?
Solved

Base Filtering Engine service will not start on Windows 2008 R2

Posted on 2014-10-20
2
Medium Priority
?
235 Views
Last Modified: 2014-12-07
We had a major server fault over the weekend where some hard drives and the mainboard's raid controller failed. Mainboard and HDD's replaced - the Windows Server 2008 R2 is loading up, but many of the network applications cannot be access from the connected computers.
This IS NOT a DC, it DOES NOT perform DHCP or DNS, but it DOES provide dial-in VPN access for remote users. The server can access the internet fine - because I can connect to it via TeamViewer - but there are a number of services that will not start since the hardware recovery. Also - the Teamviewer application is generating a new ID every single time it is run, so that also makes me think there is an underlying network issue.

Initially, DHCP client service, TCPIP NetBIOS helper, Network Location Awareness and a few other services would not start. After some registry changes to allow SERVICE, LOCAL SERVICE and NETWORK SERVICE permissions on a few of these problematic services; and adding LOCAL SERVICE and NETWORK SERVICE to the Administrators group; most of these services are now running, and some of the network capability is back.

However, none of the client computers can access the SQL database application we use and a number of other network apps...

It appears that the Base Filtering Engine, which is a dependent service for Windows Firewall, Diagnostic Policy Service and Routing and Remote Access Service, is failing to start despite my permissions changes in the registry and any other attempts to get it working. All four of these services which are either Automatic or Automatic (delayed) are failing to start.

There's no malware or virus infections - so please, no suggestions about checking for these.

I've run the SFC /scannow procedure to check for file corruptions... there was nothing found.

I've gone through the DACL settings as discussed on http://blogs.technet.com/b/rspitz/archive/2010/09/19/quot-access-is-denied-quot-when-you-attempt-to-start-the-base-filtering-engine-service-after-upgrading-from-windows-server-2003-to-windows-server-2008-r2.aspx and none of the non-windows services are missing the specific entry referred to.

I'm at a loss as to what to try next. Any help would be greatly appreciated. Thanks
0
Comment
Question by:Reece Dodds
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 2
2 Comments
 
LVL 7

Accepted Solution

by:
Reece Dodds earned 0 total points
ID: 40393487
I now have BFE starting!!! The HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\BFE key now has "everyone" set will full permissions. When I look at another Win2k8r2 server with no issues, this permission level is not set, but it seems to have helped this problem server.
Now the only service I cannot get started is the Diagnostic Policy Service. I notice that Windows Firewall, BITS, Windows Update, and Routing and Remote Access all need to be started manually despite the Automatic or Automatic (delayed) setting.
0
 
LVL 7

Author Closing Comment

by:Reece Dodds
ID: 40485866
all issues for this server problem have been resolved.
I'm marking as solved so that the external references I used in the question are on record in case we (or someone else) has the same issue.
0

Featured Post

Problems using Powershell and Active Directory?

Managing Active Directory does not always have to be complicated.  If you are spending more time trying instead of doing, then it's time to look at something else. For nearly 20 years, AD admins around the world have used one tool for day-to-day AD management: Hyena. Discover why

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Resolve DNS query failed errors for Exchange
OfficeMate Freezes on login or does not load after login credentials are input.
This tutorial will walk an individual through the steps necessary to configure their installation of BackupExec 2012 to use network shared disk space. Verify that the path to the shared storage is valid and that data can be written to that location:…
After creating this article (http://www.experts-exchange.com/articles/23699/Setup-Mikrotik-routers-with-OSPF.html), I decided to make a video (no audio) to show you how to configure the routers and run some trace routes and pings between the 7 sites…
Suggested Courses

741 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question