>> >> 1) another firewall on the box has turned it off to prevent
>> >> configuration
>> >> conflicts between the two programs.
>> >> 2) a service the firewall depends on is not starting
>> >> 3) a security profile has been applied to the machine which disables
>> >> the
>> >> service
>> >> 4) domain group policy has turned it off
>> >>
>> >>
>> >> --
>> >> David
>> >> Microsoft Windows Networking
>> >> This posting is provided "AS IS" with no warranties, and confers no
>> >> rights.
>> >>
>> >>
>> >> "Jacob" <Jacob@discussions.microsoft.com> wrote in message
>> >> news:167BAEA5-518C-46D4-BE9C-972596D65C1B@microsoft.com...
>> >> > When I try to start windows fire wall i get a pop up telling me the
>> >> > service
>> >> > isn't running, and I tell the pop-up to start the service.
>> >> >
>> >> > It then says that the service has failed to start.
>> >> >
>> >> > It gives me the service-specific error code 5. (0x5)
>> >> >
>> >> > Any ideas on how to fix this?
>> >> > Any way to reinstall the windows firewall service?
>> >>
>> >>
>> >>
>>
>>
>>

Is there no way to simply reinstall the firewall, overriding the old install,
with original settings?

That way we could eliminate the firewall as the source of the problem,
methinks.

Furthermore, what password goes in those boxes? I never entered one, so do
not know what it is, and could it be possible that a virus adjusted just the
password field?

"David Beder [MSFT]" wrote:

> Those are the default settings as I recall, so something doesn't appear to
> have 'adjusted' the service.
>
> maybe the issue is with mpsdrv, but I'd have thought you'd get a different
> error about a dependant service not being able to start.
>
> maybe the issue is with registry access.
>
> This is rather strange. I'll ask around and see if anyone can think of other
> things to check.
>
> --
> David
> Microsoft Windows Networking
> This posting is provided "AS IS" with no warranties, and confers no rights.
>
>
> "Jacob" <Jacob@discussions.microsoft.com> wrote in message
> news:F4E5D8E8-85D5-4A7B-903F-784C020151E3@microsoft.com...
> > sc qc mpssvc returns:
> >
> > C:\Users\Jacob>sc qc mpssvc
> > [SC] QueryServiceConfig SUCCESS
> >
> > SERVICE_NAME: mpssvc
> > TYPE : 20 WIN32_SHARE_PROCESS
> > START_TYPE : 2 AUTO_START
> > ERROR_CONTROL : 1 NORMAL
> > BINARY_PATH_NAME : C:\Windows\system32\svchost.exe -k
> > LocalServiceNoNe
> > twork
> > LOAD_ORDER_GROUP : NetworkProvider
> > TAG : 0
> > DISPLAY_NAME : Windows Firewall
> > DEPENDENCIES : mpsdrv
> > : bfe
> > SERVICE_START_NAME : NT AUTHORITY\LocalService
> >
> > C:\Users\Jacob>
> >
> >
> > Under the Log On tab for the Firewall service, "This Account" is selected
> > and the account name "Local Service" with a password written in is
> > entered.
> >
> > Recovery:
> > First Failure- Restart Service
> > 2nd - Restart Service
> > Susequent - Take no action
> >
> > Fail count reset every day, and the delay between failure restarts is 2
> > minutes.
> > The "Enable actions for stopes with errors." is not checked, and the rest
> > is
> > grayed out.
> > "David Beder [MSFT]" wrote:
> >
> >> interesting.
> >> how about some output from "sc qc mpssvc". I'm particularly interested in
> >> the value for service_start_name.
> >>
> >> Also, if you can fire up the services control panel, what are the
> >> settings
> >> on the log-on and recovery tabs?
> >>
> >> --
> >> David
> >> Microsoft Windows Networking
> >> This posting is provided "AS IS" with no warranties, and confers no
> >> rights.
> >>
> >>
> >> "Jacob" <Jacob@discussions.microsoft.com> wrote in message
> >> news:CF29D1EA-6F21-42D3-8F7A-86240C4E2064@microsoft.com...
> >> > Microsoft Windows [Version 6.0.6000]
> >> > Copyright (c) 2006 Microsoft Corporation. All rights reserved.
> >> >
> >> > C:\Users\Jacob>sc query mpssvc
> >> >
> >> > SERVICE_NAME: mpssvc
> >> > TYPE : 20 WIN32_SHARE_PROCESS
> >> > STATE : 1 STOPPED
> >> > WIN32_EXIT_CODE : 1066 (0x42a)
> >> > SERVICE_EXIT_CODE : 5 (0x5)
> >> > CHECKPOINT : 0x0
> >> > WAIT_HINT : 0x0
> >> >
> >> > C:\Users\Jacob>net start mpssvc
> >> > The Windows Firewall service is starting.
> >> > The Windows Firewall service could not be started.
> >> >
> >> > A service specific error occurred: 5.
> >> >
> >> > More help is available by typing NET HELPMSG 3547.
> >> >
> >> >
> >> > C:\Users\Jacob>sc query mpssvc
> >> >
> >> > SERVICE_NAME: mpssvc
> >> > TYPE : 20 WIN32_SHARE_PROCESS
> >> > STATE : 1 STOPPED
> >> > WIN32_EXIT_CODE : 1066 (0x42a)
> >> > SERVICE_EXIT_CODE : 5 (0x5)
> >> > CHECKPOINT : 0x0
> >> > WAIT_HINT : 0x0
> >> >
> >> >
> >> > "David Beder [MSFT]" wrote:
> >> >
> >> >> Error 5 is typically 'Access Denied'.
> >> >> from an elevated command prompt, type 'net start mpssvc <enter>'. If
> >> >> the
> >> >> service doesn't start, type 'sc query mpssvc <enter>' and reply back
> >> >> with
> >> >> the output.
> >> >>
> >> >> Even if the service does start, we still need to investigate why it
> >> >> didn't
> >> >> start on its own.
> >> >> There are many reasons for it not to start. The easy ones are:
> >> >> 1) another firewall on the box has turned it off to prevent
> >> >> configuration
> >> >> conflicts between the two programs.
> >> >> 2) a service the firewall depends on is not starting
> >> >> 3) a security profile has been applied to the machine which disables
> >> >> the
> >> >> service
> >> >> 4) domain group policy has turned it off
> >> >>
> >> >>
> >> >> --
> >> >> David
> >> >> Microsoft Windows Networking
> >> >> This posting is provided "AS IS" with no warranties, and confers no
> >> >> rights.
> >> >>
> >> >>
> >> >> "Jacob" <Jacob@discussions.microsoft.com> wrote in message
> >> >> news:167BAEA5-518C-46D4-BE9C-972596D65C1B@microsoft.com...
> >> >> > When I try to start windows fire wall i get a pop up telling me the
> >> >> > service
> >> >> > isn't running, and I tell the pop-up to start the service.
> >> >> >
> >> >> > It then says that the service has failed to start.
> >> >> >
> >> >> > It gives me the service-specific error code 5. (0x5)
> >> >> >
> >> >> > Any ideas on how to fix this?
> >> >> > Any way to reinstall the windows firewall service?
> >> >>
> >> >>
> >> >>
> >>
> >>
> >>
>
>
>

