How-to: repair broken Windows Firewall

[dparm]

For anyone having Windows Firewall problems after cleaning out spyware, here is the fix. No more installing ZoneAlarm! The system in question must be running XP with Service Pack 2.


1. Run the attached .REG file.
2. From the command prompt, enter

netsh firewall reset

3. Open Windows Firewall control panel and enable it.


Should that NOT work, this is the final thing you should try before reinstalling XP or ZoneAlarm:


1. From the command prompt, enter:

rundll32 setupapi,InstallHinfSection Ndi-Steelhead 132 %windir%\inf\netrass.inf

2. Restart
3. From the command prompt, enter NETSH FIREWALL RESET


Hope this helps.




One more possible fix, if you can't get the above two steps to work:

1. From the Command Prompt, enter:

netsh winsock reset

2. After receiving a confirmation, reboot
3. Check if the Windows Firewall service has started. If not, repeat the above two steps.

[dparm]

BTW I have placed the REG file on the flash drives for the Tech Leads.

[Unregistered]

Thank you so much for the info, it worked, I have been trying for 3 days to get my firewall to turn back on (no I don't have zone alarm, I have System Mechanic). I work as a Mortgage Broker, and have alot of clients personal info, you're a life saver....thanks again

Theresa Rodriguez
California

[Unregistered]

OMFG DUDE YOU ARE AWESOME YOU SAVED MY DAY. Alright i have a firewall issue for days already trying to get it back on but with no luck. I had no choice but to download all sorts of third party firewall but im just not happy with how things were going with my system, with windows firewall totally dead, relying on third party firewalls and to endure with all those pop ups on differentiating between programs to allow the firewall to give the green light for those programs to run. I was also about to reformat my whole system and to get over the fact that i had to transfer the millions of files on my system over to another harddisk which is a drag and i could most probably spend whole day untill i ran over this very site and WOOT. Thanks dude. Keep saving people. You rock!!!

[dcv]

I was wondering how people outside of campus found this thread.

Cheers, Dan, your solution is the #1 google result for "broken windows firewall."

[dparm]

Awesome.

[dennis dannevig from oz]

thanks for the info / I just completed a network admin course / not one part of it referred to windows firewall resetting problems ! / you are a lifesaver
thanks again

[jazzy]

Hi thrr

I tried using your options to solve my windows firewall problem but it didn't worked..actually in my case the windows firewall is disabled..I can't change any option.I actually tried to download the powerISO software and got the virus and it disabled my windows firewall.

Any suggestions please that will be helpful.

Thanks in advance..

jazzy

[Unregistered]

Just wanted to post up a thanks all the way from Montreal, Quebec, Canada.

I had stumped friends and my own brain billowing smoke due to this... And you solved it in 30 seconds. Sweet.

[Musketeer76]

Just a thank-you from South Africa - saved me the dreaded re-install!

[dparm]

Hi thrr

I tried using your options to solve my windows firewall problem but it didn't worked..actually in my case the windows firewall is disabled..I can't change any option.I actually tried to download the powerISO software and got the virus and it disabled my windows firewall.

Any suggestions please that will be helpful.

Thanks in advance..

jazzy


Hi Jazzy, thanks for your question. Sorry for not replying earlier, but our school year just concluded so things have been busy. Could you be more specific when you say it is "disabled"? Are you saying that in the Windows Firewall control panel you cannot turn it on OR off?

If my suggestion still does not work, the only other help I can offer is to recommend you backup your data and perform a repair installation of Windows XP. Otherwise, there are many good 3rd party firewalls available such as ZoneAlarm (which is top-rated and also happens to be free).

[gerald 46]

thank you , i have tryed evrything lots of forum etc.
your solution worked
super

[Unregistered]

You are the Windows Firewall repair Jesus. Where on Earth did you find out about "rundll32 setupapi,InstallHinfSection Ndi-Steelhead 132 %windir%\inf\netrass.inf" anyway? Are you a prophet or did some Microsoft Employee tell you?

[Unregistered]

Thank you so much for the info, it worked

[dparm]

I actually stumbled across the "netrass" information on a Microsoft support document. It didn't specifically say how to repair the firewall, but it did detail the components (files) that make up the firewall.

[Shiin]

I actually stumbled across the "netrass" information on a Microsoft support document. It didn't specifically say how to repair the firewall, but it did detail the components (files) that make up the firewall.

I was getting the same error and hopefully it solves my problems with PUNKBUSTER kicking me out of Battlefield 2 Servers with the complaint of "Blocked O/S Priveleges" ... I couldn't even get in my windows firewall at all to the error "Due to an unidentified problem, Windows cannot display the Windows Firewall settings." - in any case, I have regained some control over my own computer.

Thanks a million m8. I'm glad I didn't have to pay Microsoft 1.99$/minute to diagnose this problem lol.



Cheers!

[Unregistered]

I'm pretty sure this is a dumb question but I'll ask it anyway: What is a command prompt? I ran the .reg file but all it did was open a window saying: Are you sure you want to add the information in C:/DOCUME~1/Owner/LOCALS~1/Temp/Temporary Directory 4 for sharedaccess.zip/sharedaccess.reg to the registry? With a yes and no button - if you choose no - the window closes and nothing happens - if you choose yes - it opens another window that says Information in C:/DOCUME~1/Owner/LOCALS~1/Temp/Temporary Directory 4 for sharedaccess.zip/sharedaccess.reg has been successfully added to the registry and then nothing happens. AHHHHHHHHHHHHHHHH! HELP ME!!!!!!!! I don't understand!!!!!!!!!!!!!

