Re: Windows Fails to Start Windows Firewall Service

[Guest jaross20]

This worked for me:

 

Go into the registry editor and browse to the following keys. You will

need to set the permissions for the following account NT Service\MpsSvc.

The correct value is below the location path.

 

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Epoch

 

Query Value;Set Value

 

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy

 

Full Control;Read

 

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Defaults\FirewallPolicy

 

Full Control;Read

For the DHCP Client service, the issue may occur if the “NT

Service\DHCP†account does not have the necessary permissions for the

following keys:

 

Registry key:

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Dhcp

permission needed: Query value, Create value, Enumerate Subkeys,

Notify, Read Control

 

Registry key:

 

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Dhcp\Configurations

permission needed: Full Control, Read

 

For the “Diagnostic Policy Service†service, the issue may occur when

the account Trustedinstaller is missing the permissions for the key

below:

 

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\DPS\Parameters

 

permission needed: Full Control, Read

 

Source: http://support.microsoft.com/kb/943996

 

Full post can be viewed at:

http://www.jasonross.name/2008/12/windows-vista-firewall/

 

 

--

jaross20

------------------------------------------------------------------------

jaross20's Profile: http://forums.techarena.in/members/jaross20.htm

View this thread: http://forums.techarena.in/vista-security/754147.htm

 

http://forums.techarena.in

[Guest WesStrueb]

Hi, jaross20;

 

It is with trepdiation that I would make changes to the registry, but

in this case after taking a restore point, I would - except for two

things:

 

One: I got the 6801 error mentioned above, too - not the error code 5.

I don't know what difference this would make.

 

Two: How do I translate what you;ve posted and what Microsoft has put

on its troubleshooting website into actual registry entries?

 

eg. you say -

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Servic

es\SharedAccess\Epoch

 

Query Value;Set Value

 

What I see in the registry is -

 

"HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Servic

es\SharedAccess\Epoch" in the "directory window" on the left, and -

"(default) REG_SZ (value not set)

Epoch REG_DWORD 0x0000098b (2443)"

 

in the edit window on the right.

 

How does what you say relate to what I see?

 

I am confused.

 

(btw, I'm running Windows Vista Home Premium, on an HP m8120n, w/ 3G

RAM, originally with McAfee Security Center on it, which I pulled off

recently. Connected to local network via ethernet cable.)

 

This may be related to the "Server Error in application "DEFAULT

WEBSITE" I get on several websites I never got that message on before

(like some of HP's links) and on my yahoo messenger advert url

window...)

 

Anyway, please forgive one who has so far managed to avoided editing

the registry in the past and so does not know the Rosetta Stone.

 

Thank you very much.

 

 

--

WesStrueb

------------------------------------------------------------------------

WesStrueb's Profile: http://forums.techarena.in/members/84640.htm

View this thread: http://forums.techarena.in/vista-security/754147.htm

 

http://forums.techarena.in

[Guest mparrish]

When you run Regedit and navagate to

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Servic

es\SharedAccess\Epoch, you have to Right-Click on EPOCH and select

Permissions. This will open the permissions for the EPOCH key. Select

MpsSvc. The permissions for MpsSvc will be displayed with checkmarks

showing you what level of permission the account has (you make have to

select the Special Permissions button at the bottom of the Permissions

window). Make sure that Query Value & Set Value are checked, if they are

not check them and hit OK. You will need to do this for each Registry

Key listed in the MS fix.

 

Personally, this did not fix my issue as the permissions were set

correctly.

 

 

--

mparrish

------------------------------------------------------------------------

mparrish's Profile: http://forums.techarena.in/members/95027.htm

View this thread: http://forums.techarena.in/vista-security/754147.htm

 

http://forums.techarena.in