Windows Fails to Start Windows Firewall Service

Those are the default settings as I recall, so something doesn't appear to
have 'adjusted' the service.

maybe the issue is with mpsdrv, but I'd have thought you'd get a different
error about a dependant service not being able to start.

maybe the issue is with registry access.

This is rather strange. I'll ask around and see if anyone can think of other
things to check.

--
David
Microsoft Windows Networking
This posting is provided "AS IS" with no warranties, and confers no rights.


"Jacob" <Jacob RemoveThis @discussions.microsoft.com> wrote in message
news:F4E5D8E8-85D5-4A7B-903F-784C020151E3@microsoft.com...
> sc qc mpssvc returns:
>
> C:\Users\Jacob>sc qc mpssvc
> [SC] QueryServiceConfig SUCCESS
>
> SERVICE_NAME: mpssvc
> TYPE : 20 WIN32_SHARE_PROCESS
> START_TYPE : 2 AUTO_START
> ERROR_CONTROL : 1 NORMAL
> BINARY_PATH_NAME : C:\Windows\system32\svchost.exe -k
> LocalServiceNoNe
> twork
> LOAD_ORDER_GROUP : NetworkProvider
> TAG : 0
> DISPLAY_NAME : Windows Firewall
> DEPENDENCIES : mpsdrv
> : bfe
> SERVICE_START_NAME : NT AUTHORITY\LocalService
>
> C:\Users\Jacob>
>
>
> Under the Log On tab for the Firewall service, "This Account" is selected
> and the account name "Local Service" with a password written in is
> entered.
>
> Recovery:
> First Failure- Restart Service
> 2nd - Restart Service
> Susequent - Take no action
>
> Fail count reset every day, and the delay between failure restarts is 2
> minutes.
> The "Enable actions for stopes with errors." is not checked, and the rest
> is
> grayed out.
> "David Beder [MSFT]" wrote:
>
>> interesting.
>> how about some output from "sc qc mpssvc". I'm particularly interested in
>> the value for service_start_name.
>>
>> Also, if you can fire up the services control panel, what are the
>> settings
>> on the log-on and recovery tabs?
>>
>> --
>> David
>> Microsoft Windows Networking
>> This posting is provided "AS IS" with no warranties, and confers no
>> rights.
>>
>>
>> "Jacob" <Jacob RemoveThis @discussions.microsoft.com> wrote in message
>> news:CF29D1EA-6F21-42D3-8F7A-86240C4E2064@microsoft.com...
>> > Microsoft Windows [Version 6.0.6000]
>> > Copyright (c) 2006 Microsoft Corporation. All rights reserved.
>> >
>> > C:\Users\Jacob>sc query mpssvc
>> >
>> > SERVICE_NAME: mpssvc
>> > TYPE : 20 WIN32_SHARE_PROCESS
>> > STATE : 1 STOPPED
>> > WIN32_EXIT_CODE : 1066 (0x42a)
>> > SERVICE_EXIT_CODE : 5 (0x5)
>> > CHECKPOINT : 0x0
>> > WAIT_HINT : 0x0
>> >
>> > C:\Users\Jacob>net start mpssvc
>> > The Windows Firewall service is starting.
>> > The Windows Firewall service could not be started.
>> >
>> > A service specific error occurred: 5.
>> >
>> > More help is available by typing NET HELPMSG 3547.
>> >
>> >
>> > C:\Users\Jacob>sc query mpssvc
>> >
>> > SERVICE_NAME: mpssvc
>> > TYPE : 20 WIN32_SHARE_PROCESS
>> > STATE : 1 STOPPED
>> > WIN32_EXIT_CODE : 1066 (0x42a)
>> > SERVICE_EXIT_CODE : 5 (0x5)
>> > CHECKPOINT : 0x0
>> > WAIT_HINT : 0x0
>> >
>> >
>> > "David Beder [MSFT]" wrote:
>> >
>> >> Error 5 is typically 'Access Denied'.
>> >> from an elevated command prompt, type 'net start mpssvc <enter>'. If
>> >> the
>> >> service doesn't start, type 'sc query mpssvc <enter>' and reply back
>> >> with
>> >> the output.
>> >>
>> >> Even if the service does start, we still need to investigate why it
>> >> didn't
>> >> start on its own.
>> >> There are many reasons for it not to start. The easy ones are:
>> >> 1) another firewall on the box has turned it off to prevent
>> >> configuration
>> >> conflicts between the two programs.
>> >> 2) a service the firewall depends on is not starting
>> >> 3) a security profile has been applied to the machine which disables
>> >> the
>> >> service
>> >> 4) domain group policy has turned it off
>> >>
>> >>
>> >> --
>> >> David
>> >> Microsoft Windows Networking
>> >> This posting is provided "AS IS" with no warranties, and confers no
>> >> rights.
>> >>
>> >>
>> >> "Jacob" <Jacob RemoveThis @discussions.microsoft.com> wrote in message
>> >> news:167BAEA5-518C-46D4-BE9C-972596D65C1B@microsoft.com...
>> >> > When I try to start windows fire wall i get a pop up telling me the
>> >> > service
>> >> > isn't running, and I tell the pop-up to start the service.
>> >> >
>> >> > It then says that the service has failed to start.
>> >> >
>> >> > It gives me the service-specific error code 5. (0x5)
>> >> >
>> >> > Any ideas on how to fix this?
>> >> > Any way to reinstall the windows firewall service?
>> >>
>> >>
>> >>
>>
>>
>>