[dcv]

A command prompt is a text-only window where you can type commands. To access it, just click Start -> Run, and then, in the "Run" window, type "cmd" and hit enter. It'll bring up the prompt, then you can follow Dan's instructions. Good luck!

[powellm]

Not to be rude, but if you don't know how to use the command prompt, I would suggest finding someone to help you attempt this repair. If you're with the U of A, OSCR is glad to help.

[Unregistered]

All worked Ok - Thank you sop much

[Help >.<]

I had no problem after entering the
"rundll32 setupapi" but as i typed the "InstallHinfSection Ndi-Steelhead 132 %windir%\inf\netrass.inf" part, the cmd answers 'InstallHinfSection' is not regonized as a internal or external command, operable program or batch file.'

How should i fix this problem

Thanks

[Help]

another problem after entering the whole

rundll32 setupapi,InstallHinfSection Ndi-Steelhead 132 %windir%\inf\netrass.inf

was that an error occured, which said:

Error in setupapi
Missing entry: InstallHinfSection


If you can fix this, i will get on the ground and literaly kiss ur feet >.<

[Unregistered]

After i typed 'NETSH FIREWALL RESET' it appeared "The following command was not found: Firewall reset'

pLease Help

[Help Wanted!]

Currently we are working on a computer here and we have run into a problem with the windows firewall... apearantly it has either been deleted, partially deleted, or It's Disabled without the ability to re enable....

We tried the solution but we got stuck...

Help is wanted...
We are trying to avoid a ReFormat / FDisk..
It was Virus / SpyWare Ridden

We Cannot Get windows updates...
"due to an Unidentified Problem Windows FireWall Cannot display Firewall Settings"
It says it's off... but we're not sure if this was devised by the Virus Makers to do this...

[Krono6]

I came across this while searching for how to fix a Wifi Max problem, I had both the Errors 52000 and 52100. Hopefully after this post, this will be put in Google or something.
You HAVE to enable the Sharing option in the properties> Advanced Tab of your main connection, if this doesn't work then you need to repair the Firewall.

I swear, I just got out my Windows installation CD RIGHT NOW and was about to re-install, then I came across this and it worked! :D Thanks a WHOLE bunch, you saved me money! I love you!

[Thank You]

WOW... Thanks for the fix.. It really worked!!!

[Unregistered]

ive been having this same firewall issue for a few days now. ive had no viruses or anything and i have tried everything, including this fix, and still nothing. i try the netsh firewall reset thing, it says its not an installed service, etc, so i tried rundll32 setupapi,InstallHinfSection Ndi-Steelhead 132 %windir%\inf\netrass.inf, and it does nothing, no error, or anything noticable, then reboot and firewall reset again, and i get the same not an installed service message. im open to suggestions, as this is driving me crazy!im about to give up on xp completly as i have a beta copy of vista that ive been wanting to install anyway..

any new ideas? plz email me covertcycle@comcast.net, as ive been on too many forums to keep track of... thanks!

[Jonathan]

Currently we are working on a computer here and we have run into a problem with the windows firewall... apearantly it has either been deleted, partially deleted, or It's Disabled without the ability to re enable....

We tried the solution but we got stuck...

Help is wanted...
We are trying to avoid a ReFormat / FDisk..
It was Virus / SpyWare Ridden

We Cannot Get windows updates...
"due to an Unidentified Problem Windows FireWall Cannot display Firewall Settings"
It says it's off... but we're not sure if this was devised by the Virus Makers to do this...

The same thing happened to me! After deleting a virus from my computer, I was no longer able to open my window firewall. How can I fix this? I've tried reinstalling SP2 but nothing seems to work. Please help!

[Perksy - Unregistered]

Thanks a lot man, it works great.

[Wayne]

Thank you Daniel. I used your routine and it worked like a charm. I proclaim this routine named after you. Now known as "Daniels Routine" You're the man.

Thanks again,

Wayne from Hawaii..

[Unregistered]

Dan, dude you ROCK! It worked. Thanks a lot. -ro1:)

[gerard]

Type this in the run bar (Firewall.cpl) This will let you turn on the service for the firewall,also if you want ,hit exceptions and add anything you like,but as always at your own risk.

[Blade]

I am happy. These first posted hints solved my problems with the xp-firewall. Now the firewall is running without any problem!

[Unregistered]

Firewall is back! I did have to reinstall sp2 after as well. After that, bingo....
Hopefully that nastiness never comes back again....
Thank you, thank you, thank you.

[Mathews]

thank u very much ..

[Unregistered]

you have provided me with many things to try and none of them seem to work i am however getting an error when running the final ditch effort in your post i get a small window that pops up and says

RUNDLL

Error in setupapi
Missing Entry:installhinfsection


any help is greatly appreciated as this is starting to cost me money instead of my client

[dparm]

Does the machine have Service Pack 2? This won't work on SP1a or SP1.

[Unregistered]

Mis respetos, MASTER. Nobody can say i don't know how to do this thing... like my father said (and many people before) READ, READ!!!
and if you read this forum from "a" to "z" you should not have any problem fixing the "FIREWALL".

AJ Flores / Salvadoreño.

[Unregistered]

Thanks from this quarter - -the second solution worked for me after anti-spyware may have disabled the Windows Firewall (from what I gather). I am very appreciative!

[Leen]

You're a genius!!! Thank you!!

