Solved

Base Filtering Engine service will not start on Windows 2008 R2

Posted on 2014-10-20
2
225 Views
Last Modified: 2014-12-07
We had a major server fault over the weekend where some hard drives and the mainboard's raid controller failed. Mainboard and HDD's replaced - the Windows Server 2008 R2 is loading up, but many of the network applications cannot be access from the connected computers.
This IS NOT a DC, it DOES NOT perform DHCP or DNS, but it DOES provide dial-in VPN access for remote users. The server can access the internet fine - because I can connect to it via TeamViewer - but there are a number of services that will not start since the hardware recovery. Also - the Teamviewer application is generating a new ID every single time it is run, so that also makes me think there is an underlying network issue.

Initially, DHCP client service, TCPIP NetBIOS helper, Network Location Awareness and a few other services would not start. After some registry changes to allow SERVICE, LOCAL SERVICE and NETWORK SERVICE permissions on a few of these problematic services; and adding LOCAL SERVICE and NETWORK SERVICE to the Administrators group; most of these services are now running, and some of the network capability is back.

However, none of the client computers can access the SQL database application we use and a number of other network apps...

It appears that the Base Filtering Engine, which is a dependent service for Windows Firewall, Diagnostic Policy Service and Routing and Remote Access Service, is failing to start despite my permissions changes in the registry and any other attempts to get it working. All four of these services which are either Automatic or Automatic (delayed) are failing to start.

There's no malware or virus infections - so please, no suggestions about checking for these.

I've run the SFC /scannow procedure to check for file corruptions... there was nothing found.

I've gone through the DACL settings as discussed on http://blogs.technet.com/b/rspitz/archive/2010/09/19/quot-access-is-denied-quot-when-you-attempt-to-start-the-base-filtering-engine-service-after-upgrading-from-windows-server-2003-to-windows-server-2008-r2.aspx and none of the non-windows services are missing the specific entry referred to.

I'm at a loss as to what to try next. Any help would be greatly appreciated. Thanks
0
Comment
Question by:Reece Dodds
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 2
2 Comments
 
LVL 7

Accepted Solution

by:
Reece Dodds earned 0 total points
ID: 40393487
I now have BFE starting!!! The HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\BFE key now has "everyone" set will full permissions. When I look at another Win2k8r2 server with no issues, this permission level is not set, but it seems to have helped this problem server.
Now the only service I cannot get started is the Diagnostic Policy Service. I notice that Windows Firewall, BITS, Windows Update, and Routing and Remote Access all need to be started manually despite the Automatic or Automatic (delayed) setting.
0
 
LVL 7

Author Closing Comment

by:Reece Dodds
ID: 40485866
all issues for this server problem have been resolved.
I'm marking as solved so that the external references I used in the question are on record in case we (or someone else) has the same issue.
0

Featured Post

Does Powershell have you tied up in knots?

Managing Active Directory does not always have to be complicated.  If you are spending more time trying instead of doing, then it's time to look at something else. For nearly 20 years, AD admins around the world have used one tool for day-to-day AD management: Hyena. Discover why

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Suggested Solutions

The recent Microsoft changes on update philosophy for Windows pre-10 and their impact on existing WSUS implementations.
Possible fixes for Windows 7 and Windows Server 2008 updating problem. Solutions mentioned are from Microsoft themselves. I started a case with them from our Microsoft Silver Partner option to open a case and get direct support from Microsoft. If s…
This tutorial will show how to push an installation of Backup Exec to an additional server in both 2012 and 2014 versions of the software. Click on the Backup Exec button in the upper left corner. From here, select Installation and Licensing, then I…
After creating this article (http://www.experts-exchange.com/articles/23699/Setup-Mikrotik-routers-with-OSPF.html), I decided to make a video (no audio) to show you how to configure the routers and run some trace routes and pings between the 7 sites…

737 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question