Is there no way to simply reinstall the firewall, overriding the old install,
with original settings?

That way we could eliminate the firewall as the source of the problem,
methinks.

Furthermore, what password goes in those boxes? I never entered one, so do
not know what it is, and could it be possible that a virus adjusted just the
password field?

"David Beder [MSFT]" wrote:

> Those are the default settings as I recall, so something doesn't appear to
> have 'adjusted' the service.
>
> maybe the issue is with mpsdrv, but I'd have thought you'd get a different
> error about a dependant service not being able to start.
>
> maybe the issue is with registry access.
>
> This is rather strange. I'll ask around and see if anyone can think of other
> things to check.
>
> --
> David
> Microsoft Windows Networking
> This posting is provided "AS IS" with no warranties, and confers no rights.
>
>
> "Jacob" <Jacob.DeleteThis@discussions.microsoft.com> wrote in message
> news:F4E5D8E8-85D5-4A7B-903F-784C020151E3@microsoft.com...
> > sc qc mpssvc returns:
> >
> > C:\Users\Jacob>sc qc mpssvc
> > [SC] QueryServiceConfig SUCCESS
> >
> > SERVICE_NAME: mpssvc
> > TYPE : 20 WIN32_SHARE_PROCESS
> > START_TYPE : 2 AUTO_START
> > ERROR_CONTROL : 1 NORMAL
> > BINARY_PATH_NAME : C:\Windows\system32\svchost.exe -k
> > LocalServiceNoNe
> > twork
> > LOAD_ORDER_GROUP : NetworkProvider
> > TAG : 0
> > DISPLAY_NAME : Windows Firewall
> > DEPENDENCIES : mpsdrv
> > : bfe
> > SERVICE_START_NAME : NT AUTHORITY\LocalService
> >
> > C:\Users\Jacob>
> >
> >
> > Under the Log On tab for the Firewall service, "This Account" is selected
> > and the account name "Local Service" with a password written in is
> > entered.
> >
> > Recovery:
> > First Failure- Restart Service
> > 2nd - Restart Service
> > Susequent - Take no action
> >
> > Fail count reset every day, and the delay between failure restarts is 2
> > minutes.
> > The "Enable actions for stopes with errors." is not checked, and the rest
> > is
> > grayed out.
> > "David Beder [MSFT]" wrote:
> >
> >> interesting.
> >> how about some output from "sc qc mpssvc". I'm particularly interested in
> >> the value for service_start_name.
> >>
> >> Also, if you can fire up the services control panel, what are the
> >> settings
> >> on the log-on and recovery tabs?
> >>
> >> --
> >> David
> >> Microsoft Windows Networking
> >> This posting is provided "AS IS" with no warranties, and confers no
> >> rights.
> >>
> >>
> >> "Jacob" <Jacob.DeleteThis@discussions.microsoft.com> wrote in message
> >> news:CF29D1EA-6F21-42D3-8F7A-86240C4E2064@microsoft.com...
> >> > Microsoft Windows [Version 6.0.6000]
> >> > Copyright (c) 2006 Microsoft Corporation. All rights reserved.
> >> >
> >> > C:\Users\Jacob>sc query mpssvc
> >> >
> >> > SERVICE_NAME: mpssvc
> >> > TYPE : 20 WIN32_SHARE_PROCESS
> >> > STATE : 1 STOPPED
> >> > WIN32_EXIT_CODE : 1066 (0x42a)
> >> > SERVICE_EXIT_CODE : 5 (0x5)
> >> > CHECKPOINT : 0x0
> >> > WAIT_HINT : 0x0
> >> >
> >> > C:\Users\Jacob>net start mpssvc
> >> > The Windows Firewall service is starting.
> >> > The Windows Firewall service could not be started.
> >> >
> >> > A service specific error occurred: 5.
> >> >
> >> > More help is available by typing NET HELPMSG 3547.
> >> >
> >> >
> >> > C:\Users\Jacob>sc query mpssvc
> >> >
> >> > SERVICE_NAME: mpssvc
> >> > TYPE : 20 WIN32_SHARE_PROCESS
> >> > STATE : 1 STOPPED
> >> > WIN32_EXIT_CODE : 1066 (0x42a)
> >> > SERVICE_EXIT_CODE : 5 (0x5)
> >> > CHECKPOINT : 0x0
> >> > WAIT_HINT : 0x0
> >> >
> >> >
> >> > "David Beder [MSFT]" wrote:
> >> >
> >> >> Error 5 is typically 'Access Denied'.
> >> >> from an elevated command prompt, type 'net start mpssvc <enter>'. If
> >> >> the
> >> >> service doesn't start, type 'sc query mpssvc <enter>' and reply back
> >> >> with
> >> >> the output.
> >> >>
> >> >> Even if the service does start, we still need to investigate why it
> >> >> didn't
> >> >> start on its own.
> >> >> There are many reasons for it not to start. The easy ones are:
> >> >> 1) another firewall on the box has turned it off to prevent
> >> >> configuration
> >> >> conflicts between the two programs.
> >> >> 2) a service the firewall depends on is not starting
> >> >> 3) a security profile has been applied to the machine which disables
> >> >> the
> >> >> service
> >> >> 4) domain group policy has turned it off
> >> >>
> >> >>
> >> >> --
> >> >> David
> >> >> Microsoft Windows Networking
> >> >> This posting is provided "AS IS" with no warranties, and confers no
> >> >> rights.
> >> >>
> >> >>
> >> >> "Jacob" <Jacob.DeleteThis@discussions.microsoft.com> wrote in message
> >> >> news:167BAEA5-518C-46D4-BE9C-972596D65C1B@microsoft.com...
> >> >> > When I try to start windows fire wall i get a pop up telling me the
> >> >> > service
> >> >> > isn't running, and I tell the pop-up to start the service.
> >> >> >
> >> >> > It then says that the service has failed to start.
> >> >> >
> >> >> > It gives me the service-specific error code 5. (0x5)
> >> >> >
> >> >> > Any ideas on how to fix this?
> >> >> > Any way to reinstall the windows firewall service?
> >> >>
> >> >>
> >> >>
> >>
> >>
> >>
>
>
>

I've always wondered what passwords were used also. I think they're
auto-generated by the system.

Might you have any restore points you can go back to?
I haven't tried this in Vista, but in older versions of Windows, if you ran
the setup cd again, you got a repair option that might put things back into
order. Since Windows Firewall is part of the OS, you can't really just
re-install just that service.

On a slightly different note, how are the states of the BFE and MPSDrv
services?
Anything in the audit logs (ie eventvwr) about this services actually
starting early during the boot sequence? One of the guys I work with was
curious as to whether the service was crashing before you even got to log
on, thus using up the 2-3crashes per boot quota.

--
David
Microsoft Windows Networking
This posting is provided "AS IS" with no warranties, and confers no rights.