[dparm]

For anyone interested in the inner-workings of the Windows Firewall, and more info on the command line options:

http://www.microsoft.com/technet/prodtechnol/winxppro/support/wftshoot.mspx

[Unregistered]

Just wanted to let you know after hours online and by telephone with microsoft and dell, I tried your solution and it worked!!!!! Thank you so much, so glad i found your solution before I paid Dell 49.95 to help!!
Scoop



For anyone having Windows Firewall problems after cleaning out spyware, here is the fix. No more installing ZoneAlarm! The system in question must be running XP with Service Pack 2.


1. Run the attached .REG file.
2. From the command prompt, enter NETSH FIREWALL RESET
3. Open Windows Firewall control panel and enable it.


Should that NOT work, this is the final thing you should try before reinstalling XP or ZoneAlarm:


1. From the command prompt, enter:

rundll32 setupapi,InstallHinfSection Ndi-Steelhead 132 %windir%\inf\netrass.inf

2. Restart
3. From the command prompt, enter NETSH FIREWALL RESET


Hope this helps.

[a greatfull person]

Thanks for this, your a champ! :D

from australia :D

[Unregistered]

i'm no expert, but my brothers computer got a virus, and i am 100% sure its gone. The effects of the virus were that windows security center service was off. i fixed that with no problems. the other effect was that windows firewall is stuck off. It is on the "off" setting and the entire firewall windows is greyed out and i can't make any selections. How can i fix this?

I have tried the shared acess key and the other suggestion and that still didn't work. i navigated to the windows firewall option in his/my directory. mine has the keys EnableFirewall, etc., but his has none of that. I even tried creating the keys myself and it still didn't work. What can I do to fix this?

[dparm]

My only other suggestion would be to install a 3rd party firewall like ZoneAlarm.

But sometimes it's best to just backup all your important stuff, format the drive, and reinstall Windows. If the virus screwed up anything else, you're wiping any trace of that out. The computer would run like it was just out of the box.

[Viktor Ko]

Ok,

rundll32 setupapi,InstallHinfSection Ndi-Steelhead 132 %windir%\inf\netrass.inf

There needs to be a space between 132 and %, I spent an entire day trying to figure this out and it was because of that one space! Wasted my download on service pack 2.

Just want to say thanks, I really ow you bad. And man where do you have the time to read the window's support page!?

[PPP]

Found your site searching on Google for "Windows Firewall Repair"... I've been trying to fix the firewall for a while after a virus disabled it. I tried this and it works! Just wanted to say Thank YOU from Brazil!!!!

[Unregistered]

Thanks so much Dan!
Greetings from Brazil.

[Rich]

I skipped the reg file and went to the "rundll32 setupapi ..."
Followed up with the "netsh" command. Didn't even bother to re-boot and it works.

Thank you!

[Bill - Unreg.]

"Should that NOT work, this is the final thing you should try before reinstalling XP or ZoneAlarm:


1. From the command prompt, enter:

rundll32 setupapi,InstallHinfSection Ndi-Steelhead 132 %windir%\inf\netrass.inf

2. Restart
3. From the command prompt, enter NETSH FIREWALL RESET"


A thousand blessings upon you! This had been driving me nuts and your solution worked like a charm. Thank you!!!

[sniperkidd]

Ok in my Case, its is turned on, but i need it off (for some online games) and cant turn it off....the options are dimmed and i cant turn it off or on...any ideas?

[dparm]

Start->Run->services.msc

Find Windows Firewall/ICS service and set it to Disabled. Reboot.

[sniperkidd]

Cool Thanks alot

[Unregistered]

THANKS Dan, from a grateful repair tech in the UK.

[stevenjacks]

Thanks for helping out!!!
The frustration is now at an end!!!

Cheers
Steve
Perth
Western Australia

[Unregistered]

Hey man thanks, it helps :D. Greetings from Lithuania :)

[Unregistered]

this has been driving me nuts for weeks since i removed spyware...Dan you're the man, microsoft website search found me your solution and i'm just going off to run it now!
thanks from the UK
X

[Unregistered]

Thank you. My firewall just went down and I looked all over google before I found this forum. You save my crappy computer!

[Unregistered]

Solution 2 solved this problem and like everyone else I'm grateful, truly grateful.

[Unregistered]

This is from a fan in far away Scotland UK, a very big thank you. My son infected my wife's laptop and all hell broke loose. I got rid of the Adware but I could not restore the firewall so I was to blame too, but then I found your posting - pure geneous. Your solution worked like a dream. Again thank you, you saved a 15year old from certain ear ache for the next two months.

Yours Sincerely

Mark...

[mercymanic]

Thank you!!!!!

You RAWK!

[Balakrishnan]

Thanks yaar.. You suggestions helped me a lot in making my firewall on..

[Unregistered]

This worked. I have been trying everything to fix this problem and had had no luck. Thanks A lot!

[Pikachu]

Thank you very much . . . You save me . . .

[Unregistered]

thanx a million to all who provided solutions...i was gettin fustrated wid the pc n did many searches, but just when i was about to give up i came across this site

very grateful in d virgin islands
khandi thank u thank u

[Unregistered]

I am having a similar problem. I have tried everything on this forum as well as a number of other forums. The only difference is, when I start the machine and log in, the firewall starts fine. Then about 5 minutes after the computer starts, the firewall stops. When I try to go in via Run --> firewall.cpl, it give me a message saying that it cannot start the firewall. If I go into Services under the Control panel, and try and start the firewall, it says that there is an error: 5, access is denied. I have tried reinstalling SP2, but still no luck. Anyone have any ideas?

William Sargent
williams@usm.maine.edu

[Unregistered]

Thanks very much. I have been denied access to the Windows XP Firewall settings for some reason. Winsock reset has fixed the problem.

Graham.

England.

