G
Guest
There is no repair option with Windows Vista (stupid)
I have no restore points.
BFE is running fine
MPSDrv doesn't show up in the service list in task manager, interestingly
enough...
I did sc query MPSDrv instead, and STATE = 4 (Running)
sc query BFE (just for kicks) STATE = 4 (running)
Using the event viewer i found two errors in the last hour from source
Service Control Manager Eventlog Provider. (My computer was turned off for
about 5 hours before this) In the last 7 days these errors have repeated 15
times and 14 times respectively.
One of them seems a bit familiar. "The Windows Firewall service terminated
with service-specific error 5 (0x5)."
The other one says
"The following boot-start or system-start driver(s) failed to load:
i8042prt"
I also have a print error, but it is probably because my printer is turned
off, and an error from source LSM that reads
"Terminal Service start failed. The relevant status code was The service
cannot be started, either because it is disabled or because it has no enabled
devices associated with it.
.."
The print error and the LSM error are also at around 15 repeats in the last
7 days
The Print error says "The print spooler failed to share printer hp psc 1200
series with shared resource name JOSHUA'S PRINTER. Error 2114. The printer
cannot be used by others on the network."
Somehow not surprised here, i couldn't get it to share the printer.
I noticed a strange side-effect of perhaps having the firewall as messed up
as it is right now, I can't succesfully open ports on this computer, and I'm
100% sure I'm forwarding properly and setting up my static IP properly.
On a side note, I'm going away for 5 weeks as of saturday so I may be idle
for a while.
Thanks Mr. Beder
I have no restore points.
BFE is running fine
MPSDrv doesn't show up in the service list in task manager, interestingly
enough...
I did sc query MPSDrv instead, and STATE = 4 (Running)
sc query BFE (just for kicks) STATE = 4 (running)
Using the event viewer i found two errors in the last hour from source
Service Control Manager Eventlog Provider. (My computer was turned off for
about 5 hours before this) In the last 7 days these errors have repeated 15
times and 14 times respectively.
One of them seems a bit familiar. "The Windows Firewall service terminated
with service-specific error 5 (0x5)."
The other one says
"The following boot-start or system-start driver(s) failed to load:
i8042prt"
I also have a print error, but it is probably because my printer is turned
off, and an error from source LSM that reads
"Terminal Service start failed. The relevant status code was The service
cannot be started, either because it is disabled or because it has no enabled
devices associated with it.
.."
The print error and the LSM error are also at around 15 repeats in the last
7 days
The Print error says "The print spooler failed to share printer hp psc 1200
series with shared resource name JOSHUA'S PRINTER. Error 2114. The printer
cannot be used by others on the network."
Somehow not surprised here, i couldn't get it to share the printer.
I noticed a strange side-effect of perhaps having the firewall as messed up
as it is right now, I can't succesfully open ports on this computer, and I'm
100% sure I'm forwarding properly and setting up my static IP properly.
On a side note, I'm going away for 5 weeks as of saturday so I may be idle
for a while.
Thanks Mr. Beder
David Beder said:I've always wondered what passwords were used also. I think they're
auto-generated by the system.
Might you have any restore points you can go back to?
I haven't tried this in Vista, but in older versions of Windows, if you ran
the setup cd again, you got a repair option that might put things back into
order. Since Windows Firewall is part of the OS, you can't really just
re-install just that service.
On a slightly different note, how are the states of the BFE and MPSDrv
services?
Anything in the audit logs (ie eventvwr) about this services actually
starting early during the boot sequence? One of the guys I work with was
curious as to whether the service was crashing before you even got to log
on, thus using up the 2-3crashes per boot quota.
--
David
Microsoft Windows Networking
This posting is provided "AS IS" with no warranties, and confers no rights.
Jacob said:Is there no way to simply reinstall the firewall, overriding the old
install,
with original settings?
That way we could eliminate the firewall as the source of the problem,
methinks.
