Windows Firewall starting error - the cause ?

[Doug Knox MS-MVP]

http://blogs.geekdojo.net/andy/archive/2004/08/31/2983.aspx

 

[Doug Knox MS-MVP]

Dim WshShell
Set WshShell = WScript.CreateObject("WScript.Shell")
WshShell.RegDelete "HKLM\software\classes\appid\{ce166e40-1e72-45b9-94c9-3b2050i8f180}"
Set WshShell = Nothing

Save the above as a VB Script file (VBS) and push it out as a RunOnce Policy for all computers.

Note: Most AV software will complain about scripts that write to the registry.

You could also use the command line REG executable instead:

REG DELETE HKLM\software\classes\appid\{ce166e40-1e72-45b9-94c9-3b2050i8f180}

 

[Guest]

I have a thir party firewall installed - Proventia by ISS. I unistall it,
and reboot and set the Windows Firewal to start automatically. When i try to
start the service i get the following error

0x80004015: Windows Firewall/ICS service could not start: The class is
configured to run as a security id different from the caller

Any ideas as to what causes that. I read an article for a work around which
involved deleting a registry key, but I want to go deeper and find out, WHY
this occurs, and if there is a way to prevent it, so that I dont even have to
do the work around

 

[Guest]

Thanks, I guess my next task is trying to figure out how to write and run a
script to do that once for each machine in my domain, so that when I roll out
my firewall policy, it will work :0

Thanks

 

[Ramesh, MS-MVP]

Hi Doug,

I believe the correct GUID is {ce166e40-1e72-45b9-94c9-3b2050e8f180}

Booker,

See also: http://support.microsoft.com/kb/892199/

--
Regards,

Ramesh Srinivasan, Microsoft MVP [Windows XP Shell/User]
Windows® XP Troubleshooting http://www.winhelponline.com


Dim WshShell
Set WshShell = WScript.CreateObject("WScript.Shell")
WshShell.RegDelete
"HKLM\software\classes\appid\{ce166e40-1e72-45b9-94c9-3b2050i8f180}"
Set WshShell = Nothing

Save the above as a VB Script file (VBS) and push it out as a RunOnce Policy
for all computers.

Note: Most AV software will complain about scripts that write to the
registry.

You could also use the command line REG executable instead:

REG DELETE
HKLM\software\classes\appid\{ce166e40-1e72-45b9-94c9-3b2050i8f180}