I've always wondered what passwords were used also. I think they're
auto-generated by the system.

Might you have any restore points you can go back to?
I haven't tried this in Vista, but in older versions of Windows, if you ran
the setup cd again, you got a repair option that might put things back into
order. Since Windows Firewall is part of the OS, you can't really just
re-install just that service.

On a slightly different note, how are the states of the BFE and MPSDrv
services?
Anything in the audit logs (ie eventvwr) about this services actually
starting early during the boot sequence? One of the guys I work with was
curious as to whether the service was crashing before you even got to log
on, thus using up the 2-3crashes per boot quota.

--
David
Microsoft Windows Networking
This posting is provided "AS IS" with no warranties, and confers no rights.


"Jacob" <Jacob@discussions.microsoft.com> wrote in message
news:5A96FE9D-B7EB-4D44-AC0D-15703AC9762C@microsoft.com...
> Is there no way to simply reinstall the firewall, overriding the old
> install,
> with original settings?
>
> That way we could eliminate the firewall as the source of the problem,
> methinks.
>
> Furthermore, what password goes in those boxes? I never entered one, so do
> not know what it is, and could it be possible that a virus adjusted just
> the
> password field?
>
> "David Beder [MSFT]" wrote:
>
>> Those are the default settings as I recall, so something doesn't appear
>> to
>> have 'adjusted' the service.
>>
>> maybe the issue is with mpsdrv, but I'd have thought you'd get a
>> different
>> error about a dependant service not being able to start.
>>
>> maybe the issue is with registry access.
>>
>> This is rather strange. I'll ask around and see if anyone can think of
>> other
>> things to check.
>>
>> --
>> David
>> Microsoft Windows Networking
>> This posting is provided "AS IS" with no warranties, and confers no
>> rights.
>>
>>
>> "Jacob" <Jacob@discussions.microsoft.com> wrote in message
>> news:F4E5D8E8-85D5-4A7B-903F-784C020151E3@microsoft.com...
>> > sc qc mpssvc returns:
>> >
>> > C:\Users\Jacob>sc qc mpssvc
>> > [SC] QueryServiceConfig SUCCESS
>> >
>> > SERVICE_NAME: mpssvc
>> > TYPE : 20 WIN32_SHARE_PROCESS
>> > START_TYPE : 2 AUTO_START
>> > ERROR_CONTROL : 1 NORMAL
>> > BINARY_PATH_NAME : C:\Windows\system32\svchost.exe -k
>> > LocalServiceNoNe
>> > twork
>> > LOAD_ORDER_GROUP : NetworkProvider
>> > TAG : 0
>> > DISPLAY_NAME : Windows Firewall
>> > DEPENDENCIES : mpsdrv
>> > : bfe
>> > SERVICE_START_NAME : NT AUTHORITY\LocalService
>> >
>> > C:\Users\Jacob>
>> >
>> >
>> > Under the Log On tab for the Firewall service, "This Account" is
>> > selected
>> > and the account name "Local Service" with a password written in is
>> > entered.
>> >
>> > Recovery:
>> > First Failure- Restart Service
>> > 2nd - Restart Service
>> > Susequent - Take no action
>> >
>> > Fail count reset every day, and the delay between failure restarts is 2
>> > minutes.
>> > The "Enable actions for stopes with errors." is not checked, and the
>> > rest
>> > is
>> > grayed out.
>> > "David Beder [MSFT]" wrote:
>> >
>> >> interesting.
