Windows Firewall Service Name
June 2, 2009
Windows
0
I often need to use command line to manage services for Windows. Knowing the name of the service is important. Some of service names are just not related to the display name. Windows Firewall is such a service.
Windows XP: sharedaccess
Windows Vista / 7: mpssvc
To stop Firewall service on Windows XP, type
sc stop sharedaccess
. Similarly, to start it , type
sc start sharedaccess
. Remember to use an elevated command prompt on Windows Vista and 7.
Related
- Windows
- Windows 7
How important is it to put a firewall windows service name? What is its purpose of it? These questions are the things that we will find the answer to below.
When we are creating a firewall rule and a firewall service, it requires some information. One of the things that we need to specify is the service name.
In a general term, the service name is the service name that Windows has assigned to the application. When it is running as a service (like WinRM, WMI, and so on) then it will have a service name.
However, we cannot specify the service name when we are creating a firewall rule without adding the “-name” switch parameter. The following command will create a firewall rule for Windows Remote Management (WinRM).
- New-NetFirewallRule
- DisplayName ‘Windows Remote Management (HTTP-In)’
- Direction Inbound
- LocalPort 5985
- Protocol TCP
- Action Allow
- Name “Windows Remote Management”
The two commands above are good examples of how to use and not use a firewall windows service name. So this section will show you how important it is and what purpose it serves when you are creating a firewall rule.
Also, let us continue our discussion below.
What Is The Purpose Of A Firewall Windows Service?
As we stated at the beginning of this article, some rules need some information like protocol or destination ports. However, sometimes some rules require something else.
Such as firewalls, windows service names, or program names if they have been assigned by Windows itself. So this section will show you why we need to put this information.
When creating these types of rules and why they are important in general. So, let us continue our discussion below.
Can I Delete The Firewall Windows Service?
You can delete the firewall windows service if you want to. However, you need to remember that this is not something that you can do frequently.
If you do not want to use it, you can remove it. However, removing it may cause some bad things to happen in your network.
Is It A Good Idea To Delete The Firewall Windows Service Name?
As we stated earlier, deleting them may cause problems to happen. So it is not a good idea for you to delete it. However, if you have already deleted it and something bad has happened in your network.
Then there is no problem for you to re-add it back again. This way, you will be able to solve the issue that has arisen at the moment.
As long as they are not causing any bad issues in your network, there is no problem for them to stay there forever too.
How Do I Delete The Firewall Windows Service Name?
If you want to delete the firewall windows service name and do not want any problem to happen in your network because of it, then follow the steps below:
- Go to the Control Panel
- administrative Tools
- Services.
Go ahead and look for the service which has the name “ Windows Firewall ”. You will see that there is a service with this name when you have gone through all the services on your computer.
Once you have found this service then right-click on it and choose Stop. After that, go ahead and right-click on it again and choose Properties.
Select Disabled from the Startup type list and click on Apply. After that select Start from the Startup type list and click on OK.
Now go ahead and right-click on the same service again and choose Restart. After restarting Windows Firewall, try creating a new firewall rule without using its firewall windows service name.
Skip to content
I need to enable/ disable the Windows Firewall on a Server 2008R2 core box but didn’t know what the Windows Firewall service name was for use with the sc command. Then I learnt it it has a sub-command called GetKeyName (and corresponding GetDisplayName, for the reverse operation) to get the name from the display name.
|
C:\> sc getkeyname «Windows Firewall» [SC] GetServiceKeyName SUCCESS Name = MpsSvc |
Nice!
Also, as a reminder to myself the sc config command is what you use to change the configuration of a service (make it disabled, manual, etc). When giving the options though be sure to include a space after the option. That is to say, the following works –
|
sc config MpsSvc start= Disabled |
But the following won’t –
|
sc config MpsSvc start=Disabled |
Windows Firewall helps protect your computer by preventing unauthorized users from gaining access to your computer through the Internet or a network.
This service also exists in Windows 10, 11, 7 and Vista.
Startup Type
| Windows 8 edition | Windows 8 | Windows 8.1 | Windows 8.1 Update 1 |
|---|---|---|---|
| Core | Automatic | Automatic | Automatic |
| Pro | Automatic | Automatic | Automatic |
| Enterprise | Automatic | Automatic | Automatic |
Default Properties
| Display name: | Windows Firewall |
| Service name: | MpsSvc |
| Type: | share |
| Path: | %WinDir%\system32\svchost.exe -k LocalServiceNoNetwork |
| File: | %WinDir%\system32\mpssvc.dll |
| Error control: | normal |
| Group: | NetworkProvider |
| Object: | NT Authority\LocalService |
| Privileges: |
|
Default Behavior
The Windows Firewall service runs as NT Authority\LocalService in a shared process of svchost.exe. Other services might run in the same process. If Windows Firewall fails to start, the error is logged. Windows 8 startup proceeds, but a message box is displayed informing you that the MpsSvc service has failed to start.
Dependencies
Windows Firewall won’t start, if the following services are stopped or disabled:
- Base Filtering Engine
- Windows Firewall Authorization Driver
Restore Default Startup Type of Windows Firewall
Automated Restore
1. Select your Windows 8 release and edition, and then click on the Download button below.
2. Save the RestoreWindowsFirewallWindows8.bat file to any folder on your hard drive.
3. Right-click the downloaded batch file and select Run as administrator.
4. Restart the computer.
Note. Make sure that the mpssvc.dll file exists in the %WinDir%\system32 folder. If this file is missing you can try to restore it from your Windows 8 installation media.
Yea, though I walk through the valley of the shadow of death, I will fear no evil: for thou art with me; thy rod and thy staff they comfort me.
Windows Firewall helps protect your computer by preventing unauthorized users from gaining access to your computer through the Internet or a network.
Default Settings
| Startup type: | Automatic |
| Display name: | Windows Firewall |
| Service name: | MpsSvc |
| Service type: | share |
| Error control: | normal |
| Group: | NetworkProvider |
| Object: | NT Authority\LocalService |
| Path: | %SystemRoot%\system32\svchost.exe -k LocalServiceNoNetwork |
| File: | %SystemRoot%\system32\mpssvc.dll |
| Registry key: | HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\MpsSvc |
| Privileges: |
|
Default Behavior
Windows Firewall is a Win32 service. In Windows 7 it is starting automatically on the operating system startup. Then the Windows Firewall service is running as NT Authority\LocalService in a shared process of svchost.exe. Other system components, such as drivers and services, may run in the same process. If Windows Firewall fails to start, Windows 7 attempts to write the failure details into Event Log. Then Windows 7 startup should proceed and the user should be notified that the MpsSvc service is not running because of the error.
Dependencies
Windows Firewall is unable to start, if at least one of the following services is stopped or disabled:
- Base Filtering Engine
- Windows Firewall Authorization Driver
Restore Default Startup Configuration of Windows Firewall
Before you begin doing this, make sure that all the services on which Windows Firewall depends are configured by default and function properly. See the list of dependencies above.
1. Run the Command Prompt as an administrator.
2. Copy the commands below, paste them into the command window and press ENTER:
sc config MpsSvc start= auto
sc start MpsSvc
3. Close the command window and restart the computer.
The MpsSvc service is using the mpssvc.dll file that is located in the C:\Windows\system32 directory. If the file is removed or corrupted, read this article to restore its original version from Windows 7 installation media.
