Baseline Filtering Engine service issue.

• Comments 261
• Likes

Recently, many customers reported the Windows Firewall issue. This seemed to be caused by a wide spread malicious application.

Symptom:

The error message "Windows Firewall can't change some of your settings. Error code 0x80070424" will pop up when you try to change the Windows Firewall settings. In the meantime, when you restart the system, it might pop up an error saying that "Base Filtering Engine Service" could not be found in the system.

Please note that the same error code could pop up when you try doing anything in Windows Defender.

Resolution:

Download the registry files (You can also export HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\BFE from another working Win7 PC)
1055.BFE.reg

0677.mpssvc.reg

Launch and import them to registry

Restart your PC

Now,open RUN and type

regedit and click ok

go to HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\BFE

Right click on it-permissions

Click on ADD and type

Everyone and click ok

Now Click on Everyone

Below you have permission for users

Select full control and click ok

Now,open RUN and type services.msc and click ok

start base filtering engine service and then windows firewall service.

After these steps, we tested the windows firewall service and received an error code 5. We resolved it using the following method.

Solution

1. In Registry Editor, browse to the key HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess
2. Right click SharedAccess, and click Permissions.
3. Click Add.
4. In the “Enter the object names to select” field, type “NT SERVICE\mpssvc”. Then click CheckNames. The name should change to MpsSvc
5. Click OK.
6. Select Full Control in the Allow column.
7. Click OK.

Applies To

Windows 7 (all versions) / Windows Vista (all versions)

After doing so, we were able to install restart and contine to see the affected PC on the network and SEP installed beautifully.

I hope this helps others who have gone through this pain in the neck of an issue. :-)