"Jacob" <Jacob.RemoveThis@discussions.microsoft.com> wrote in message
news:5A96FE9D-B7EB-4D44-AC0D-15703AC9762C@microsoft.com...
> Is there no way to simply reinstall the firewall, overriding the old
> install,
> with original settings?
>
> That way we could eliminate the firewall as the source of the problem,
> methinks.
>
> Furthermore, what password goes in those boxes? I never entered one, so do
> not know what it is, and could it be possible that a virus adjusted just
> the
> password field?
>
> "David Beder [MSFT]" wrote:
>
>> Those are the default settings as I recall, so something doesn't appear
>> to
>> have 'adjusted' the service.
>>
>> maybe the issue is with mpsdrv, but I'd have thought you'd get a
>> different
>> error about a dependant service not being able to start.
>>
>> maybe the issue is with registry access.
>>
>> This is rather strange. I'll ask around and see if anyone can think of
>> other
>> things to check.
>>
>> --
>> David
>> Microsoft Windows Networking
>> This posting is provided "AS IS" with no warranties, and confers no
>> rights.
>>
>>
>> "Jacob" <Jacob.RemoveThis@discussions.microsoft.com> wrote in message
>> news:F4E5D8E8-85D5-4A7B-903F-784C020151E3@microsoft.com...
>> > sc qc mpssvc returns:
>> >
>> > C:\Users\Jacob>sc qc mpssvc
>> > [SC] QueryServiceConfig SUCCESS
>> >
>> > SERVICE_NAME: mpssvc
>> > TYPE : 20 WIN32_SHARE_PROCESS
>> > START_TYPE : 2 AUTO_START
>> > ERROR_CONTROL : 1 NORMAL
>> > BINARY_PATH_NAME : C:\Windows\system32\svchost.exe -k
>> > LocalServiceNoNe
>> > twork
>> > LOAD_ORDER_GROUP : NetworkProvider
>> > TAG : 0
>> > DISPLAY_NAME : Windows Firewall
>> > DEPENDENCIES : mpsdrv
>> > : bfe
>> > SERVICE_START_NAME : NT AUTHORITY\LocalService
>> >
>> > C:\Users\Jacob>
>> >
>> >
>> > Under the Log On tab for the Firewall service, "This Account" is
>> > selected
>> > and the account name "Local Service" with a password written in is
>> > entered.
>> >
>> > Recovery:
>> > First Failure- Restart Service
>> > 2nd - Restart Service
>> > Susequent - Take no action
>> >
>> > Fail count reset every day, and the delay between failure restarts is 2
>> > minutes.
>> > The "Enable actions for stopes with errors." is not checked, and the
>> > rest
>> > is
>> > grayed out.
>> > "David Beder [MSFT]" wrote:
>> >
>> >> interesting.
>> >> how about some output from "sc qc mpssvc". I'm particularly interested
>> >> in
>> >> the value for service_start_name.
>> >>
>> >> Also, if you can fire up the services control panel, what are the
>> >> settings
>> >> on the log-on and recovery tabs?
>> >>
>> >> --
>> >> David
>> >> Microsoft Windows Networking
>> >> This posting is provided "AS IS" with no warranties, and confers no
>> >> rights.
>> >>
>> >>
>> >> "Jacob" <Jacob.RemoveThis@discussions.microsoft.com> wrote in message
>> >> news:CF29D1EA-6F21-42D3-8F7A-86240C4E2064@microsoft.com...
>> >> > Microsoft Windows [Version 6.0.6000]
>> >> > Copyright (c) 2006 Microsoft Corporation. All rights reserved.
>> >> >
>> >> > C:\Users\Jacob>sc query mpssvc
>> >> >
>> >> > SERVICE_NAME: mpssvc
>> >> > TYPE : 20 WIN32_SHARE_PROCESS
>> >> > STATE : 1 STOPPED
>> >> > WIN32_EXIT_CODE : 1066 (0x42a)
>> >> > SERVICE_EXIT_CODE : 5 (0x5)
>> >> > CHECKPOINT : 0x0
>> >> > WAIT_HINT : 0x0
>> >> >
>> >> > C:\Users\Jacob>net start mpssvc
>> >> > The Windows Firewall service is starting.
>> >> > The Windows Firewall service could not be started.
>> >> >
>> >> > A service specific error occurred: 5.
>> >> >
>> >> > More help is available by typing NET HELPMSG 3547.
>> >> >
>> >> >
>> >> > C:\Users\Jacob>sc query mpssvc
>> >> >
>> >> > SERVICE_NAME: mpssvc
>> >> > TYPE : 20 WIN32_SHARE_PROCESS
>> >> > STATE : 1 STOPPED
>> >> > WIN32_EXIT_CODE : 1066 (0x42a)
>> >> > SERVICE_EXIT_CODE : 5 (0x5)
>> >> > CHECKPOINT : 0x0
>> >> > WAIT_HINT : 0x0
>> >> >
>> >> >
>> >> > "David Beder [MSFT]" wrote:
>> >> >
>> >> >> Error 5 is typically 'Access Denied'.
>> >> >> from an elevated command prompt, type 'net start mpssvc <enter>'.
>> >> >> If
>> >> >> the
>> >> >> service doesn't start, type 'sc query mpssvc <enter>' and reply
>> >> >> back
>> >> >> with
>> >> >> the output.
>> >> >>
>> >> >> Even if the service does start, we still need to investigate why it
>> >> >> didn't
>> >> >> start on its own.
>> >> >> There are many reasons for it not to start. The easy ones are:
>> >> >> 1) another firewall on the box has turned it off to prevent
>> >> >> configuration
>> >> >> conflicts between the two programs.
>> >> >> 2) a service the firewall depends on is not starting
>> >> >> 3) a security profile has been applied to the machine which
>> >> >> disables
>> >> >> the
>> >> >> service
>> >> >> 4) domain group policy has turned it off
>> >> >>
>> >> >>
>> >> >> --
>> >> >> David
>> >> >> Microsoft Windows Networking
>> >> >> This posting is provided "AS IS" with no warranties, and confers no
>> >> >> rights.
>> >> >>
>> >> >>
>> >> >> "Jacob" <Jacob.RemoveThis@discussions.microsoft.com> wrote in message
>> >> >> news:167BAEA5-518C-46D4-BE9C-972596D65C1B@microsoft.com...
>> >> >> > When I try to start windows fire wall i get a pop up telling me
>> >> >> > the
>> >> >> > service
>> >> >> > isn't running, and I tell the pop-up to start the service.
>> >> >> >
>> >> >> > It then says that the service has failed to start.
>> >> >> >
>> >> >> > It gives me the service-specific error code 5. (0x5)
>> >> >> >
>> >> >> > Any ideas on how to fix this?
>> >> >> > Any way to reinstall the windows firewall service?
>> >> >>
>> >> >>
>> >> >>
>> >>
>> >>
>> >>
>>
>>
>>

