Windows defender firewall authorization driver как включить

Windows Defender Firewall Authorization Driver is a kernel mode driver that provides deep inspection services on inbound and outbound network traffic.

Default Settings

Startup type: Manual
Display name: Windows Defender Firewall Authorization Driver
Service name: mpsdrv
Service type: kernel
Error control: normal
Group: network
Path: %SystemRoot%\System32\drivers\mpsdrv.sys
Registry key: HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\mpsdrv

Default Behavior

Windows Defender Firewall Authorization Driver is a kernel device driver. In Windows 10 it is starting only if the user, an application or another service starts it. If Windows Defender Firewall Authorization Driver fails to start, the failure details are being recorded into Event Log. Then Windows 10 will start up and notify the user that the mpsdrv service has failed to start due to the error.

Dependencies

While Windows Defender Firewall Authorization Driver is stopped, the Windows Defender Firewall service cannot be launched.

Restore Default Startup Configuration of Windows Defender Firewall Authorization Driver

1. Run the Command Prompt as an administrator.

2. Copy the command below, paste it into the command window and press ENTER:

sc config mpsdrv start= demand

3. Close the command window and restart the computer.

The mpsdrv service is using the mpsdrv.sys file that is located in the C:\Windows\System32\drivers directory. If the file is removed or corrupted, read this article to restore its original version from Windows 10 installation media.

The “Windows could not start the Windows Firewall Service” is a general error that occurs whenever your system can’t run the Firewall Service. There are many possible error codes that come with this error. The Error 1068 code indicates that the dependencies of the service could not start, leading to this error.

Since this indicates problems with the dependency service or accounts, you need to troubleshoot these processes or groups to resolve the error. Sometimes the Firewall Service itself may have some issues which you can resolve by reinstalling it.

There may be a few more additional solutions you need to apply depending on the exact cause on your end. In this article, we have explained all the probable causes along with their corresponding solutions.

What Causes “Windows Could Not Start the Windows Firewall Service on Local Computer”

Here are the potential causes of the above error:

  • Dependency services failing to start.
  • Errors with the Windows Defender Firewall Authorization Driver.
  • System file corruption.
  • Malware infection.
  • Registry permission issues.

How to Fix “Windows Could Not Start the Windows Firewall Service on Local Computer”

First, make sure there are no internet connection issues. Then, apply the possible solutions below to successfully start Windows Firewall service on your system.

Check Necessary Services

Windows Firewall depends on a few services for its operation. So the first thing you should do is make sure they are running properly. Here’s how you can do so and set the proper setting to run them automatically:

  1. Boot your computer in safe mode. To do so,
    • Open Run by pressing Win + R.
    • Type cmd and press Ctrl + Shift + Enter to open the Elevated Command Prompt.
    • Enter the command bcdedit /set {current} safeboot minimal
      bcdedit-safeboot

    • Restart your PC.
  2. After booting in safe mode, open Run.
  3. Type services.msc and press Ctrl + Shift + Enter to open Windows Services as admin.
  4. Look for the following services and check their Status:
    • Base Filtering Engine
    • Remote Procedure Call (RPC)
    • DCOM Server Process Launcher
    • RPC Endpoint Mapper
    • Network Store Interface Service
    • Windows Defender Firewall
      base-filtering-engine

  5. If any service is not running or its Startup Type doesn’t show Automatic,
    • Double-click on it.
    • Set the Startup type to Automatic and click OK.
  6. After that, open the Elevated Command Prompt and enter the command below to disable safe mode on the next boot:
    bcdedit /deletevalue {current} safeboot
    bcdedit-safeboot-disable

Restart your PC and check if you still encounter the issue.

Restore Windows Defender Firewall Authorization Driver

Your Windows Defender Firewall uses the Windows Defender Firewall Authorization Driver mspdrv.sys to run properly. So, you also need to make sure this driver has no issues. Here’s how you can do so:

  1. Open the Elevated Command Prompt.
  2. Enter the following command to check the status of the driver: sc qc mpsdrv
    sc-qc-mpsdrv

  3. You need to make sure the START_TYPE shows DEMAND_START. If it’s different, enter the command: sc config mpsdrv start=demand
  4. Restart your PC and check if the error occurs again.
  5. You can also run sfc /verifyfile=C:\windows\system32\drivers\mpsdrv.sys on the Elevated Prompt to check if the file has some issues.
    sfc-verifyfile

  6. If it finds an integrity violation, try running sfc /scanfile=C:\windows\system32\drivers\mpsdrv.sys

Also, you can’t run these commands if the file is missing so check the location through the file explorer in such cases. If the file is missing or SFC can’t fix the corruption, you need to transfer a working copy from a different computer.

