The Windows Firewall service terminated with service-specific erro

[Guest]

Been getting this error, and nobody seems to know how to fix it. Below are
varoius queries...


SERVICE_NAME: mpssvc
TYPE : 20 WIN32_SHARE_PROCESS
STATE : 1 STOPPED
WIN32_EXIT_CODE : 1066 (0x42a)
SERVICE_EXIT_CODE : 5 (0x5)
CHECKPOINT : 0x0
WAIT_HINT : 0x0


SERVICE_NAME: mpssvc
TYPE : 20 WIN32_SHARE_PROCESS
START_TYPE : 2 AUTO_START
ERROR_CONTROL : 1 NORMAL
BINARY_PATH_NAME : C:\Windows\system32\svchost.exe -k
LocalServiceNoNe
twork
LOAD_ORDER_GROUP : NetworkProvider
TAG : 0
DISPLAY_NAME : Windows Firewall
DEPENDENCIES : mpsdrv
: bfe
SERVICE_START_NAME : NT Authority\LocalService


------------

Actual event:
Log Name: System
Source: Service Control Manager
Date: 9/17/2007 1:52:25 PM
Event ID: 7024
Task Category: None
Level: Error
Keywords: Classic
User: N/A
Computer: <snip>
Description:
The Windows Firewall service terminated with service-specific error 5 (0x5).
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
<System>
<Provider Name="Service Control Manager"
Guid="{555908D1-A6D7-4695-8E1E-26931D2012F4}" EventSourceName="Service
Control Manager" />
<EventID Qualifiers="49152">7024</EventID>
<Version>0</Version>
<Level>2</Level>
<Task>0</Task>
<Opcode>0</Opcode>
<Keywords>0x80000000000000</Keywords>
<TimeCreated SystemTime="2007-09-17T20:52:25.000Z" />
<EventRecordID>117384</EventRecordID>
<Correlation />
<Execution ProcessID="0" ThreadID="0" />
<Channel>System</Channel>
<Computer><snip></Computer>
<Security />
</System>
<EventData>
<Data Name="param1">Windows Firewall</Data>
<Data Name="param2">5 (0x5)</Data>
</EventData>
</Event>

 

[Guest]

Error 5 usually means Access Denied. Do you have any other firewall software
on that computer, or have you made any configuration changes to it?

 

[Guest]

Nope, no other firewall software

Error 5 usually means Access Denied. Do you have any other firewall software
on that computer, or have you made any configuration changes to it?

 

[Guest]

Does it crash on start? If so, use Process Monitor
(http://www.microsoft.com/technet/sysinternals/Processesandthreadsutilities.mspx?wt.svl=featured)
to monitor it and see if there is some access denied that happens there. If
not we need to deduce what is going on. Have you made some kind of
configuration change to it?

 

[Guest]

I have this same issue with Windows Firewall exiting. I suspect something is
wrong with my access permissions on the built in account used to start it,
but I am not sure what it takes to check. I also just did a fresh install of
Vista Enterprise on my machine and was surprised that this issue still
persists.

 

[Guest]

Do you have any third-party firewall software or anything else installed that
can cause this? I have a bunch of Vista systems of various flavors and have
never seen this.

 

[Guest]

no, nothing at all, I tried to see what happened when I start it using
procmon it was not very helpful though. There were serveral Name not found
results displayed for the svchost.exe, I'm not sure they are releated there
are so many things associated with svchost.

 

[Guest]

To be honest, I would recommend you call Microsoft support. They have a
better ability to walk you through what is going on here. This seems like
security-related support to me, so if you call (866) PC-Safety (in North
America) they should help you for free.