Thread: Back to Windows Firewall?

Hi

Yes it says that the firewall is OFF but when you tell it to turn it on, it makes an effort and then says it couldn't do it.





Mike

Hey Mike, is that a standard install? I was wondering, because in the services picture you posted, the Windows Firewall is showing "Log On As" .\Jxxxxx

Mine shows as "Local Service". This might be because of some changes you have made, but all the attachments on that post seem to be around the same time.

There is a "How to configure user account log on options" link on the Windows Firewall-Log On tab. But I would think you could select the Local Service on the bottom of the list you show and select that.

You seem to have made several changes to your system as far as privileges. Have you taken ownership of any basic system functions and not returned them to the original owner?

I see you have discussed Refreshing your PC, and you have decided that will wipe out your programs?

Like Trouble said, I know you are getting tired of this, but we need to find a systematic way to solve your problem.

Edit: In the following key, there are settings for Mpssvc.dll. Could you check yours against the ones I show?

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Servic es\MpsSvc

Hi

Yes it's a normal install and Local Service is the correct login for the firewall.
I've tried the others as well and they all give my the not the right account message.

Local service excepts my password and logs in, but when I try and start the firewall in services, it runs the progress bar, then pops up the message "Can't start Widows Firewall, check Event Log for cause" or something like that.

When I look at the Event Log it says that the reason is, "Access Denied".

I've gone through all the registry entries and every thing looks normal.
The driver is in the System32 folder and SFC /scannow doesn't find any errors.

I've pretty much given up, I'm not going to re-install every thing until I have more reason then the firewall not working.

I'll just ignore it and use the 3rd party firewall I have installed.
I guess it's a good thing I'm not using Metro.

Mike

Here are the screen shots...

Well, since you do not have access, and the KB that directly addressed that type of error did not help, where should we go next?

I am sure you have already tried to re-register mpssvc.dll, and maybe even deleted it and allowed the SFC to replace it.

You have decided there are no Refresh or re-install options that are acceptable? Would you like me to test something, like a Refresh to see if the normal applications, like Firefox or Quicken stay in place?

Had you installed the 3rd party firewall before, and could it, or something else set a registry entry to disable the Windows firewall?

What do you mean by you don't use Metro? Have you done something to disable the Metro UI?

Mike
Did you try disabling the Windows firewall in Services then reboot ant then reset to auto? I've fixed some other problems over the years by disabling and reenabling them.
Joe

I also found these registry entries when enabling the firewall with Process Monitor running. You might check to see if you show them and what values they have.

HKLM\System\CurrentControlSet\Services\MpsSvc\Star tOverride

HKLM\SOFTWARE\MICROSOFT\Rpc\SecurityService\Defaul tAuthLevel

Hi

I found this, I think this describes the problem but I'm too tired to really get into it tonight but I'll see if I can figure out what he's talking about tomorrow...

The error code I get it error 5, that's what he's talking about here.



This is a common error code seen in our management solutions. Although it is a common Windows error code, it's not really an error so much as an administrative access issue. It's commonly seen in networks with multiple domains and\or 'hybrid' environments with domains and Work-groups attached. We've given you a number of options to deal with this scenario.

Lieberman Software's management solutions require that you have administrative rights over the machine upon which you install them as well as the target machines that you wish to manage. If you are actively using User Manager Pro Suite to manage your machines or run reports against them, UMPS will use your current logged on Windows account to try to access the target machines. If you have created scheduled jobs to manage and\or report on your target machines, UMPS will use the credentials you have input into the scheduler service under Deferred Processing | Jobs Monitor | Scheduler Service.

If your current or scheduler service credentials don't have access to the target machines you can build a list of alternate administrative credentials for UMPS to use. You can build this list by opening one of your machine groups and select Settings | Alternate Administrator Accounts | Alternate Administrators | Add. Make sure to select the 'Enable Alt-Admin' check box on the lower right side of the Alternate Administrator Accounts dialogue screen.