Reinstall Windows Firewall

You can also try reinstalling the Windows Firewall altogether to resolve any errors within. This resets any changes you made to the Firewall profile, however it is better than not being able to run this process at all. Here’s what you need to do:

  1. Open the Elevated Command Prompt.
  2. Enter the following commands:
    • Rundll32 setupapi,InstallHinfSection Ndi-Steelhead 132 %windir%\inf\netrass.inf
    • sc start mpssvc
    • netsh advfirewall reset
    • netsh advfirewall set domainprofile state on
    • netsh advfirewall set privateprofile state on
      reset-firewall

Restart your PC and check if the issue resolves.

Repair Corrupt System Files

We have already mentioned that the Windows Firewall service relies on many dependencies. So, if any one of such files is corrupt you will experience the above error. You need to run the System File Checker on all system files to check for and repair any potential corruption to prevent such issues. To do so,

  1. Open the Elevated Command Prompt.
  2. Enter the command sfc /scannow
    sfc-scannow-2

Scan for Malware

By default, Windows is configured to have the proper settings and files for running Windows Firewall. So unless you made the unnecessary changes, any errors in the settings or files are likely due to some malware script.

The above methods may help resolve your issue, but you need to detect and remove the malware to prevent the error from occurring again. Here’s how you can do so using the built-in Windows Security or Defender:

  1. Open Run and enter ms-settings:windowsdefender
  2. Go to Virus & threat protection and then Scan options.
    virus-threat-protection-2

  3. Check Full scan and click on Scan now.
    full-scan-scan-now-malware

Disable Third-Party Antivirus

Many third-party antiviruses are responsible for blocking dependency services from starting. While they may actually contain malware or threats, usually it’s a false positive.

Windows already contains a fantastic antivirus, the Windows Defender, so you don’t really need other security apps. If you still want to use them, you can try disabling them temporarily and see if the Windows Firewall service can start without any issues. However, make sure that your computer does not contain any threats before doing so.

The process to disable the antivirus differs between the different software. So, we recommend checking the official website if necessary.

Set LocalService and NetworkService Users to Admin Group

You can also encounter this error if there are permission issues related to the LocalService or NetworkService groups. Windows Firewall logs on through the LocalService account so such issues prevent starting the Firewall.

You can try creating a new user account to avoid this issue. However, if you want to resolve the problem in your original account, you can try adding the above users to the Administrators group which bypasses the original permissions. Here’s how you can do so:

  1. Open the Elevated Command Prompt
  2. Enter the following commands:
    • net localgroup administrators localservice /add
    • net localgroup administrators networkservice /add
      net-localgroup-administrators-add-localservice-networkservice

Restart your PC and check if the issue persists.

Perform a System Restore

If you have a suitable restore point where the Firewall could start without any issues, you can try restoring your system back to that point. This takes care of any registry errors as well as system file corruption that your system encountered afterward. To do so,

  1. Open Run and enter rstrui to launch the app.
  2. Select the appropriate restore point and follow the on-screen instructions.
    select-restore-point

Во все современные версии Windows встроен брандмауэр Windows Defender Firewall. Это встроенный программный межсетевой экран, который защищает Windows от несанкционированного внешнего доступа к компьютеру и запущенным на нем службам. По умолчанию брандмауэр Windows включен и защищает все сетевые интерфейсы компьютера. Брандмауэр блокирует все входящие подключения и разрешает все исходящие.

Содержание:

  • Отключить/включить брандмауэр из панели управления Windows
  • Отключить Windows Firewall через GPO
  • Как отключить или включить брандмауэр Windows с помощью PowerShell?

В подавляющем большинстве случае Windows Firewall должен быть включен. Если вам нужно разрешить доступ к компьютеру для определенной службы или IP адреса, просто создайте разрешающее правило. Однако в некоторых ситуациях администратору нужно полностью отключить Windows Defender Firewall для проверки сетевых подключений. В этой статье мы покажем несколько способов, как отключить и включить встроенный брандмауэр Windows.

Отключить/включить брандмауэр из панели управления Windows

В современных версиях Windows 10 и 11 для управления брандмауэром используется панель Безопасность Windows (Windows Security).

Если панель Windows Security не открывается или повреждена, вы можете восстановить ее.

  1. Перейдите в меню Параметры (Settings -> Update & Security -> Windows Security) или выполните команду
    windowsdefender://network/
    ;
  2. Выберите раздел Firewall and network protection;
    Настройка файервола в windows

  3. По очереди щелкните по каждому из трех сетевых профилей (Domain, Private и Public) и отключите Microsoft Defender Firewall;
    Отключить брандмауэр для каждого сетевого профиля

    ,

  4. Подтвердите отключение в окне User Account Control.