>> >> how about some output from "sc qc mpssvc". I'm particularly interested
>> >> in
>> >> the value for service_start_name.
>> >>
>> >> Also, if you can fire up the services control panel, what are the
>> >> settings
>> >> on the log-on and recovery tabs?
>> >>
>> >> --
>> >> David
>> >> Microsoft Windows Networking
>> >> This posting is provided "AS IS" with no warranties, and confers no
>> >> rights.
>> >>
>> >>
>> >> "Jacob" <Jacob@discussions.microsoft.com> wrote in message
>> >> news:CF29D1EA-6F21-42D3-8F7A-86240C4E2064@microsoft.com...
>> >> > Microsoft Windows [Version 6.0.6000]
>> >> > Copyright (c) 2006 Microsoft Corporation. All rights reserved.
>> >> >
>> >> > C:\Users\Jacob>sc query mpssvc
>> >> >
>> >> > SERVICE_NAME: mpssvc
>> >> > TYPE : 20 WIN32_SHARE_PROCESS
>> >> > STATE : 1 STOPPED
>> >> > WIN32_EXIT_CODE : 1066 (0x42a)
>> >> > SERVICE_EXIT_CODE : 5 (0x5)
>> >> > CHECKPOINT : 0x0
>> >> > WAIT_HINT : 0x0
>> >> >
>> >> > C:\Users\Jacob>net start mpssvc
>> >> > The Windows Firewall service is starting.
>> >> > The Windows Firewall service could not be started.
>> >> >
>> >> > A service specific error occurred: 5.
>> >> >
>> >> > More help is available by typing NET HELPMSG 3547.
>> >> >
>> >> >
>> >> > C:\Users\Jacob>sc query mpssvc
>> >> >
>> >> > SERVICE_NAME: mpssvc
>> >> > TYPE : 20 WIN32_SHARE_PROCESS
>> >> > STATE : 1 STOPPED
>> >> > WIN32_EXIT_CODE : 1066 (0x42a)
>> >> > SERVICE_EXIT_CODE : 5 (0x5)
>> >> > CHECKPOINT : 0x0
>> >> > WAIT_HINT : 0x0
>> >> >
>> >> >
>> >> > "David Beder [MSFT]" wrote:
>> >> >
>> >> >> Error 5 is typically 'Access Denied'.
>> >> >> from an elevated command prompt, type 'net start mpssvc <enter>'.
>> >> >> If
>> >> >> the
>> >> >> service doesn't start, type 'sc query mpssvc <enter>' and reply
>> >> >> back
>> >> >> with
>> >> >> the output.
>> >> >>
>> >> >> Even if the service does start, we still need to investigate why it
>> >> >> didn't
>> >> >> start on its own.
>> >> >> There are many reasons for it not to start. The easy ones are:
>> >> >> 1) another firewall on the box has turned it off to prevent
>> >> >> configuration
>> >> >> conflicts between the two programs.
>> >> >> 2) a service the firewall depends on is not starting
>> >> >> 3) a security profile has been applied to the machine which
>> >> >> disables
>> >> >> the
>> >> >> service
>> >> >> 4) domain group policy has turned it off
>> >> >>
>> >> >>
>> >> >> --
>> >> >> David
>> >> >> Microsoft Windows Networking
>> >> >> This posting is provided "AS IS" with no warranties, and confers no
>> >> >> rights.
>> >> >>
>> >> >>
>> >> >> "Jacob" <Jacob@discussions.microsoft.com> wrote in message
>> >> >> news:167BAEA5-518C-46D4-BE9C-972596D65C1B@microsoft.com...
>> >> >> > When I try to start windows fire wall i get a pop up telling me
>> >> >> > the
>> >> >> > service
>> >> >> > isn't running, and I tell the pop-up to start the service.
>> >> >> >
>> >> >> > It then says that the service has failed to start.
>> >> >> >
>> >> >> > It gives me the service-specific error code 5. (0x5)
>> >> >> >
>> >> >> > Any ideas on how to fix this?
>> >> >> > Any way to reinstall the windows firewall service?
>> >> >>
>> >> >>
>> >> >>
>> >>
>> >>
>> >>
>>
>>
>>