Windows Firewall can't change settings, error 0x8007042c

[bhawks]

Hi,

Not exactly sure what happened, but my Windows Firewall is turned off and I cannot turn it back on.
I receive error code 0x8007042c when I try to turn it on manually.

Ran Panda Antivirus Free and Malwarebytes Anti-Malware and no virus or malware found.

I've tried the suggestions from the Microsoft website ?0x8007042c? error message when you try to start Windows Firewall but no success.

I've also gone to Services and run as admin. Received the following error messages for each when trying to start the service:
1. Windows Firewall: "Error 1068: The dependency service or group failed to start."
2. Base Filtering Engine: "Error 5: Access is denied."
3. SharedAccess/Internet Connection Sharing: "Error 1068: The dependency service or group failed to start."

Can anyone help?

Thank you!

 

[ShoTTaS]

Hi bhawks,

Try this methods: Windows firewall can't change some of your settings Error code - Microsoft Community

If no virus or malware found on your scan. I would suggest doing a System Restore from the day you think your firewall is enabled. Also, you can do SFC /SCANNOW

 

[cottonball]

bhawks,

Were you able to solve the problem?

 

[bhawks]

No virus or malware found. I've tried all 4 methods that Microsoft support page recommended here: ?0x8007042c? error message when you try to start Windows Firewall

I've also tried the following steps and received errors:
1. Open a Command Prompt as Administrator. To do this, type CMD in Start Search from the Start Menu. Right click on the result and choose "Run as Administrator".
2. Run now the following command lines:
a. netsh advfirewall reset
b. net start mpsdrv
c. net start bfe
d. net start mpssvc
e. regsvr32 firewallapi.dll

I checked and it seems that I'm missing this file: c:\windows\system32\drivers\mdsdrv.sys

Any other suggestions? I really don't want to do a system restore if I can avoid it.

Thanks!

 

[bhawks]

Just tried one more thing--adding a Local Service account using steps below:
Go to Control Panel -> Systems & Security -> Adminstrative Tools ->

Scroll down to Windows Firewall ->

Double click Windows Firewall ->
****Can't double click and continue to next stop because receive error message that Windows Firewall snap-in failed to load. Error code: 0x6D9

Click Log On Tab ->

Select This account ->

Browse for LOCAL SERVICE user (Advanced -> Find Now -> LOCAL SERVICE) ->

Leave the password filed blank

Apply the changes

 

[bhawks]

Was hesitant to do a system restore since unsure of what it involved. Realized I was getting it confused with a re-install. Anyway, the system restore did the trick and Windows Firewall is up and running now.

 

[cottonball]

bhawks,

Glad you got it working again.

To reconfirm all is well, please go to Start > right click: Computer > Device Manager
In Device Manager, click View, and check: Devices by Connection
Once again, click View: Show hidden devices

Scroll down to: Windows Firewall Authorization Driver
Double-click, and, in the Properties prompt, select the Driver tab.
Make sure the Startup Type is: Demand

 

[bhawks]

Followed your steps and everything looks fine including mdsdrv.sys file showing up now.

But I did find something else while in Device Manager. Microsoft Teredo Tunneling Adapter shows with a warning symbol (yellow triangle with exclamation mark inside it).

Do I need to worry about this error? When I look at the Properties, it shows "This device cannot start. (Code 10)". However, I don't have any problems connecting to the internet via ethernet connection and cable modem.

 

[cottonball]

Let's see what the following shows...

Please download SystemLook from the link below and save it to your Desktop.
Download Mirror #1

Double-click SystemLook.exe to run it.

Copy the content of the following codebox into the main textfield:

:reg 
HKEY_LOCAL_MACHINE\SYSTEM\CURRENTCONTROLSET\SERVICES\TCPIP6\PARAMETERS

Click the Look button to start the scan.

When finished, a notepad window will open with the results of the scan.

Please post the SystemLook.txt in your next reply.