В Windows для каждого сетевого подключения используется один из трех сетевых профилей:

  • Domain – применяется для компьютеров, которые добавлены в домен AD
  • Private – для небольших офисных LAN, рабочих групп и домашней сети
  • Public – для общественных сетей (кафе, аэропорты)

В зависимости от типа сети к сетевому интерфейсу применяются различные правила брандмауэра и настройки обнаружения Windows в сетевом окружении. Вы можете изменить профиль сети подключения как описано тут.

В предыдущих версиях Windows и в Windows Server 2012R2/2016/2019 можно отключить брандмауэр через классическую панель управления «Windows Firewall with Advanced Security«:

  1. Откройте консоль
    firewall.cpl
    ;
  2. Щелкните по Turn Windows Defender Firewall on or off;
    Панель управления Windows Firewall with Advanced Security

  3. Отключите Windows Defender firewall для всех типов сетей.
    отключить Windows Defender Firewall для всех сетевых профилей

Если на компьютере есть несколько сетевых интерфейсов, вы можете отключить файервол только для некоторых из них.

  1. Нажмите кнопку Advanced Settings -> Windows Defender Firewall properties;
    Настройки Windows Defender Firewall

  2. В настройках каждого сетевого профиля есть раздел Protected network connections. Нажмите кнопку Customize;
  3. Снимите галки с тех сетевых интерфейсов, для которых нужно отключить брандмауэр.
    Отключить брандмауэр только для определенных сетевых подключений

  4. Аналогичным образом отключите защиту сетевых интерфейсов брандмуэром в настройках других сетевых профилей.

Когда вы отключаете брандмауэр, в трее начнет отображаться соответствующее уведомление.

Чтобы скрыть это всплывающее уведомление, добавьте следующий параметр реестра:

reg add "HKLM\Software\Microsoft\Windows Defender Security Center\Notifications" /v "DisableNotifications" /t REG_DWORD /d "1" /f

Обратите внимание, что в Windows есть отдельная системная служба Windows Defender Firewall (
mpssvc
)
. Если вы отключите или приостановите эту службу, это не отключит брандмауэр до тех пор, пока вы сами не отключите защиту для сетевых профилей.

служба Windows Defender Firewall (mpssvc)

Однако через остановку служб вы можете отключить встроенный антивирус Защитник Windows.

Отключить Windows Firewall через GPO

Вы можете отключить Windows Firewall с помощью групповых политик.

На отдельном компьютере нужно использовать консоль редактора локальной групповой политики (
gpedit,msc
), а в доменной среде нужно создать новую GPO с помощью консоли управления GPMC.

  1. Откройте GPO и перейдите в раздел Computer Configuration -> Administrative Templates -> Network -> Network Connections -> Windows Firewall -> Domain Profile.
  2. Откройте параметр “Windows Firewall: Protect all network connections” и измените значение на Disabled;
    Групповая политика для отключения защиты Windows Firewall

  3. Аналогичным образом измените параметр в секции Standard Profile;
  4. Обновите настройки GPO на компьютере и проверьте, что брандмауэр для доменного профиля отключен;
    GPO отключила брандмауер для доменного профиля

  5. Если компьютер будет подключен к сети, отличной от доменной, Windows Firewall будет защищать такое подключение.
  6. Если вы хотите отключить брандмауэр для всех сетевых профилей, перейдите в раздел GPO Computer Configuration -> Windows Settings -> Security Settings -> Windows Firewall with Advanced Security. Отключите файервол на вкладках всех трех сетевых профилей.
    Отключить файервол через групповую политику

После того, как вы отключили Windows Firewall через GPO, пользователь не сможет включить его вручную через панель управления.

Как отключить или включить брандмауэр Windows с помощью PowerShell?

Для управления Windows Firewall из командной строки можно использовать PowerShell.

Проверьте, что брандмауэр включен для всех трех сетевых профилей:

Get-NetFirewallProfile | Format-Table Name, Enabled

PowerShell - проверить состояние брандмауэра

Можно отключить брандмауэр только для одного сетевого профиля:

Set-NetFirewallProfile -Profile Domain -Enabled False

Или отключить firewall сразу для всех сетевых профилей:

Set-NetFirewallProfile -Profile Domain, Public, Private -Enabled False

Set-NetFirewallProfile - отключить файервол в Windows

Чтобы включить Windows Defender, выполните команду:

Set-NetFirewallProfile -Profile Domain, Public, Private -Enabled True

Вы можете отключить защиту брандмауэра для конкретного сетевого подключения. Чтобы узнать имя сетевого подключения, выведите их список:

Get-NetAdapter

Теперь можно отключить файервол для выбранного интерфейса:

Set-NetFirewallProfile -Profile Domain, Public, Private -DisabledInterfaceAliases "My_Internal_NIC1"