There is no repair option with Windows Vista (stupid)
I have no restore points.


BFE is running fine
MPSDrv doesn't show up in the service list in task manager, interestingly
enough...
I did sc query MPSDrv instead, and STATE = 4 (Running)
sc query BFE (just for kicks) STATE = 4 (running)

Using the event viewer i found two errors in the last hour from source
Service Control Manager Eventlog Provider. (My computer was turned off for
about 5 hours before this) In the last 7 days these errors have repeated 15
times and 14 times respectively.

One of them seems a bit familiar. "The Windows Firewall service terminated
with service-specific error 5 (0x5)."

The other one says
"The following boot-start or system-start driver(s) failed to load:
i8042prt"

I also have a print error, but it is probably because my printer is turned
off, and an error from source LSM that reads
"Terminal Service start failed. The relevant status code was The service
cannot be started, either because it is disabled or because it has no enabled
devices associated with it.
.."

The print error and the LSM error are also at around 15 repeats in the last
7 days


The Print error says "The print spooler failed to share printer hp psc 1200
series with shared resource name JOSHUA'S PRINTER. Error 2114. The printer
cannot be used by others on the network."

Somehow not surprised here, i couldn't get it to share the printer.

I noticed a strange side-effect of perhaps having the firewall as messed up
as it is right now, I can't succesfully open ports on this computer, and I'm
100% sure I'm forwarding properly and setting up my static IP properly.

On a side note, I'm going away for 5 weeks as of saturday so I may be idle
for a while.

Thanks Mr. Beder
"David Beder [MSFT]" wrote:

