Solved

Base Filtering Engine service will not start on Windows 2008 R2

Posted on 2014-10-20
2
205 Views
Last Modified: 2014-12-07
We had a major server fault over the weekend where some hard drives and the mainboard's raid controller failed. Mainboard and HDD's replaced - the Windows Server 2008 R2 is loading up, but many of the network applications cannot be access from the connected computers.
This IS NOT a DC, it DOES NOT perform DHCP or DNS, but it DOES provide dial-in VPN access for remote users. The server can access the internet fine - because I can connect to it via TeamViewer - but there are a number of services that will not start since the hardware recovery. Also - the Teamviewer application is generating a new ID every single time it is run, so that also makes me think there is an underlying network issue.

Initially, DHCP client service, TCPIP NetBIOS helper, Network Location Awareness and a few other services would not start. After some registry changes to allow SERVICE, LOCAL SERVICE and NETWORK SERVICE permissions on a few of these problematic services; and adding LOCAL SERVICE and NETWORK SERVICE to the Administrators group; most of these services are now running, and some of the network capability is back.

However, none of the client computers can access the SQL database application we use and a number of other network apps...

It appears that the Base Filtering Engine, which is a dependent service for Windows Firewall, Diagnostic Policy Service and Routing and Remote Access Service, is failing to start despite my permissions changes in the registry and any other attempts to get it working. All four of these services which are either Automatic or Automatic (delayed) are failing to start.

There's no malware or virus infections - so please, no suggestions about checking for these.

I've run the SFC /scannow procedure to check for file corruptions... there was nothing found.

I've gone through the DACL settings as discussed on http://blogs.technet.com/b/rspitz/archive/2010/09/19/quot-access-is-denied-quot-when-you-attempt-to-start-the-base-filtering-engine-service-after-upgrading-from-windows-server-2003-to-windows-server-2008-r2.aspx and none of the non-windows services are missing the specific entry referred to.

I'm at a loss as to what to try next. Any help would be greatly appreciated. Thanks
0
Comment
Question by:Reece Dodds
  • 2
2 Comments
 
LVL 7

Accepted Solution

by:
Reece Dodds earned 0 total points
Comment Utility
I now have BFE starting!!! The HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\BFE key now has "everyone" set will full permissions. When I look at another Win2k8r2 server with no issues, this permission level is not set, but it seems to have helped this problem server.
Now the only service I cannot get started is the Diagnostic Policy Service. I notice that Windows Firewall, BITS, Windows Update, and Routing and Remote Access all need to be started manually despite the Automatic or Automatic (delayed) setting.
0
 
LVL 7

Author Closing Comment

by:Reece Dodds
Comment Utility
all issues for this server problem have been resolved.
I'm marking as solved so that the external references I used in the question are on record in case we (or someone else) has the same issue.
0

Featured Post

Free Trending Threat Insights Every Day

Enhance your security with threat intelligence from the web. Get trending threat insights on hackers, exploits, and suspicious IP addresses delivered to your inbox with our free Cyber Daily.

Join & Write a Comment

This is the first one of a series of articles I’ll be writing to address technical issues that are always referred to as network problems. The network boundaries have changed, therefore having an understanding of how each piece in the network  puzzl…
Configuring network clients can be a chore, especially if there are a large number of them or a lot of itinerant users.  DHCP dynamically manages this process, much to the relief of users and administrators alike!
This tutorial will walk an individual through the steps necessary to install and configure the Windows Server Backup Utility. Directly connect an external storage device such as a USB drive, or CD\DVD burner: If the device is a USB drive, ensure i…
Viewers will learn how to properly install and use Secure Shell (SSH) to work on projects or homework remotely. Download Secure Shell: Follow basic installation instructions: Open Secure Shell and use "Quick Connect" to enter credentials includi…

744 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

12 Experts available now in Live!

Get 1:1 Help Now