Вывести список сетевых адаптеров, которые исключены из файервола:

Get-NetFirewallProfile | select Name,Enabled,DisabledInterfaceAliases

PowerShell - отключить файервол для одного сетевого интерфейса

Очистить список исключений:

Set-NetFirewallProfile -Profile Domain,Public,Private -DisabledInterfaceAliases @()

Fix Windows Firewall problems in Windows 10: A firewall is an inbuilt security feature in Windows 10 which protects & prevent malicious attacks on your system. Windows Firewall is one of the best security features of Windows 10 which prevents unauthorized access to your PC. Firewall block harmful programs & apps to infect your system with a virus or malware. It is regarded as the first layer of defense for your PC. Therefore, it is always recommended to make sure your Windows Firewall is turned ON.

What is the Windows Firewall?

Firewall: A Firewall is a Network Security system that monitors & controls the incoming and outgoing network traffic based on predetermined security rules. A firewall basically acts as a barrier between the incoming network and your computer network that allows only those networks to pass through which according to predetermined rules are considered to be trusted networks and block untrusted networks. The Windows Firewall also helps in keeping unauthorized users away from accessing resources or files of your computer by blocking them. So a Firewall is a very important feature for your computer and it is absolutely necessary if you want your PC to be safe & secure.

Fix Windows Firewall problems in Windows 10

Now everything about Firewall sounds wonderful but what happens when you can’t turn on your Firewall? Well, users are facing this issue exactly and worried about the security of their system. The problem you face with Windows Firewall can be categorized into various error codes such as 0x80004015, Event ID: 7024, Error 1068 and others. So if you stumble upon any of these Windows Firewall errors, this article will give you comprehensive details about working methods to fix the firewall issue in Windows 10.

Table of Contents

Make sure to create a restore point just in case something goes wrong.

Method 1: Download Windows Firewall Troubleshooter

One of the best and easiest way to solve this problem is to download the official Windows Firewall Troubleshooter from the Microsoft website. 

1.Download the Windows Firewall Troubleshooter from here.

2.Now you need to double-click on the downloaded file after which you will see the below dialogue box.

3.To continue, click on the Next button.

4.Follow the on-screen instruction to run the Troubleshooter.

5.If everything is working properly, you can close the troubleshooter.

If the troubleshooter doesn’t fix the problem, you need to click on the View Detailed information to check what errors are not fixed. Having information about the errors you can move further to fix Windows Firewall problems.

Can close the troubleshooter | Fix Windows Firewall problems in Windows 10

Method 2: Reset Windows Firewall Settings to Default

If the troubleshooter did not find any solution to the problem, then the issue can be entirely different which may be beyond the scope of troubleshooter. This happens when the settings configured for your Firewall might have become corrupted which is way troubleshooter wasn’t able to fix the issue. In such cases, you need to reset the Windows Firewall settings to default which may fix Windows Firewall problems in Windows 10. However, after you reset the Windows Firewall, you need to reconfigure the apps permission through the Firewall.

1.Type control panel in Windows Search bar then click on Control Panel from the search result.

Open Control Panel by searching in search bar

2.Select System and Security option from the Control Panel window.

Open Control Panel and click on System and Security

3.Now click on Windows Defender Firewall. 

Under System and Security click on Windows Defender Firewall | Fix Windows Firewall problems in Windows 10

4.Next, from the left-hand window pane, click on the Restore Defaults link.

Click on Restore Defaults under Windows Defender Firewall Settings

5.Now again click on the Restore Defaults button.

Click on the Restore Defaults button | Fix Windows Firewall problems in Windows 10

6.Click on Yes to confirm the changes.

Allow Apps Through Windows Firewall

1.Open Control Panel by searching it under the Windows Search bar.

2.Click on System and Security then click on the Windows Firewall.

Click on the Windows Firewall | Fix Windows Firewall problems

3.On the left-hand side window pane, you need to click on Allow an app or feature through Windows Defender Firewall.

Click on Allow an app or feature through Windows Firewall on the left pane

4.Here you need to click on Change settings. You need to have admin access to access the Settings.

Click on Change settings under Windows Defender Firewall Allowed Apps

5.Now you to checkmark the particular app or service which you want to allow the Windows Firewall.

6.Make sure you checkmark under Private in case you want that app to communicate in the local network. In case, you want that particular app to communicate through the Firewall on the Internet, then checkmark under the Public option.

7.Once finished, review everything then click on OK to save changes.

Method 3: Scan Your System

A Virus is a malicious software program that spreads at a very fast speed from one device to another. Once Internet worm or other malware enters your device, it creates havoc for the user and can cause Windows Firewall problems. So it is possible that there is some malicious code on your PC which can harm your Firewall as well. To deal with malware or viruses it is advised to scan your device with reputed Antivirus software in order to fix Windows Firewall problems. So use this guide to learn more about how to use Malwarebytes Anti-Malware.

