Solved

Base Filtering Engine service will not start on Windows 2008 R2

Posted on 2014-10-20
2
223 Views
Last Modified: 2014-12-07
We had a major server fault over the weekend where some hard drives and the mainboard's raid controller failed. Mainboard and HDD's replaced - the Windows Server 2008 R2 is loading up, but many of the network applications cannot be access from the connected computers.
This IS NOT a DC, it DOES NOT perform DHCP or DNS, but it DOES provide dial-in VPN access for remote users. The server can access the internet fine - because I can connect to it via TeamViewer - but there are a number of services that will not start since the hardware recovery. Also - the Teamviewer application is generating a new ID every single time it is run, so that also makes me think there is an underlying network issue.

Initially, DHCP client service, TCPIP NetBIOS helper, Network Location Awareness and a few other services would not start. After some registry changes to allow SERVICE, LOCAL SERVICE and NETWORK SERVICE permissions on a few of these problematic services; and adding LOCAL SERVICE and NETWORK SERVICE to the Administrators group; most of these services are now running, and some of the network capability is back.

However, none of the client computers can access the SQL database application we use and a number of other network apps...

It appears that the Base Filtering Engine, which is a dependent service for Windows Firewall, Diagnostic Policy Service and Routing and Remote Access Service, is failing to start despite my permissions changes in the registry and any other attempts to get it working. All four of these services which are either Automatic or Automatic (delayed) are failing to start.

There's no malware or virus infections - so please, no suggestions about checking for these.

I've run the SFC /scannow procedure to check for file corruptions... there was nothing found.

I've gone through the DACL settings as discussed on http://blogs.technet.com/b/rspitz/archive/2010/09/19/quot-access-is-denied-quot-when-you-attempt-to-start-the-base-filtering-engine-service-after-upgrading-from-windows-server-2003-to-windows-server-2008-r2.aspx and none of the non-windows services are missing the specific entry referred to.

I'm at a loss as to what to try next. Any help would be greatly appreciated. Thanks
0
Comment
Question by:Reece Dodds
  • 2
2 Comments
 
LVL 7

Accepted Solution

by:
Reece Dodds earned 0 total points
ID: 40393487
I now have BFE starting!!! The HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\BFE key now has "everyone" set will full permissions. When I look at another Win2k8r2 server with no issues, this permission level is not set, but it seems to have helped this problem server.
Now the only service I cannot get started is the Diagnostic Policy Service. I notice that Windows Firewall, BITS, Windows Update, and Routing and Remote Access all need to be started manually despite the Automatic or Automatic (delayed) setting.
0
 
LVL 7

Author Closing Comment

by:Reece Dodds
ID: 40485866
all issues for this server problem have been resolved.
I'm marking as solved so that the external references I used in the question are on record in case we (or someone else) has the same issue.
0

Featured Post

Best Practices: Disaster Recovery Testing

Besides backup, any IT division should have a disaster recovery plan. You will find a few tips below relating to the development of such a plan and to what issues one should pay special attention in the course of backup planning.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Suggested Solutions

Are you one of those front-line IT Service Desk staff fielding calls, replying to emails, all-the-while working to resolve end-user technological nightmares? I am! That's why I have put together this brief overview of tools and techniques I use in o…
Configuring network clients can be a chore, especially if there are a large number of them or a lot of itinerant users.  DHCP dynamically manages this process, much to the relief of users and administrators alike!
To efficiently enable the rotation of USB drives for backups, storage pools need to be created. This way no matter which USB drive is installed, the backups will successfully write without any administrative intervention. Multiple USB devices need t…
After creating this article (http://www.experts-exchange.com/articles/23699/Setup-Mikrotik-routers-with-OSPF.html), I decided to make a video (no audio) to show you how to configure the routers and run some trace routes and pings between the 7 sites…

749 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question