Windows Firewall ICS service not automatically starting
-
Windows Firewall ICS service not automatically starting
I am using Windows XP SP2 and in the Security Center I click on Windows Firewall. I get the message
"Windows Firewall settings cannot be displayed because the associated service is not running. Do you want to start the Windows Firewall/Internet Connection Sharing IICS) service?
I run Services.msc from the Run window and in the Services (Local), the ICS has a Startup Type of Automatic, but it is not started.
After I click yes in the message prompt, the ICS starts.
When I click on Windows Firewall again, the On is grayed out, Off is selected but is also grayed out. At the top of the window it says For your security, some settings are controlled by Group Policy.
I type gpedit.msc and under Local Computer Policy>Computer Configuration>Administrative Templates>Network>Network Connections>Windows Firewall and for both the Domain Profile and the Standard Profile I have Windows Firewall:Protect all network connections Enabled.
A few questions...
1.) Why is the ICS service not starting when it is set to automatic?
2.) Why is the firewall not shown as on?
3.)Is the firewall turned on or off?
I am investigating this because I am unable to access webpages. I can ping the locations, but can not open them in Firefox or IE7.
I have a connection to my Cable Modem through a wireless router. My hardwired computer is having the problems. My wireless laptop has no issues accessing the web pages.
Another error that I have noticed in the Event Viewer recently is...
Event ID:7023 The Computer Browser service terminated with the following error:This operation returned because the timeout period expired.
I also am getting a warning Event ID 4226 TCP/IP has reached the security limit imposed on the number of concurrent TCP connect attempt.
Sorry about the longwinded description, but if anyone can help I would greatly appreciate saving what little hair I do have left.
-
Are you the Main Administrator on this machine?
PROBLEM
Windows cannot start the Windows Firewall/Internet Connection Sharing (ICS)
service.
SOLUTION
Perform the following steps in XP SP2 if you get the above message when
trying to activate its new firewall.
1) Reset the Winsock.
a) Go to the command prompt.
b) Type the command "Netsh winsock reset" (without the quotes), and press
ENTER.
c) This won't take effect until after you re-boot in step 4.
2) Install and run a spyware-removal program.
Some spyware won't let you activate your firewall, for obvious reasons.
Spybot Search & Destroy and Lavasoft's Ad-Aware are recommended.
3) Make sure the ICS (Internet Connection Sharing) service is set to
start automatically.
a) Go to the Control Panel.
b) Double-click "Administrative Tools".
c) Double-click "Services".
d) Scroll to the bottom of the list; double-click "Windows
Firewall/Internet Connection Sharing (ICS)"
e) Make sure the Startup type is set to Automatic.
f) Click Apply, if needed.
g) Click OK.
4) Restart your system.
5) Your firewall should now be up. Check it by going to the Control
Panel.
a) Double-click the Security Center Icon
b) The firewall section will be green and say "ON".
Also disable any third party Firewall if you want to use XP's.
-
I performed all of the steps, including running Spybot S&D. When entering the firewall section I am still getting the ICS service is not running and the Firewall is grayed out and OFF is selected.
In my Spybot scan I received the following problems(i.e. they are displayed in red type and checked)
-Microsoft.WindowsSecurityCenter_disabled
Settings
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Servic es\wscsvc\Start!=W=2
-Windows Security Center.AntiViursDisableNotify
Settings
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\AntiVirusDisableNotify!=dword:0
-Windows Security Center.AntiVirusOverride
Settings
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\AntiVirusOverride!=dword:0
-Windows Security Center.FirewallDisabled
Settings
HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\win dowsfirewall\standardprofile\enablefirewall!=dword :1
Settings
HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\win dowsfirewall\domainprofile\enablefirewall!=dword:1
-Windows Security Center.FirewallDisableNotify
Settings
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\FirewallDisableNotify!=dword:0
-Windows Security Center.FirewallOverride
Settings
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\FirewallOverride!=dword:0
-Windows Security Center.SP2Update
Settings
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Policies\Mic rosoft\Windows\WindowsUpdate\DoNotAllowXPSP2!=dwor d:0
-Windows Security Center.UpdateDisableNotify
Settings
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\UpdatesDisableNotify!=dword:0
I fixed the selected problems in Spybot.
After my restart and noticing that my firewall seemed in the same state, I reran Spybot and the same problems showed up again.
-
I would recommend following the instructions in this post:
http://www.d-a-l.com/help/showthread.php?t=32403
Then post a HijackThis log in that section of the forum (not in this one).
If they give you an all clear and the problems persist please return to this thread.