Beware of Worms and Malware | Fix Windows Firewall problems in Windows 10

Method 4: Restart Windows Defender Firewall Service

Let’s start with restarting the Windows Firewall service. It may be possible that something disrupted its functioning, hence restarting the Firewall service may help you fix Windows Firewall problems in Windows 10.

1.Press Windows key + R then type services.msc and hit Enter.

2.Locate Windows Defender Firewall under the service.msc window.

Locate Windows Defender Firewall | Fix Windows Firewall problems

3.Right-click on Windows Defender Firewall and select the Restart option.

4.Again right-click on Windows Defender Firewall and choose Properties.

Right Click on Windows Defender and choose Properties

5.Make sure that the startup type is set to Automatic. 

Ensure that Startup is set to Automatic | Fix Windows Firewall problems

Method 5: Check Windows Firewall Authorization Driver

You need to check whether the Windows Firewall Authorization Driver (mdsdrv.sys) is working properly or not. In some cases, the main cause of Windows Firewall not working properly can be traced back to the mdsdrv.sys driver. 

1.Press Windows Key + R then type devmgmt.msc and hit Enter to open Device Manager.

2.Next, from the View tab click on Show hidden devices.

3.Look for Windows Firewall Authorization Driver (it will have a gold gear icon).

4.Now double-click on it to open its Properties.

5.Switch to the Driver tab and make sure that the Startup type is set to ‘Demand‘.

6.Click Apply followed by OK to save changes.

 7.Reboot your PC to implement the changes.

Recommended:

  • Where is NOTEPAD in Windows 10? 6 Ways to open it!
  • Delete a Folder or File using Command Prompt (CMD)
  • Fix Unable to Activate Windows Defender Firewall
  • Remove Android Viruses Without a Factory Reset

I hope this article was helpful and now you can easily fix Windows Firewall problems in Windows 10, but if you still have any questions regarding this tutorial then feel free to ask them in the comment’s section.

Sysnative Forums

  • Still running Windows 7 or earlier? Support for Windows 7 ended on January 14th 2020. Please review the thread here for more details.

  • Microsoft Support & Malware Removal

  • Windows 7 | Windows Vista

You are using an out of date browser. It may not display this or other websites correctly.
You should upgrade or use an alternative browser.

[SOLVED] Trying to start Windows Firewall

  • Thread starter
    Thread starter

    beranim

  • Start date
    Start date

Joined
Sep 4, 2015
Posts
21
Location

Leeds, UK




  • #1

Hi,

Having made a decision to remove AVG, I temporarily disabled it and then went about starting Windows Defender (successfully) and Windows Firewall (unsuccessful).

When attempting to start it through control panel/system & security/ and clicking «use recommended settings» i get an error code 0x8007042c

When attempting to start the service directly (via services — running as an administrator, I get an error code 1068.

Properties of the service show dependencies on «Bass Filtering Engine»& «Windows Firewall Authorisation Driver» — I can see that the former is running but have no idea how to check the latter.

Help is very welcome,

thanks


Joined
Sep 4, 2015
Posts
21
Location

Leeds, UK




  • #3

Hi xiloee,

Thanks for the pointer, but that article, whilst quite useful didn’t do the trick. I have been through the malware checks (with support from Corrine) — with an all clear (on my wider PC performance issue), method two returns the 0x8007042c error and method 3 and 4 both return the 1068 error.
I am making an educated guess, that the problem may be the «Windows Firewall Authorisation Driver» as I have no idea what it is nor where to find it.

Thanks
beranim

Joined
Sep 4, 2015
Posts
21
Location

Leeds, UK




  • #4

OK, I have no worked out a bit more. Apparently there are hidden ‘devices’ in Device Manager (never really noticed that before) and lo and behold, when I looked at Windows Firewall Authorisation Driver» it shows as «disabled»» (Code 22). When I try to ‘enable device», I get the incredibly helpful (NOT!!) message of «Windows was not able to enable the device».




  • #5

Retry with the «windows firewall authorisation driver»: set its startup type to demand, click ok, (fingers crossed that it will be accepted), restart windows.

(Did you also try the MSRT? Why did you not uninstall AVG completely? Aren’t you able to reinstall it later? I think it should be the culprit.)