[dparm]

I am having a similar problem. I have tried everything on this forum as well as a number of other forums. The only difference is, when I start the machine and log in, the firewall starts fine. Then about 5 minutes after the computer starts, the firewall stops. When I try to go in via Run --> firewall.cpl, it give me a message saying that it cannot start the firewall. If I go into Services under the Control panel, and try and start the firewall, it says that there is an error: 5, access is denied. I have tried reinstalling SP2, but still no luck. Anyone have any ideas?

William Sargent
williams@usm.maine.edu


The fact that it turns off after a few minutes would be evidence of spyware or a virus. Have you run any scans?

[Unregistered]

So much thanks, i give up almost and then your help came in time.Thanx

[Unregistered]

Yeah, I have run Adaware, Spybot S&D, Symatec AV, and also a couple of other spyware programs, but have come up with nothing. I was able to uninstall XP SP2, reinstall it, and it will run under my account fine, then as soon as one of the other staff members logs in, it will start stopping after about 5 minutes. (it is the same user that it stops under).

William Sargent
williams@usm.maine.edu

The fact that it turns off after a few minutes would be evidence of spyware or a virus. Have you run any scans?

[dparm]

Well sometimes you can't really fix these sort of problems -- it may just be easiest to backup your data, format the drive, and reinstall Windows from scratch.

[Lucky Man]

WOW WOW WOW
I didn't believe it until it happened
I spent a lot of time (weeks) trying to solve this trouble
and here I am with a very simple trick returned my firewall back on
You deserve a lot of thanks

I hope you will achieve more success in your life.

[Unregistered]

i'm no expert, but my brothers computer got a virus, and i am 100% sure its gone. The effects of the virus were that windows security center service was off. i fixed that with no problems. the other effect was that windows firewall is stuck off. It is on the "off" setting and the entire firewall windows is greyed out and i can't make any selections. How can i fix this?

I have tried the shared acess key and the other suggestion and that still didn't work. i navigated to the windows firewall option in his/my directory. mine has the keys EnableFirewall, etc., but his has none of that. I even tried creating the keys myself and it still didn't work. What can I do to fix this?

"Grayed" options are propagated by group policy.
For computer, which is not a domain member:

1)Use Start-Run
Type "gpedit.msc"...

2)In the console tree navigate to
Computer configuration->Administrative templates->Network->Network Connections->Windows Firewall

3)Reset all options to "Not configured" for both local and domain profiles

[Unregistered]

thank you kind sir the magic worked for me
such ease for so much previous hassle your a genius

best wishes davo in oz

[olllie]

hey, im not much of a 'computer friendly' person as computer friendly people go, so im a bit stick, ive downloaded the atttached file and run it like u said, and it asks if i want to add '.REG' to my registry so i say yes. Then what??

[dparm]

Go to Start --> Run

Enter:

netsh firewall reset

Hit enter. Now try to enable the firewall from the Control Panel.

[internet stranger]

posting to add the words "windows firewall disabled" because google listed this as the 7th or so result for that phrase and it needs to be higher.

also, posting to say thank you.

[Unregistered]

I followed the instructions but I can't enable the firewall. PLEASE HELP>

[Ruud]

Thanks, it worked,

Read on another forum it is advisable to run a Adaware SE cleanup (from lavasoft) because it could be a trojan disabling the firewall.

After i also used the rundll thing, good work!

Now i still have a problem with sharing printer over network

I can ping 192.168.1.101 but not it's hostname
Nor does the computer appear in the WORKGROUP in windows network group

Anyone have an idea?

[Radiofisik]

thanks a lot for that solution

[Mark]

Hope someone can help. Have tried all solutions suggested by Dan at the start of the thread.

Like "UnRegistered" the Windows Firewall service starts when first logging in, and then a few minutes later shuts down (although there is no event in the event log for the shutdown). Also, like Ruud I cannot get access to the computers host name, although I can ping it via the IP address.

Last symptom is that on shutting down windows I get a "Closing Network Connections..." status message even though nothing is connected (I have removed the ethernet cable, rebooted, waited for the firewall to fail and still get this symptom).

Any help muchly appreciated as I am pulling out what little hair I have.

[Mark]

Sorry - should also have said I have scanned for viruses (Norton Antivirus) and for malware (both with Win defender and Lavasoft Adaware)

[dparm]

Thanks, it worked,

Read on another forum it is advisable to run a Adaware SE cleanup (from lavasoft) because it could be a trojan disabling the firewall.

After i also used the rundll thing, good work!

Now i still have a problem with sharing printer over network

I can ping 192.168.1.101 but not it's hostname
Nor does the computer appear in the WORKGROUP in windows network group

Anyone have an idea?


If you can ping the IP address but not the hostname, that indicates a DNS problem...DNS translates the IP address into a hostname.

[Mark]

Fixed my problem using Windows System File checker - ran SFC /SCANNOW from the command prompt. Caused a few other issues with video drivers that needed to be re-installed but hey, its better than re-installing.

Fantastic Forum.
Mark

[Unregistered]

I would much rather use Dial-a-fix (http://wiki.djlizard.net/Dial-a-fix) to fix the issues.

[Unregistered]

thank you so much all the way from Copenhagen Denmark this saved me from re-installing Windows XP and was a huge help!!!

[Unregistered]

i have been playing battlefield 2 for a couple of weeks now and only very resently have i been having a problem, when running ntl netguard firewall i have no problem connecting through battlefield, opening with hlsw, but since i have switched to a all round better firewall, windows, i cannot get passed the login screen when trying to get in game, hlsw and battlefield both have access according to windows firewall but i get nothing.
If i start battlefield 2 up it loads fine and then requests account details, all fine and normal, but on clicking connect it will get stuck on that page with the spinning 2 on screen. when ctrl alt + del to enter task manager is says battlefield 2 not responding.
Same thing happens when logging in with hlsw but will stand on blank screen.
I am sure this is to do with windows firewall but no idea on how to conquer it.