Furthermore, what password goes in those boxes? I never entered one, so do
not know what it is, and could it be possible that a virus adjusted just
the
password field?
David Beder said:Those are the default settings as I recall, so something doesn't appear
to
have 'adjusted' the service.
maybe the issue is with mpsdrv, but I'd have thought you'd get a
different
error about a dependant service not being able to start.
maybe the issue is with registry access.
This is rather strange. I'll ask around and see if anyone can think of
other
things to check.
--
David
Microsoft Windows Networking
This posting is provided "AS IS" with no warranties, and confers no
rights.
sc qc mpssvc returns:
C:\Users\Jacob>sc qc mpssvc
[SC] QueryServiceConfig SUCCESS
SERVICE_NAME: mpssvc
TYPE : 20 WIN32_SHARE_PROCESS
START_TYPE : 2 AUTO_START
ERROR_CONTROL : 1 NORMAL
BINARY_PATH_NAME : C:\Windows\system32\svchost.exe -k
LocalServiceNoNe
twork
LOAD_ORDER_GROUP : NetworkProvider
TAG : 0
DISPLAY_NAME : Windows Firewall
DEPENDENCIES : mpsdrv
: bfe
SERVICE_START_NAME : NT AUTHORITY\LocalService
C:\Users\Jacob>
Under the Log On tab for the Firewall service, "This Account" is
selected
and the account name "Local Service" with a password written in is
entered.
Recovery:
First Failure- Restart Service
2nd - Restart Service
Susequent - Take no action
Fail count reset every day, and the delay between failure restarts is 2
minutes.
The "Enable actions for stopes with errors." is not checked, and the
rest
is
grayed out.
:
interesting.
how about some output from "sc qc mpssvc". I'm particularly interested
in
the value for service_start_name.
Also, if you can fire up the services control panel, what are the
settings
on the log-on and recovery tabs?
--
David
Microsoft Windows Networking
This posting is provided "AS IS" with no warranties, and confers no
rights.
Microsoft Windows [Version 6.0.6000]
Copyright (c) 2006 Microsoft Corporation. All rights reserved.
C:\Users\Jacob>sc query mpssvc
SERVICE_NAME: mpssvc
TYPE : 20 WIN32_SHARE_PROCESS
STATE : 1 STOPPED
WIN32_EXIT_CODE : 1066 (0x42a)
SERVICE_EXIT_CODE : 5 (0x5)
CHECKPOINT : 0x0
WAIT_HINT : 0x0
C:\Users\Jacob>net start mpssvc
The Windows Firewall service is starting.
The Windows Firewall service could not be started.
A service specific error occurred: 5.
More help is available by typing NET HELPMSG 3547.
C:\Users\Jacob>sc query mpssvc
SERVICE_NAME: mpssvc
TYPE : 20 WIN32_SHARE_PROCESS
STATE : 1 STOPPED
WIN32_EXIT_CODE : 1066 (0x42a)
SERVICE_EXIT_CODE : 5 (0x5)
CHECKPOINT : 0x0
WAIT_HINT : 0x0
:
Error 5 is typically 'Access Denied'.
from an elevated command prompt, type 'net start mpssvc <enter>'.
If
the
service doesn't start, type 'sc query mpssvc <enter>' and reply
back
with
the output.
Even if the service does start, we still need to investigate why it
didn't
start on its own.
There are many reasons for it not to start. The easy ones are:
1) another firewall on the box has turned it off to prevent
configuration
conflicts between the two programs.
2) a service the firewall depends on is not starting
3) a security profile has been applied to the machine which
disables
the
service
4) domain group policy has turned it off
--
David
Microsoft Windows Networking
This posting is provided "AS IS" with no warranties, and confers no
rights.
When I try to start windows fire wall i get a pop up telling me
the
service
isn't running, and I tell the pop-up to start the service.
It then says that the service has failed to start.
It gives me the service-specific error code 5. (0x5)
Any ideas on how to fix this?
Any way to reinstall the windows firewall service?