  • #6

You can also launch these commands from a command prompt to check the status of that driver:

sc qc mpsdrv
sc query mpsdrv

Output on windows 10 (standard) x64, from a NON-elevated command prompt:
(I don’t know if it should be the same for windows vista/7, sorry)

C:\>sc qc mpsdrv
[SC] QueryServiceConfig SUCCESS
SERVICE_NAME: mpsdrv
        TYPE               : 1  KERNEL_DRIVER
        START_TYPE         : 3   DEMAND_START
        ERROR_CONTROL      : 1   NORMAL
        BINARY_PATH_NAME   : System32\drivers\mpsdrv.sys
        LOAD_ORDER_GROUP   : network
        TAG                : 0
        DISPLAY_NAME       : Windows Firewall Authorization Driver
        DEPENDENCIES       :
        SERVICE_START_NAME :
C:\>sc query mpsdrv
SERVICE_NAME: mpsdrv
        TYPE               : 1  KERNEL_DRIVER
        STATE              : 4  RUNNING
                                (STOPPABLE, NOT_PAUSABLE, IGNORES_SHUTDOWN)
        WIN32_EXIT_CODE    : 0  (0x0)
        SERVICE_EXIT_CODE  : 0  (0x0)
        CHECKPOINT         : 0x0
        WAIT_HINT          : 0x0

Joined
Sep 4, 2015
Posts
21
Location

Leeds, UK




  • #7

Hi xilolee,

The underlying symptom I am suffering is a sudden slowdown in PC performance which I am trying to resolve. One contender (apparently — but I have my doubts) is AVG. So I do want to uninstall it. However, I don’t want a) my system to be left exposed indefinitely and b) I am not keen on installing another internet security suite until the underlying performance issue is resolved (mainly based on there being no consensus as to what to install. On that basis I am looking to run Windows Defender & Firewall in the short term. However I am now stuck in not being able to start Windows Firewall.

Following other guidance (found here Windows firewall can’t change some of your settings Error code — Microsoft Community)
I ran sfc /scannow — which returned an indication of any violations (btw I have already worked with Corrine to eradicate any maleware possibilities).

C:\Windows\system32>sfc /scannow

Beginning system scan. This process will take some time.

Beginning verification phase of system scan.
Verification 100% complete.

Windows Resource Protection did not find any integrity violations.

I then tried to ‘reset’

C:\Windows\system32>netsh advfirewall reset

An error occurred while attempting to contact the Windows Firewall service. Mak
e sure that the service is running and try your request again.

which returns an helpful windows response (in that it repeats I have a problem but not a resolution)

I then ran the two commands to show the status which are pasted in below. Which unsurprisingly confirmed stopped with a 1058.

Microsoft Windows [Version 6.1.7601]
Copyright (c) 2009 Microsoft Corporation. All rights reserved.

C:\Windows\system32>sfc /scannow

Beginning system scan. This process will take some time.

Beginning verification phase of system scan.
Verification 100% complete.

Windows Resource Protection did not find any integrity violations.

C:\Windows\system32>netsh advfirewall reset

An error occurred while attempting to contact the Windows Firewall service. Mak
e sure that the service is running and try your request again.

C:\Windows\system32>sc qc mpsdrv
[SC] QueryServiceConfig SUCCESS

SERVICE_NAME: mpsdrv
TYPE : 1 KERNEL_DRIVER
START_TYPE : 2 AUTO_START
ERROR_CONTROL : 1 NORMAL
BINARY_PATH_NAME : System32\drivers\mpsdrv.sys
LOAD_ORDER_GROUP : network
TAG : 0
DISPLAY_NAME : Windows Firewall Authorization Driver
DEPENDENCIES :
SERVICE_START_NAME :

C:\Windows\system32>sc query mpsdrv

SERVICE_NAME: mpsdrv
TYPE : 1 KERNEL_DRIVER
STATE : 1 STOPPED
WIN32_EXIT_CODE : 1058 (0x422)
SERVICE_EXIT_CODE : 0 (0x0)
CHECKPOINT : 0x0
WAIT_HINT : 0x0

C:\Windows\system32>

With regards to changing the start to ‘demand’ I have no idea how to do that, as in services in Windows 7, I have Automatic, Automatic (Delayed Start), Manual, Disable (via Services) and I cant find any reference to either mpsdrv or Windows Firewall Authentication Drive in the ‘services’ where I would normally change the startup.

Thanks




  • #8

I think you should find it in device manager, view, tick Show Hidden Devices, tick show Devices By Connection, double-left-click windows firewall authorization driver (this opens its properties), driver tab, check the startup type and report here its actual setting.
And I think you can change it from there.

Also, from a command prompt, launch: gpresult -z > «c:\users\%username%\desktop\gpresult.txt»
You should find a txt on your desktop: paste the result here.