Anyone had the same problem or know of anything i can try to allow me to continue using windows firewall with out giving up my favourite game

[Unregistered]

Thank you! After I uninstalled NAV 2005, my windows firewall disappeared. Your second method worked like a charm.

- Anthony

[Unregistered]

Your solution works great.

Thanks

Karel, Slovenia

[Ian from the UK]

used this info to solve the following problem

norton internet security installed on new PC (HP) as trialware. after following uninstall routine for that, windows firewall wouldn't start up: getting access denied message when trying to manually start W-FW; security control panel firewall section thought that norton was still present although it was uninstalled it must have left traces... couldn't find anyway to force reinstallation or reinitialization of windows firewall until googling found me this thread.

ran the attached registry file plus the first two cli commands, reboot, its fixed!

would never have got this from manufacturer support

awesome!

[eri_nyc]

I tried everything and spoke to many people about this problem and still can't turn on the firewall. Its been quite some time now and i don't want to repair windows and install it from scratch. Please try to help me. Thx

This is the error when i try to start the service:

***Could not start the windows firewall/internet connection sharing ICS service on local computer.
error 10047:an address incompatible with the requested protocol was used.***

[Unregistered]

Dan, many thanks - the first solution (reg file and reset) fixed my windows firewall problem (error 123 when trying to start the service)... and i didn't have to buy one of those registry repair programs... ;-)

[Eric]

thanks, works perfectly!

greetz from Holland!

[Richard]

You are the man!!! works great
Thnx

[M.Shaltaf]

THaaaaanks soooooooo much

[Unregistered]

Thankyouthankyouthankyou! I've been stressing out about this like crazy for almost a month now. Seriously, thanks so much for posting this, you are a gentleman and a scholar.

[Unregistered]

Thank u, thank u, thank u!!!!

[Unregistered]

When I tried the first method, it blew up my start menu. How am I supposed to get it working properly? And I don't get the second method at all.

[Instru Mental]

My good sir, you are my freakn hero! Cheers from Atlanta, GA.

[Unregistered]

Hi,
Thanks for the great post, but my problem is worse, I think. I physically deleted alg.exe from ..\windows\system32, during worm cleanups.
Anyway I can recover this file or reinstall the firewall only? I've already tried to undelete it using various third party software, but it's gone.

Any help would be appreciated thanks,
Bryan

For anyone having Windows Firewall problems after cleaning out spyware, here is the fix. No more installing ZoneAlarm! The system in question must be running XP with Service Pack 2.


1. Run the attached .REG file.
2. From the command prompt, enter

netsh firewall reset

3. Open Windows Firewall control panel and enable it.


Should that NOT work, this is the final thing you should try before reinstalling XP or ZoneAlarm:


1. From the command prompt, enter:

rundll32 setupapi,InstallHinfSection Ndi-Steelhead 132 %windir%\inf\netrass.inf

2. Restart
3. From the command prompt, enter NETSH FIREWALL RESET


Hope this helps.




One more possible fix, if you can't get the above two steps to work:

1. From the Command Prompt, enter:

netsh winsock reset

2. After receiving a confirmation, reboot
3. Check if the Windows Firewall service has started. If not, repeat the above two steps.

[Newbie >.<]

My error message is:

"Windows could not start the windows firewall/ICS service on Local Computer.

Error 5: Access is Denied"

Can i still use the method below?

For anyone having Windows Firewall problems after cleaning out spyware, here is the fix. No more installing ZoneAlarm! The system in question must be running XP with Service Pack 2.


1. Run the attached .REG file.
2. From the command prompt, enter

netsh firewall reset

3. Open Windows Firewall control panel and enable it.


Should that NOT work, this is the final thing you should try before reinstalling XP or ZoneAlarm:


1. From the command prompt, enter:

rundll32 setupapi,InstallHinfSection Ndi-Steelhead 132 %windir%\inf\netrass.inf

2. Restart
3. From the command prompt, enter NETSH FIREWALL RESET


Hope this helps.




One more possible fix, if you can't get the above two steps to work:

1. From the Command Prompt, enter:

netsh winsock reset

2. After receiving a confirmation, reboot
3. Check if the Windows Firewall service has started. If not, repeat the above two steps.

[spud24]

ok some one please help me ive tried everything on this site you guys have suggested but my problem is when i click on firewall a messege comes up and its all gray and i cant turn on my firewall my internet has gone rubbish works for a bit and then when i click on something the timer comes up for a sec and then goes off and the page does not load and i dont one't to reinstall windows i live in bulgaria and no one knows please help me

[Kantech]

Hi,

Today, I've just found the solution and would like to share with you.

I've also encountered the same error "Error 5: Access is Denied" when trying to start the firewall in the Services. Struggled for a few days and tried all methods including those in this forum. It did not solved the problem.

Same symptoms: After restarting PC, Firewall started for a ~3min before it exit and cannot start via Services or Control Panel-> Windows Firewall.

I've downloaded and installed 5 windows security updates and 1 IE6 cumulative updates and the problem was fixed.

For those who encounter similiar problem, you may want to give it a try.