> I've always wondered what passwords were used also. I think they're
> auto-generated by the system.
>
> Might you have any restore points you can go back to?
> I haven't tried this in Vista, but in older versions of Windows, if you ran
> the setup cd again, you got a repair option that might put things back into
> order. Since Windows Firewall is part of the OS, you can't really just
> re-install just that service.
>
> On a slightly different note, how are the states of the BFE and MPSDrv
> services?
> Anything in the audit logs (ie eventvwr) about this services actually
> starting early during the boot sequence? One of the guys I work with was
> curious as to whether the service was crashing before you even got to log
> on, thus using up the 2-3crashes per boot quota.
>
> --
> David
> Microsoft Windows Networking
> This posting is provided "AS IS" with no warranties, and confers no rights.
>
>
> "Jacob" <Jacob DeleteThis @discussions.microsoft.com> wrote in message
> news:5A96FE9D-B7EB-4D44-AC0D-15703AC9762C@microsoft.com...
> > Is there no way to simply reinstall the firewall, overriding the old
> > install,
> > with original settings?
> >
> > That way we could eliminate the firewall as the source of the problem,
> > methinks.
> >
> > Furthermore, what password goes in those boxes? I never entered one, so do
> > not know what it is, and could it be possible that a virus adjusted just
> > the
> > password field?
> >
> > "David Beder [MSFT]" wrote:
> >
> >> Those are the default settings as I recall, so something doesn't appear
> >> to
> >> have 'adjusted' the service.
> >>
> >> maybe the issue is with mpsdrv, but I'd have thought you'd get a
> >> different
> >> error about a dependant service not being able to start.
> >>
> >> maybe the issue is with registry access.
> >>
> >> This is rather strange. I'll ask around and see if anyone can think of
> >> other
> >> things to check.
> >>
> >> --
> >> David
> >> Microsoft Windows Networking
> >> This posting is provided "AS IS" with no warranties, and confers no
> >> rights.
> >>
> >>
> >> "Jacob" <Jacob DeleteThis @discussions.microsoft.com> wrote in message
> >> news:F4E5D8E8-85D5-4A7B-903F-784C020151E3@microsoft.com...
> >> > sc qc mpssvc returns:
> >> >
> >> > C:\Users\Jacob>sc qc mpssvc
> >> > [SC] QueryServiceConfig SUCCESS
> >> >
> >> > SERVICE_NAME: mpssvc
> >> > TYPE : 20 WIN32_SHARE_PROCESS
> >> > START_TYPE : 2 AUTO_START
> >> > ERROR_CONTROL : 1 NORMAL
> >> > BINARY_PATH_NAME : C:\Windows\system32\svchost.exe -k
> >> > LocalServiceNoNe
> >> > twork
> >> > LOAD_ORDER_GROUP : NetworkProvider
> >> > TAG : 0
> >> > DISPLAY_NAME : Windows Firewall
> >> > DEPENDENCIES : mpsdrv
> >> > : bfe
> >> > SERVICE_START_NAME : NT AUTHORITY\LocalService
> >> >
> >> > C:\Users\Jacob>
> >> >
> >> >
> >> > Under the Log On tab for the Firewall service, "This Account" is
> >> > selected
> >> > and the account name "Local Service" with a password written in is
> >> > entered.
> >> >
> >> > Recovery:
> >> > First Failure- Restart Service
> >> > 2nd - Restart Service
> >> > Susequent - Take no action
> >> >
> >> > Fail count reset every day, and the delay between failure restarts is 2
> >> > minutes.
> >> > The "Enable actions for stopes with errors." is not checked, and the
> >> > rest
> >> > is
> >> > grayed out.
> >> > "David Beder [MSFT]" wrote:
> >> >
> >> >> interesting.
> >> >> how about some output from "sc qc mpssvc". I'm particularly interested