Mine:

Microsoft (R) Windows (R) Operating System Group Policy Result tool v2.0
¸ 2015 Microsoft Corporation. All rights reserved.
Created on 24/09/2015 at 12.46.30
 
RSOP data for PC\XILOLEE on PC : Logging Mode
------------------------------------------------
OS Configuration:            Standalone Workstation
OS Version:                  10.0.10240
Site Name:                   N/A
Roaming Profile:             N/A
Local Profile:               C:\Users\XILOLEE
Connected over a slow link?: No

USER SETTINGS
--------------
    
    Last time Group Policy was applied: 24/09/2015 at 09.59.50
    Group Policy was applied from:      N/A
    Group Policy slow link threshold:   500 kbps
    Domain Name:                        PC
    Domain Type:                        <Local Computer>
    
    Applied Group Policy Objects
    -----------------------------
        N/A
    The following GPOs were not applied because they were filtered out
    -------------------------------------------------------------------
        Local Group Policy
            Filtering:  Not Applied (Empty)
    The user is a part of the following security groups
    ---------------------------------------------------
        Livello obbligatorio alto
        Everyone
        Account locale e membro del gruppo Administrators
        BUILTIN\Administrators
        BUILTIN\Users
        NT AUTHORITY\INTERACTIVE
        ACCESSO CONSOLE
        NT AUTHORITY\Authenticated Users
        Questa organizzazione
        [EMAIL="xilolee@*******.com"]xilolee@*******.com[/EMAIL]
        Account locale
        LOCALE
        Autenticazione account cloud
        
    The user has the following security privileges
    ----------------------------------------------

    Resultant Set Of Policies for User
    -----------------------------------
        Software Installations
        ----------------------
            N/A
        Logon Scripts
        -------------
            N/A
        Logoff Scripts
        --------------
            N/A
        Public Key Policies
        -------------------
            N/A
        Administrative Templates
        ------------------------
            N/A
        Folder Redirection
        ------------------
            N/A
        Internet Explorer Browser User Interface
        ----------------------------------------
            N/A
        Internet Explorer Connection
        ----------------------------
            N/A
        Internet Explorer URLs
        ----------------------
            N/A
        Internet Explorer Security
        --------------------------
            N/A
        Internet Explorer Programs
        --------------------------
            N/A

Joined
Sep 4, 2015
Posts
21
Location

Leeds, UK




  • #9

Hi again xilolee,

OK, first a big thanks for coming back to me. On the Device Manager, you are correct — there are more choices here than when going through the ‘services’. It is currently set to «Automatic», but other settings are available (Boot, Demand, System and Disabled).

I will have a go at changing it to Demand and restarting the machine.

I have run gpresult, not sure if you wanted report as an administrator or not, so I ran both (Pasted below)

Juts as my usual user (I only have one set up on the PC)

Microsoft (R) Windows (R) Operating System Group Policy Result tool v2.0
Copyright (C) Microsoft Corp. 1981-2001

Created On 24/09/2015 at 17:22:51

RSOP data for Westray-Gamer\Alan on WESTRAY-GAMER : Logging Mode
——————————————————————

OS Configuration: Standalone Workstation
OS Version: 6.1.7601
Site Name: N/A
Roaming Profile: N/A
Local Profile: C:\Users\Alan
Connected over a slow link?: No

USER SETTINGS
—————

Last time Group Policy was applied: 18/09/2015 at 00:09:12
Group Policy was applied from: N/A
Group Policy slow link threshold: 500 kbps
Domain Name: Westray-Gamer
Domain Type: <Local Computer>

Applied Group Policy Objects
——————————
N/A

The following GPOs were not applied because they were filtered out
——————————————————————-
Local Group Policy
Filtering: Not Applied (Empty)

The user is a part of the following security groups
—————————————————
None
Everyone
Local account and member of Administrators group
HomeUsers
BUILTIN\Administrators
BUILTIN\Users
NT AUTHORITY\INTERACTIVE
CONSOLE LOGON
NT AUTHORITY\Authenticated Users
This Organization
Local account
LOCAL
NTLM Authentication
High Mandatory Level

The user has the following security privileges
———————————————-

Resultant Set Of Policies for User
————————————

Software Installations
———————-
N/A

Logon Scripts
————-
N/A

Logoff Scripts
—————
N/A

Public Key Policies
——————-
N/A

Administrative Templates
————————
N/A

Folder Redirection
——————
N/A

Internet Explorer Browser User Interface
—————————————-
N/A

Internet Explorer Connection
—————————-
N/A

Internet Explorer URLs
———————-
N/A

Internet Explorer Security
—————————
N/A

Internet Explorer Programs
—————————
N/A

And again. (as administrator)

Microsoft (R) Windows (R) Operating System Group Policy Result tool v2.0
Copyright (C) Microsoft Corp. 1981-2001

Created On 24/09/2015 at 17:19:20

RSOP data for Westray-Gamer\Alan on WESTRAY-GAMER : Logging Mode
——————————————————————