 

[bhawks]

Here you go:


SystemLook 30.07.11 by jpshortstuff
Log created at 14:09 on 07/04/2015 by lowe
Administrator - Elevation successful

========== reg ==========

[HKEY_LOCAL_MACHINE\SYSTEM\CURRENTCONTROLSET\SERVICES\TCPIP6\PARAMETERS]
"Dhcpv6DUID"=00 01 00 01 17 ed 82 0f 08 9e 01 1a f6 ea (REG_BINARY)
"DisabledComponents"= 0x000000008e (142)

[HKEY_LOCAL_MACHINE\SYSTEM\CURRENTCONTROLSET\SERVICES\TCPIP6\PARAMETERS\Interfaces]

[HKEY_LOCAL_MACHINE\SYSTEM\CURRENTCONTROLSET\SERVICES\TCPIP6\PARAMETERS\Winsock]


-= EOF =-

 

[cottonball]

Looks like the IPv6 protocol on the computer was disabled using the Registry.

:info: Please press the Windows key and the R key.
In the Run prompt, type in: regedit

In the Registry Editor please go to:

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\TCPIP6\Parameters

:warn: Before making any change to the Registry key, back it up, so the Registry subkeys containing values that you're planning on changing are not lost.

In the Registry Editor menu, select File and then Export....

In the Export Registry File window that appears, select the Desktop as the location to save the file.

Using the File name text field, enter a name for the backup file. Make the name whatever you wish. (Example: Parameters)

Click the Save button, and a Registration File with a .reg file extension is created on the Desktop.

When we are done, and all is well, right-click the file, and select: Delete

Please do not double-click the .reg file, since the action will reinstate the previous entry in the Registry! :warn:


:info: Now, highlight and right-click: DisabledComponents
Select: Modify

In the Edit DWORD Value prompt, Value Data area, set the value to 0 (that is zero)


:info: Restart the computer.

:ar: Run SystemLook the same as before, and post the new SystemLook.txt in your reply.

 

[bhawks]

After making the registry change and restarting the computer, first thing I noticed is I lost internet connection via ethernet.

Below is the results from SystemLook:

SystemLook 30.07.11 by jpshortstuff
Log created at 11:40 on 08/04/2015 by lowe
Administrator - Elevation successful

========== reg ==========

[HKEY_LOCAL_MACHINE\SYSTEM\CURRENTCONTROLSET\TCPIP6\PARAMETERS]
(Unable to open key - key not found)

-= EOF =-

 

[cottonball]

Let's take it back to what it was.

Please go back to the .reg file created on the Desktop, and double-click it.

Agree to merge the entry into the Registry.

Restart the computer, and run SystemLook once again.

Please post its results.

 

[bhawks]

Not sure what you mean by merge registry entry...

Here's the SystemLook results after reverting back to way it was (looks the same as the last time):

SystemLook 30.07.11 by jpshortstuff
Log created at 15:09 on 09/04/2015 by lowe
Administrator - Elevation successful

========== reg ==========

[HKEY_LOCAL_MACHINE\SYSTEM\CURRENTCONTROLSET\SERVICES\TCPIP6\PARAMETERS]
"Dhcpv6DUID"=00 01 00 01 17 ed 82 0f 08 9e 01 1a f6 ea (REG_BINARY)
"DisabledComponents"= 0x000000008e (142)

[HKEY_LOCAL_MACHINE\SYSTEM\CURRENTCONTROLSET\SERVICES\TCPIP6\PARAMETERS\Interfaces]

[HKEY_LOCAL_MACHINE\SYSTEM\CURRENTCONTROLSET\SERVICES\TCPIP6\PARAMETERS\Winsock]


-= EOF =-

 

[cottonball]

Merging the Registry entry reinstates it. That is what you did.

Is your Internet connection via Ethernet OK now?

 

[bhawks]

Yes, internet connection via ethernet is working after the merge.

The error for Teredo Adapter still appears. Everything is working fine so I think I'll leave it as is. I feel that tinkering with it and trying to fix it might cause more problem than it's worth.

What do you think?

 

[cottonball]

Good! Glad it is working.

Everything is working fine so I think I'll leave it as is. I feel that tinkering with it and trying to fix it might cause more problem than it's worth.

You may want to post the Teredo Adapter issue in the following forum:
http://www.sevenforums.com/network-sharing/

Someone there may be able to provide you assistance the heck of a lot better than what I can in this System Security forum.


.