I'm not sure which patch solve it but I'm just glad/relieve that I'm able to turn on the firewall again.

http://www.microsoft.com/technet/security/bulletin/ms07-apr.mspx
WindowsXP-KB925902-x86-ENU.exe
WindowsXP-KB930178-x86-ENU.exe
WindowsXP-KB931261-x86-ENU.exe
WindowsXP-KB931784-x86-ENU.exe
WindowsXP-KB932168-x86-ENU.exe

http://www.microsoft.com/technet/security/bulletin/ms07-016.mspx
WindowsXP-KB928090-x86-ENU.exe


Rgds,
Kantech

[Nicholas Tabor]

First, I would like to say that this is a great forum. I generally scan and end up leaving most forums because they aren't particularly helpful. I stumbled upon this forum in a Google search, and my problem is similar, yet not one person on here is having the same outcome as I. I am working on a computer for a client and have been beating my head against a wall for a few days now.

The Computer in question is a beast, and has no hardware issues. The Firewall service is nonexistent for the most part. I tried the Microsoft KB Method of repair:

1. From the command prompt, enter:
rundll32 setupapi,InstallHinfSection Ndi-Steelhead 132 %windir%\inf\netrass.inf
2. Restart
3. From the command prompt, enter NETSH FIREWALL RESET

These seemed to work without without error. However did not fix my problem.

When I browse the Services, Windows Firewall is enabled, but does not run. It cannot start because it is no longer associated with any device. Odd.

If I open properties for the LAN Connection, the third tab is missing, and no firewall options are presented. This would be fine if the firewall was not active, but it is.

The computer can access the internet, and all shares on the Domain. I have no problem using other resources, but i cannot even ping the computer in question. I was going to attempt a Windows Repair, however it was setup with RAID drives and as a result they do not appear in the windows installer. Instead, it shows no drives exist on the machine. I am absolutely stuck.

Do you have any ideas? If so I would grately appreciate your insight.

Thanks,
Nicholas Tabor
nicholastabor@earthlink.net

[dparm]

Might be time to backup your data and attempt a repair (or if you're feeling ambitious, a full) Windows install.

[Nicholas Tabor]

Dan, thanks... I actually just solved the problem...

None of the fixes worked. In the Properties for Windows Firewall, there is a tab which lists profiles, and somehow the profile had been changed to disabled, which locked the firewall service and would not allow it to start. After enabling the profile, I was able to access it and change the settings.

Thanks for your response!

Nic

[Tobbe]

Thanks.
After the 8'th of may windows update my system seemed messed up.
A bunch of services didn't start.
I'm not going into all details, but your suggested solution worked fine.
I applied the registry settings and made the reset.
(I also had to reboot)

My day just went from misserably to bad.
Thank you!

[The Genius.]

Damn, good solution! I was thinking, i gonna hack my one computer because restalling windows din't help! Finally all the problems with my firewall are solved. Really thanks, you are the best!!! Ow yeah, only the 2nd solution worked... And you must reboot. Thank you!

[Unregistered]

!!! works!!!!! thx a lot

[Unregistered]

I am unable to physically change the firewall settings directly. How do I fix this? Is there a way to download several files related to the normal functioning of the firewall? I have another computer that I can get the files from if I just know what I need to do to do a full repair.

[Unregistered]

Ok, more on my problem. When I go the the services (Loca) thingy. I open up Windows Firewall/Internet Connection Sharing (ICS). THen I go to the Log On button and try to change something and get this error. "Configuration Manager: The specified device instance handle does not correspond to a present device." My other computer that has never had these issues does not give me this error. This makes me think that something is set wrong some where or damaged.

[Unregistered]

Thank you from Italy

[Unregistered]

thank god for this post!!!!!!! it helped me a lot!!!! i installed comodo firewall, and after i install it,,, my tcp/ip are gone!!! thus, i can't connect to the internet anymore!!! i tried to uninstall the comodo firewall but my windows firewall has turned off....

[Freeman]

Even microsoft technicians can't handle this problem. You must be an expert.
It's good that you use your ability for good, not to hack! (lol)
Thx anyway. It has been quite problematic to have my firewall turned off.

[Unregistered]

Finally found a fix for my problem!!! thanx a lot!

I actually tryed to query the google for exact error message, which was: "Windows cannot start the Windows Firewall/Internet Connection Sharing (ICS) service" with "Error 123: The filename, directory name, or volume label syntax is incorrect", but didn't find this solution. I hope Google will index this post very soon.

[Unregistered]

Nicely done...worked like a charm!!!

[vqp]

I didn't need to execute the REG file, the netsh firewall reset worked alone.
Anyway, THANK YOU!!!

[Anupam]

Method 1: Call the "Setup API InstallHinfSection" function to install Windows Firewall
To install Windows Firewall, follow these steps:
1. Click Start, click Run, type cmd, and then click OK.
2. At the command prompt, type the following command line, and then press ENTER:
Rundll32 setupapi,InstallHinfSection Ndi-Steelhead 132 %windir%\inf\netrass.inf
3. Restart Windows,
4. Click Start, click Run, type cmd, and then click OK.
5. At the command prompt, type the following command, and then press ENTER:
Netsh firewall reset
6. Click Start, click Run, type firewall.cpl, and then press ENTER. In the Windows Firewall dialog box, click On (recommended), and then click OK.
--------
Method 2: Add the Windows Firewall entry to the registry
Warning Serious problems might occur if you modify the registry incorrectly by using Registry Editor or by using another method. These problems might require that you reinstall your operating system. Microsoft cannot guarantee that these problems can be solved. Modify the registry at your own risk.