> >> >> in
> >> >> the value for service_start_name.
> >> >>
> >> >> Also, if you can fire up the services control panel, what are the
> >> >> settings
> >> >> on the log-on and recovery tabs?
> >> >>
> >> >> --
> >> >> David
> >> >> Microsoft Windows Networking
> >> >> This posting is provided "AS IS" with no warranties, and confers no
> >> >> rights.
> >> >>
> >> >>
> >> >> "Jacob" <Jacob DeleteThis @discussions.microsoft.com> wrote in message
> >> >> news:CF29D1EA-6F21-42D3-8F7A-86240C4E2064@microsoft.com...
> >> >> > Microsoft Windows [Version 6.0.6000]
> >> >> > Copyright (c) 2006 Microsoft Corporation. All rights reserved.
> >> >> >
> >> >> > C:\Users\Jacob>sc query mpssvc
> >> >> >
> >> >> > SERVICE_NAME: mpssvc
> >> >> > TYPE : 20 WIN32_SHARE_PROCESS
> >> >> > STATE : 1 STOPPED
> >> >> > WIN32_EXIT_CODE : 1066 (0x42a)
> >> >> > SERVICE_EXIT_CODE : 5 (0x5)
> >> >> > CHECKPOINT : 0x0
> >> >> > WAIT_HINT : 0x0
> >> >> >
> >> >> > C:\Users\Jacob>net start mpssvc
> >> >> > The Windows Firewall service is starting.
> >> >> > The Windows Firewall service could not be started.
> >> >> >
> >> >> > A service specific error occurred: 5.
> >> >> >
> >> >> > More help is available by typing NET HELPMSG 3547.
> >> >> >
> >> >> >
> >> >> > C:\Users\Jacob>sc query mpssvc
> >> >> >
> >> >> > SERVICE_NAME: mpssvc
> >> >> > TYPE : 20 WIN32_SHARE_PROCESS
> >> >> > STATE : 1 STOPPED
> >> >> > WIN32_EXIT_CODE : 1066 (0x42a)
> >> >> > SERVICE_EXIT_CODE : 5 (0x5)
> >> >> > CHECKPOINT : 0x0
> >> >> > WAIT_HINT : 0x0
> >> >> >
> >> >> >
> >> >> > "David Beder [MSFT]" wrote:
> >> >> >
> >> >> >> Error 5 is typically 'Access Denied'.
> >> >> >> from an elevated command prompt, type 'net start mpssvc <enter>'.
> >> >> >> If
> >> >> >> the
> >> >> >> service doesn't start, type 'sc query mpssvc <enter>' and reply
> >> >> >> back
> >> >> >> with
> >> >> >> the output.
> >> >> >>
> >> >> >> Even if the service does start, we still need to investigate why it
> >> >> >> didn't
> >> >> >> start on its own.
> >> >> >> There are many reasons for it not to start. The easy ones are:
> >> >> >> 1) another firewall on the box has turned it off to prevent
> >> >> >> configuration
> >> >> >> conflicts between the two programs.
> >> >> >> 2) a service the firewall depends on is not starting
> >> >> >> 3) a security profile has been applied to the machine which
> >> >> >> disables
> >> >> >> the
> >> >> >> service
> >> >> >> 4) domain group policy has turned it off
> >> >> >>
> >> >> >>
> >> >> >> --
> >> >> >> David
> >> >> >> Microsoft Windows Networking
> >> >> >> This posting is provided "AS IS" with no warranties, and confers no
> >> >> >> rights.
> >> >> >>
> >> >> >>
> >> >> >> "Jacob" <Jacob DeleteThis @discussions.microsoft.com> wrote in message
> >> >> >> news:167BAEA5-518C-46D4-BE9C-972596D65C1B@microsoft.com...
> >> >> >> > When I try to start windows fire wall i get a pop up telling me
> >> >> >> > the
> >> >> >> > service
> >> >> >> > isn't running, and I tell the pop-up to start the service.
> >> >> >> >
> >> >> >> > It then says that the service has failed to start.
> >> >> >> >
> >> >> >> > It gives me the service-specific error code 5. (0x5)
> >> >> >> >
> >> >> >> > Any ideas on how to fix this?
> >> >> >> > Any way to reinstall the windows firewall service?
> >> >> >>
> >> >> >>
> >> >> >>
> >> >>
> >> >>
> >> >>
> >>
> >>
> >>
>
>
>

