Solved

Base Filtering Engine service will not start on Windows 2008 R2

Posted on 2014-10-20
2
213 Views
Last Modified: 2014-12-07
We had a major server fault over the weekend where some hard drives and the mainboard's raid controller failed. Mainboard and HDD's replaced - the Windows Server 2008 R2 is loading up, but many of the network applications cannot be access from the connected computers.
This IS NOT a DC, it DOES NOT perform DHCP or DNS, but it DOES provide dial-in VPN access for remote users. The server can access the internet fine - because I can connect to it via TeamViewer - but there are a number of services that will not start since the hardware recovery. Also - the Teamviewer application is generating a new ID every single time it is run, so that also makes me think there is an underlying network issue.

Initially, DHCP client service, TCPIP NetBIOS helper, Network Location Awareness and a few other services would not start. After some registry changes to allow SERVICE, LOCAL SERVICE and NETWORK SERVICE permissions on a few of these problematic services; and adding LOCAL SERVICE and NETWORK SERVICE to the Administrators group; most of these services are now running, and some of the network capability is back.

However, none of the client computers can access the SQL database application we use and a number of other network apps...

It appears that the Base Filtering Engine, which is a dependent service for Windows Firewall, Diagnostic Policy Service and Routing and Remote Access Service, is failing to start despite my permissions changes in the registry and any other attempts to get it working. All four of these services which are either Automatic or Automatic (delayed) are failing to start.

There's no malware or virus infections - so please, no suggestions about checking for these.

I've run the SFC /scannow procedure to check for file corruptions... there was nothing found.

I've gone through the DACL settings as discussed on http://blogs.technet.com/b/rspitz/archive/2010/09/19/quot-access-is-denied-quot-when-you-attempt-to-start-the-base-filtering-engine-service-after-upgrading-from-windows-server-2003-to-windows-server-2008-r2.aspx and none of the non-windows services are missing the specific entry referred to.

I'm at a loss as to what to try next. Any help would be greatly appreciated. Thanks
0
Comment
Question by:Reece Dodds
  • 2
2 Comments
 
LVL 7

Accepted Solution

by:
Reece Dodds earned 0 total points
ID: 40393487
I now have BFE starting!!! The HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\BFE key now has "everyone" set will full permissions. When I look at another Win2k8r2 server with no issues, this permission level is not set, but it seems to have helped this problem server.
Now the only service I cannot get started is the Diagnostic Policy Service. I notice that Windows Firewall, BITS, Windows Update, and Routing and Remote Access all need to be started manually despite the Automatic or Automatic (delayed) setting.
0
 
LVL 7

Author Closing Comment

by:Reece Dodds
ID: 40485866
all issues for this server problem have been resolved.
I'm marking as solved so that the external references I used in the question are on record in case we (or someone else) has the same issue.
0

Featured Post

Backup Your Microsoft Windows Server®

Backup all your Microsoft Windows Server – on-premises, in remote locations, in private and hybrid clouds. Your entire Windows Server will be backed up in one easy step with patented, block-level disk imaging. We achieve RTOs (recovery time objectives) as low as 15 seconds.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Configuring network clients can be a chore, especially if there are a large number of them or a lot of itinerant users.  DHCP dynamically manages this process, much to the relief of users and administrators alike!
This article offers some helpful and general tips for safe browsing and online shopping. It offers simple and manageable procedures that help to ensure the safety of one's personal information and the security of any devices.
This tutorial will give a an overview on how to deploy remote agents in Backup Exec 2012 to new servers. Click on the Backup Exec button in the upper left corner. From here, are global settings for the application such as connecting to a remote Back…
This tutorial will give a short introduction and overview of Backup Exec 2012 and how to navigate and perform basic functions. Click on the Backup Exec button in the upper left corner. From here, are global settings for the application such as conne…

896 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

14 Experts available now in Live!

Get 1:1 Help Now