{"id":1430,"date":"2016-01-14T12:20:10","date_gmt":"2016-01-14T06:50:10","guid":{"rendered":"http:\/\/198.58.113.91\/blog\/?p=1430"},"modified":"2024-04-06T12:35:48","modified_gmt":"2024-04-06T07:05:48","slug":"fix-base-filtering-engine-service-startup-problems","status":"publish","type":"post","link":"https:\/\/www.winhelponline.com\/blog\/fix-base-filtering-engine-service-startup-problems\/","title":{"rendered":"How to Fix Base Filtering Engine Service Startup Problems"},"content":{"rendered":"

The Base Filtering Engine (BFE) service is a crucial network component targeted by malware. If the BFE service doesn’t start, many services, such as Windows Firewall, Routing, Remote Access, and others, fail to start.<\/p>\n

If the BFE service is missing from the Services MMC or the Action Center warns you that the Windows Firewall isn’t enabled, your system is likely under malware attack. Have it checked thoroughly using a reputed anti-malware tool, or you may seek professional help to eliminate malware. Trying to repair these services when malware is on board your system isn’t going to help.<\/p>\n

\nThis post assumes that you’ve done a malware cleanup and want to know how to fix the BFE and Windows Firewall services.<\/em>\n<\/div>\n

The first (and probably the only) thing most of us do to reinstate the Base Filtering Engine Service is to import the service registry keys from a similar computer, which is a correct step. But this only enlists the service in the Services MMC, but the required service Permissions aren’t assigned automatically. Due to missing special permissions for the BFE service, the following errors occur when you try to turn on the BFE or Windows Firewall.<\/p>\n

Action Center can’t turn on Windows Firewall<\/em><\/strong><\/p>\n

<\/p>\n

<\/p>\n

Turning it on via the Windows Firewall applet may show the error Windows Firewall can’t change some of your settings. Error code 0x80070433 or 0x8007042c.<\/strong><\/em><\/p>\n

<\/p>\n

<\/p>\n

Services MMC: Windows could not start the Windows Firewall service on Local Computer. Error 1075: The dependency service does not exist or has been marked for deletion.<\/strong><\/em><\/p>\n

<\/p>\n

Services MMC: Windows could not start the Base Filtering Engine service on Local Computer. Error 5: Access is denied.<\/strong><\/em><\/p>\n

<\/p>\n

This is recorded in the System event log as well:<\/p>\n

Log Name: System\nSource: Service Control Manager\nDate: 1\/9\/2020 8:21:25 AM\nEvent ID: 7023\nTask Category: None\nLevel: Error\nKeywords: Classic\nUser: N\/A\nComputer: W10-PC\nDescription:\nThe BFE service terminated with the following error:\nAccess is denied.<\/strong>\n<\/pre>\n
RELATED:<\/strong> Windows Firewall Error 0x6d9 “The snap-in failed to load”<\/a><\/div>\n
Resolution: Repair Base Filtering Engine<\/h2>\n
Step 1: Import the BFE Service Registry Keys<\/h3>\n
    \n
  1. First, create a Restore Point<\/a>.<\/li>\n
  2. Download AdvancedRun<\/a> from Nirsoft.net.<\/li>\n
  3. Using AdvancedRun, launch C:\\Windows\\Regedit.exe under the TrustedInstaller privileges.(For more info, see How to Run programs as TrustedInstaller<\/a>.)<\/em>\n
    \"Launch<\/li>\n
  4. After starting the Registry Editor as TrustedInstaller, you may close the AdvancedRun utility.<\/li>\n
  5. Download the BFE service registry fix below for your version of Windows:\n
    BFE for Windows 7<\/a> | BFE for Windows 8<\/a> | BFE for Windows 10<\/a> | BFE for Windows 11<\/a><\/pre>\n<\/li>\n
  6. Unzip the archive and extract the .reg file to a folder — e.g., “C:\\Temp”<\/li>\n
  7. From the Registry Editor, click File, Import…, select the BFE registry file, and import it.
    \n\"BFE<\/li>\n<\/ol>\n
    This adds the BFE service to the registry.<\/p>\n
    Don’t close the Registry Editor yet.<\/strong> The next step is to fix the BFE service registry key permissions. See “Step 2” below.<\/p>\n
    \n
    Step 2: Fix the BFE service registry permissions<\/h3>\n
      \n
    1. In the Registry Editor (run as TrustedInstaller) window, and go to the following branch:\n
      HKEY_LOCAL_MACHINE\\SYSTEM\\CurrentControlSet\\Services\\BFE\\Parameters\\Policy<\/pre>\n<\/li>\n
    2. Right-click Policy<\/strong>, and click Permissions<\/strong>
      \n\"BFE
      \nIt has some default permissions inherited from the parent key. By default, the SYSTEM<\/code> and Administrators<\/code> groups have full control permission for the branch. But this isn’t enough to start BFE.<\/em><\/li>\n
    3. Click on the Add<\/strong> button.
      \n\"BFE<\/li>\n
    4. In the Enter the object names to select:<\/strong> box, type NT SERVICE\\BFE<\/strong><\/code>, and click OK.
      \n\"BFE<\/li>\n
    5. BFE is added to the list of Group or user names. We need to give it special permissions. Click Advanced<\/strong>
      \n\"BFE<\/li>\n
    6. Select BFE, and click the Edit<\/strong> button.
      \n\"BFE<\/li>\n
    7. In the Permission Entry dialog, click “Show advanced permissions.”
      \n\"BFE<\/li>\n
    8. Enable the following Permissions:\"BFE\n