Glad to have finally found this thread. I am having the same issue as
Jacob. I am getting the same output from the "SC XX" query commands. This
is the only Vista machine in a 2K3 domain. No errors reported from group
policy and no changes to policy in months. Error began on am of 5/29/07.
While I regularly install/uninstall various products, and sure, any of them
could be an issue, none would have been security related as I find the
Windows firewall adequate to my needs. No reported spyware via defender or
adaware which I installed first time this evening. Machine is a thinkpad
t60p with Vista business clean install. Any help/thoughts would be greatly
appreciated.


John Galley
JWG Consulting, LLC
443-451-3378

Heh, I'm not the only one!!

"jwgalley" wrote:

> Glad to have finally found this thread. I am having the same issue as
> Jacob. I am getting the same output from the "SC XX" query commands. This
> is the only Vista machine in a 2K3 domain. No errors reported from group
> policy and no changes to policy in months. Error began on am of 5/29/07.
> While I regularly install/uninstall various products, and sure, any of them
> could be an issue, none would have been security related as I find the
> Windows firewall adequate to my needs. No reported spyware via defender or
> adaware which I installed first time this evening. Machine is a thinkpad
> t60p with Vista business clean install. Any help/thoughts would be greatly
> appreciated.
>
>
> John Galley
> JWG Consulting, LLC
> 443-451-3378
>
>
>
>