Could not start Firewall & ICS Service

[Guest]

We have several Windows XP workstations on a 2003 domain. The workstations
were all updated to SP2 a while back however its only recently come to our
attention that one of the workstations has a problem with its firewall. When
attempting to start/enable the firewall service we a given an error 'Could
Not Start The Windows Firewall/Internet Connection (ICS Service on Local
Computer'. Apparently this problem came about when SP2 was installed, however
because the SP2 rollout was several months ago a system restore is not really
an option. So far we have tried the following with any success:

Removed Windows AntiSpyware
Reinstalled SP2
Checked for pc for viruses & spyware
Temporally disabled none MS services
Enabling the Firewall/ICS services with local admin privileges
Reset winsock command (ie: netsh winsock reset)

Any advise or suggestions would be greatly appreciated

 

[Vanguard \(NPI\)]

We have several Windows XP workstations on a 2003 domain. The workstations
were all updated to SP2 a while back however its only recently come to our
attention that one of the workstations has a problem with its firewall.
When
attempting to start/enable the firewall service we a given an error 'Could
Not Start The Windows Firewall/Internet Connection (ICS Service on Local
Computer'. Apparently this problem came about when SP2 was installed,
however
because the SP2 rollout was several months ago a system restore is not
really
an option. So far we have tried the following with any success:

Removed Windows AntiSpyware
Reinstalled SP2
Checked for pc for viruses & spyware
Temporally disabled none MS services
Enabling the Firewall/ICS services with local admin privileges
Reset winsock command (ie: netsh winsock reset)

Any advise or suggestions would be greatly appreciated

Did you check that the Application Gateway Layer service is enabled (set to
Automatic or Manual)? This service is required by the firewall and ICS
services. Many users have set this service to Disabled if they were not
using the included Windows Firewall and/or ICS services (i.e., it was just a
waste of memory to run them if you used a decent 3rd party firewall instead
of the limited Windows Firewall, or were using a NAT router instead of the
software ICS that consumed one of your hosts and required 2 NICs in it).

 

[Guest]

Thanks for you reply, unfortunatly the Application Gateway Layer service is
running and set to automatic. Also there arent any 3rd party firewalls
installed, we simply run Sophos AV and make use of the the MS firewall.

We did however stumble across two application errors in event viewer, if
anyone can make more sense of these please reply:

Event ID: 5603
Source: WinMgmt
Type: Error
Description: A provider Rsop Planning Mode Provider has been registered in
the WMI namespace root\RSOP but did not specify the HostingModel property.
This provider will be run using the LocalSystem account. This account is
privileged and the provider may cause a security violation if it does not
correctly impersonate user requests. Ensure that provider has been reviewed
for security behavior and update the HostingModel property of the provider
registration to an account with the least privileges possible for the
required functionality.


Event ID: 1202
Source: SceCli
Type: Warning
Description: Security policies are propagated with warning. <error code>:
<error description>. Please look for more details in TroubleShooting section
in Security Help.