To add the Windows Firewall entry to the registry, follow these steps:
1. Copy the following text into Notepad, and then save the file as Sharedaccess.reg:

Windows Registry Editor Version 5.00

[-HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Servic es\SharedAccess]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Servic es\SharedAccess]
"DependOnGroup"=hex(7):00,00
"DependOnService"=hex(7):4e,00,65,00,74,00,6d,00,61,00,6e,00,00,00, 57,00,69,00,\
6e,00,4d,00,67,00,6d,00,74,00,00,00,00,00
"Description"="Provides network address translation, addressing, name resolution and/or intrusion prevention services for a home or small office network."
"DisplayName"="Windows Firewall/Internet Connection Sharing (ICS)"
"ErrorControl"=dword:00000001
"ImagePath"=hex(2):25,00,53,00,79,00,73,00,74,00,65,00,6d,00, 52,00,6f,00,6f,00,\
74,00,25,00,5c,00,73,00,79,00,73,00,74,00,65,00,6d ,00,33,00,32,00,5c,00,73,\
00,76,00,63,00,68,00,6f,00,73,00,74,00,2e,00,65,00 ,78,00,65,00,20,00,2d,00,\
6b,00,20,00,6e,00,65,00,74,00,73,00,76,00,63,00,73 ,00,00,00
"ObjectName"="LocalSystem"
"Start"=dword:00000002
"Type"=dword:00000020

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Servic es\SharedAccess\Epoch]
"Epoch"=dword:00002cd0

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Servic es\SharedAccess\Parameters]
"ServiceDll"=hex(2):25,00,53,00,79,00,73,00,74,00,65,00,6d,00, 52,00,6f,00,6f,\
00,74,00,25,00,5c,00,53,00,79,00,73,00,74,00,65,00 ,6d,00,33,00,32,00,5c,00,\
69,00,70,00,6e,00,61,00,74,00,68,00,6c,00,70,00,2e ,00,64,00,6c,00,6c,00,00,\
00

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Servic es\SharedAccess\Parameters\FirewallPolicy]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Servic es\SharedAccess\Parameters\FirewallPolicy\DomainPr ofile]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Servic es\SharedAccess\Parameters\FirewallPolicy\DomainPr ofile\AuthorizedApplications]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Servic es\SharedAccess\Parameters\FirewallPolicy\DomainPr ofile\AuthorizedApplications\List]
"%windir%\\system32\\sessmgr.exe"="%windir%\\system32\\sessmgr.exe:*:enabled:@xpsp2re s.dll,-22019"

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Servic es\SharedAccess\Parameters\FirewallPolicy\Standard Profile]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Servic es\SharedAccess\Parameters\FirewallPolicy\Standard Profile\AuthorizedApplications]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Servic es\SharedAccess\Parameters\FirewallPolicy\Standard Profile\AuthorizedApplications\List]
"%windir%\\system32\\sessmgr.exe"="%windir%\\system32\\sessmgr.exe:*:enabled:@xpsp2re s.dll,-22019"

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Servic es\SharedAccess\Setup]
"ServiceUpgrade"=dword:00000001

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Servic es\SharedAccess\Setup\InterfacesUnfirewalledAtUpda te]
"All"=dword:00000001

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Servic es\SharedAccess\Enum]
"0"="Root\\LEGACY_SHAREDACCESS\\0000"
"Count"=dword:00000001
"NextInstance"=dword:00000001

2. Double-click Sharedaccess.reg to merge the contents of this file into the registry and to create the Windows Firewall entry.
3. Restart Windows.
4. Click Start, click Run, type cmd, and then click OK.
5. At the command prompt, type the following command, and then press ENTER:
Netsh firewall reset
6. Click Start, click Run, type firewall.cpl, and then click OK.

[Unregistered]

Thank you SO MUCH Dan Parmelee! Lost many hours trying to solve this problem last night. Recently, installed NOD32 and tinkering with Hamachi, MS Remote Assistance, and MS NetMeeting, and VNC and TightVNC installed.

Perhaps one of these messed things up.

Anyway, your second solution after reboot is the one that got me back to normal.

Thanks again!

~Frank

[Bertkash]

thank you for the info on how to get win firewall back up after the 123 error .... again thanks!
BertK

[Unregistered]

Here's my situation...I went to turn my comp off and it gave me the option to install windows updates by clicking the Shut Down button. So I click shut down, the updates install and my comp shuts off. I turn it on this morning and I cant access the internet. Then a little red shield shows up saying that my firewall is off.The modem works as does the router and the other two comp's in the house have Internet. So I do everything that has been listed on this forum and and I still get nothing. I went to Control Panel > Admin. Tools > Services and I tried to start WF/ICS and I get:

"Windows could not start the windows firewall/ICS service on Local Computer.

Error 2: The System cannot find the file specified"

What else can I try I really cant afford to reinstall. Any help is appreciated.

Thanks,
Kyle

[Unregistered]

I have the "Due to an unidentified problem, Windows cannot display Windows Firewall settings" problem. I downloaded the file sharedaccess.reg and double clicked it. I got the "Open With" dialog box asking me to select which program to open sharedaccess.reg with.

This does not look right. Suggestions on what to do now?

[Unregistered]

I had no problem after entering the
"rundll32 setupapi" but as i typed the "InstallHinfSection Ndi-Steelhead 132 %windir%\inf\netrass.inf" part, the cmd answers 'InstallHinfSection' is not regonized as a internal or external command, operable program or batch file.'

How should i fix this problem

Thanks

that error is when you input the data without the capitals, the command is case sensitive and should be

rundll32 setupapi,InstallHinfSection Ndi-Steelhead 132 %windir%\inf\netrass.inf

[Unregistered]

Hi. I stumbled upon this solution in a google search. After uninstalling Zonealarm, which caused my PC to take 6 months to boot, I re-enabled Windows Firewall. The service was running, and the lock icon appeared. A few days ago, while trying to connect to my job's VPN, I got a message saying I did not meet firewall requirements! That is when I found out that the firewall wasn't on!

