Select the product you need help with

Some services do not start in Windows Vista and Windows 7

Article ID: 943996 - View products that this article applies to.

Symptoms

When you try to start a Windows Service such as the Windows Firewall, DHCP client, or Diagnostic Policy Service, you may get the following error:

Windows could not start the Windows Firewall, DHCP client, or Diagnostic Policy on Local Computer. For more information, review the System Event Log. If this is a non-Microsoft service, contact the service vendor, and refer to service-specific error code 5.

Resolution

To resolve this issue, click the Fix it button below to automatically diagnose and fix common Windows Firewall problems, such as the following:

Windows Firewall is not the default firewall
Windows Firewall does not start
Windows could not start the Windows Firewall
Service-specific error 5 (0x5) Remote Assistance does not work
You cannot access shared files and printers

To download and run this automated troubleshooter, click the Fix this problem link:

Fix this problem
Microsoft Automated Troubleshooting Services: Diagnose and fix Windows Firewall service problems automatically

If you would prefer to fix this problem yourself rather than using the above automated troubleshooter, add the permission for the account on these registry keys. For example, here are the steps for the Windows Firewall service:

Click the Start button, then type regedit in the Search box.
Right click regedit.exe, then click Run as administrator. If prompted, enter your user name and password and click OK.
Browse to one of the following keys:
- HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy permission needed:
- HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Defaults\FirewallPolicy
Right click the key, and click Permissions.
Under Group or user names, select your account.
Under the Allow column in Permissions, make sure the Full Control and Read boxes are checked.
Click Apply, then click OK.
Repeat steps 3-7 for the other key.
Browse to HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Epoch
Right click the key, then click Permissions, then click Advanced.
Under the Name column, click the one that states MpsSvc, then click Edit.
Under the Allow column, make sure the Query Value and Set Value boxes are checked.
Click OK to close the window, then click Apply, then click OK.

If your error is DHCP related, follow these steps:

Click the Start button, then type regedit in the Search box.
Right click regedit.exe, then click Run as administrator. If prompted, enter your user name and password and click OK.
Browse to the following key: HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Dhcp\Configurations
Right click the key, and click Permissions.
Under Group or user names, select your account.
Under the Allow column in Permissions, make sure the Full Control and Read boxes are checked.
Click Apply, then click OK.
Browse to the following key: HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Dhcp
Right click the key, then click Permissions, then click Advanced.
Under the Name column, click the one that states MpsSvc, then click Edit.
Under the Allow column, make sure the Query value, Create value, Enumerate Subkeys, Notify, Read Control boxes are checked.
Click OK to close the window, then click Apply, then click OK.

If the error is related to the Diagnostic Policy Service, follow these steps:

Click the Start button, then type regedit in the Search box.
Right click regedit.exe, then click Run as administrator. If prompted, enter your user name and password and click OK.
Browse to the following key: HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\DPS\Parameters
Right click the key, and click Permissions.
Under Group or user names, select your account.
Under the Allow column in Permissions, make sure the Full Control and Read boxes are checked.
Click Apply, then click OK.