OS Configuration: Standalone Workstation
OS Version: 6.1.7601
Site Name: N/A
Roaming Profile: N/A
Local Profile: C:\Users\Alan
Connected over a slow link?: No

COMPUTER SETTINGS
——————

Last time Group Policy was applied: 18/09/2015 at 00:08:46
Group Policy was applied from: N/A
Group Policy slow link threshold: 500 kbps
Domain Name: WESTRAY-GAMER
Domain Type: <Local Computer>

Applied Group Policy Objects
——————————
N/A

The following GPOs were not applied because they were filtered out
——————————————————————-
Local Group Policy
Filtering: Not Applied (Empty)

The computer is a part of the following security groups
——————————————————-
BUILTIN\Administrators
Everyone
NT AUTHORITY\Authenticated Users
System Mandatory Level

Resultant Set Of Policies for Computer
—————————————

Software Installations
———————-
N/A

Startup Scripts
—————
N/A

Shutdown Scripts
—————-
N/A

Account Policies
—————-
N/A

Audit Policy
————
N/A

User Rights
————
N/A

Security Options
—————-
N/A

N/A

Event Log Settings
——————
N/A

Restricted Groups
——————
N/A

System Services
—————
N/A

Registry Settings
——————
N/A

File System Settings
———————
N/A

Public Key Policies
——————-
N/A

Administrative Templates
————————
N/A

USER SETTINGS
—————

Last time Group Policy was applied: 18/09/2015 at 00:09:12
Group Policy was applied from: N/A
Group Policy slow link threshold: 500 kbps
Domain Name: Westray-Gamer
Domain Type: <Local Computer>

Applied Group Policy Objects
——————————
N/A

The following GPOs were not applied because they were filtered out
——————————————————————-
Local Group Policy
Filtering: Not Applied (Empty)

The user is a part of the following security groups
—————————————————
None
Everyone
Local account and member of Administrators group
HomeUsers
BUILTIN\Administrators
BUILTIN\Users
NT AUTHORITY\INTERACTIVE
CONSOLE LOGON
NT AUTHORITY\Authenticated Users
This Organization
Local account
LOCAL
NTLM Authentication
High Mandatory Level

The user has the following security privileges
———————————————-

Bypass traverse checking
Manage auditing and security log
Back up files and directories
Restore files and directories
Change the system time
Shut down the system
Force shutdown from a remote system
Take ownership of files or other objects
Debug programs
Modify firmware environment values
Profile system performance
Profile single process
Increase scheduling priority
Load and unload device drivers
Create a pagefile
Adjust memory quotas for a process
Remove computer from docking station
Perform volume maintenance tasks
Impersonate a client after authentication
Create global objects
Change the time zone
Create symbolic links
Increase a process working set

Resultant Set Of Policies for User
————————————

Software Installations
———————-
N/A

Logon Scripts
————-
N/A

Logoff Scripts
—————
N/A

Public Key Policies
——————-
N/A

Administrative Templates
————————
N/A

Folder Redirection
——————
N/A

Internet Explorer Browser User Interface
—————————————-
N/A

Internet Explorer Connection
—————————-
N/A

Internet Explorer URLs
———————-
N/A

Internet Explorer Security
—————————
N/A

Internet Explorer Programs
—————————
N/A

Not sure what to look for in this report, but hope it sheds some light. I will feedback if the demand/restart makes any difference shortly

Thanks
beranim

Joined
Sep 4, 2015
Posts
21
Location

Leeds, UK




  • #10

Hi xilolee, that’s worked, I now have Defender and Firewall up and running. Thank you very much for that. If you are able and willing, I would be interested to know if anytyhing in the gpresult shows anything revealing about this problem — for the future :)

My next step is to uninstall AVG and get back to the problem at hand, which is why is the machine is running so badly. However as a specific thread, this is probably solved and I will mark as so — unless you advise not.

Joined
Sep 4, 2015
Posts
21
Location

Leeds, UK




  • #12

Thanks again.

I have uninstalled AVG (hopefully completely and tidily). No noticeable change to the PC performance, but that’s another thread :)

Has Sysnative Forums helped you? Please consider donating to help us support the site!

  • Microsoft Support & Malware Removal

  • Windows 7 | Windows Vista

Понравилась статья? Поделить с друзьями:
0 0 голоса
Рейтинг статьи
Подписаться
Уведомить о
guest

0 комментариев
Старые
Новые Популярные
Межтекстовые Отзывы
Посмотреть все комментарии
  • Windows server 2008 r2 поддержка процессоров
  • Как очистить планировщик задач в windows 10
  • Nextcloud client windows 7 x64
  • Ralink rt3290 driver windows 7 x64
  • Заставка из mac os для windows