Not good. :( Anyhow, this solution seemed to work. Is there any way to test the firewall to make sure it is on? It is upsetting to me to think that Windows Firewall can APPEAR on and not be.

Again, thank you kindly for the solution.

Tony M.

[Rogue Valley Madman]

Well I found you guys by doing a search "how to repair windows firewall" and this is the #1 spot on my search while in Google. My problem is, every time I go to turn the firewall on or off it tells me "DUE TO AN UNIDENTIFIED PROBLEM, WINDOWS CANNOT DISPLAY WINDOWS FIREWALL SETTINGS" Wow thank you Bill Gates!!!!!

I have Windows Pro, service pack 2 and while my Windows Firewall is "ON" I can't get into the settings to make the changes I need to allow some program access.

What a crock!!!!

[Rogue Valley Madman]

BTW, if YOU had taken the time to do a search you would of seen this information and saved yourself, tossing coins and worshiping another internet user. At least he was able to do your work for you and bring this here. I mean my GOD what would happen if you had to go out in the real world and do something for yourself.



http://windowsxp.mvps.org/sharedaccess.htm

[Rogue Valley Madman]

Or just go to Services.mcs, look for Windows Firewall/internet Connection Sharing (ICS), STOP the service, restart it and then change whatever settings you want. JFC, its not Rocket Science.

[Unregistered]

I tried all of the fixes nothing worked. However I reinstalled Service pack 2 and everything was fine.

[Unregistered]

I tried and tried but nothing worked. Thank you very much for the help. It worked perfectly.

[Chris IDSG]

In reply of someone on 16/5/2006 about the error Configuration Manager: The specified device instance handle does not correspond to a present device. First of all make sure you have got a registry backup in case that something goes wrong. Just in case. And then go to HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Servic es\SharedAccess. Watch carefully the subkey ENUM and value 0. Take its value named Root\LEGACY_SHAREDACCESS\0000. Now go to the HKLM\SYSTEM\ControlSet001\Enum\Root. If your ROOT key has got only-read privillidges, give full access to write on, otherwise you can add nothing. Then make a new key there named LEGACY_SHAREDACCESS. Into it, create a new DWORD(hex) named NextInstance and give it the value 1. Now in LEGACY_SHAREDACCESS as you are already, create a new key named 0000 and start to add the following items carefully into it:
No: Type of: Name of type: Value:
1. Follow characters value Class Legacy Driver
2. Follow characters value ClassGUID *
3. DWORD Value(hex) ConfigFlags 0
4. Follow characters value DeviceDesc Provides network address translation, addressing, name resolution and/or intrusion prevention services for a home or small office network.
5. DWORD Value(hex) Legacy 1
6. DWORD Value(hex) NextInstance 1
7. Follow characters value Service SharedAccess
When you finish inputing these items, create a new key in 0000(the last key, don't worry you are about to finish), named Control. Create a Follow characters value into Control named ActiveService and give the value SharedAccess in it.

(About the asterisk mark in No.2, Any machine has got its own ID. And I think that in new instalations this value changes. To be sure, watch carefully the same fields in other legacy_services in ROOT key and take the ID from one of them and put it through in Legacy_SharedAccess[=Firewall/ICS]. And in No4. you can leave the field DeviceDesc empty as well.)

I am sorry for my bad English. I use Windows XP SP1 Greek and I tried to give a translation to all of these steps into English. I had the same error problem as the writer of 16/5/2006. I have tried to edit the registry as it is above and Firewall/ICS seems to work very well and no error message appeared again. But take care and be warned: don't try it if you don't take a registry backup before. It's important to ensure your next startup first than to try fixing things later. :P

[Unregistered - Eli]

I have had an issue for while with my ICS service and this fixe it. I also found another way to follow the same result offered http://support.microsoft.com/kb/920074

Thanks again!!!!!

[Unregistered]

I don't know if I'm doing something wrong, but I had no problem adding the registry modification. When at the command prompt, I entered the text prescribed text, and nothing happens. The cursor just goes to the next line when I hit "enter" and ... nothing. I can't type anything else after that.

When I go to the control panel and click on the Windows Firewall, I get a message that says "Due to an unidentified problem, Windows cannot display Windows Firewall settings."

Also, when the computer is re-booted, the Security Center will sometimes show the Windows Firewall on for a few moments, and then it shows it as being off.

Any suggestions?

[mallessa]

i cant turnon my firewall in the general tab...and below it it's mentioned "for your security ,some settings are controlled by Group Policy"...whats the problem??i would really appreciate if you could help me fix the prob

[Mark]

Great Stuff Saved me a re config job on my mums pc thanks for shareing the info online guys ;o)

[Unregistered]

tried all the stuff in the 1st post, still get this error when i try to start the service, any ideas?

http://img123.imageshack.us/img123/5162/errvp8.jpg (http://imageshack.us)

also 90% if my network services after i reboot that are set to automatic do not turn on as well, but i can manualy start them

[Unregistered]

^
|
|

update, all fixed by reinstalling XP SP2

[Fabio]

Ok now all is ok. But if i change a little bit the default configuration of the firewall, it does not work again!!!!

[ComRadkeL]

I cant get it working. Please help...

[richard5]

I cant get it working. Please help...

We need much more information. Please provide as much of a detailed explanation of the problem as you can and your systems specifications.

[nlopez]

This thread had grown too huge and difficult to navigate to new posts so I'm closing it.