OS and Software > Microsoft Help > [WIN7] Win7 Internet/Firewall problems

reply to XNemesis

Re: [WIN7] Win7 Internet/Firewall problems

Yep, I've been scouring google for an answer, typing in the error code 87 + windows 7 firewall and tried what I can but it looks like I'm going to need to reinstall fresh.

Under services, do you see:

Base Filtering Engine
Network Location Awareness
Windows Firewall

and, if you do (and you need to be able to), what is their status?

BFE is started
Network Location Awareness not started & returns an Error 1068
Windows Firewall not started & returns Error 87

Start regedit, go to HKLM\System\CurrentControlSet\Services. Right click Service and select Permissions. Click the Add button underneath Security and type "nt service\bfe" (without the quotes - there is a space between nt and service). Click OK. Select BFE and then click Full Control, Apply and then OK. Quit regedit.

See if the two services will start now. If the Firewall service won't start, double click it, pick the logon tab, make sure Local Service is the logon account and then blank the password. Click Apply and you should get a message about the Local Service account being granted logon authority. You should be able to start the service now.

Edit: you might go ahead and check the DHCP service to see if it's running and start it if necessary).

Hi tcg, firstly thanks for helping me through with this. I followed your instructions to the letter, and Windows firewall still spits back Error 87 while Network Location Awareness and DHCP still give Error 1068

Then one of the services/drivers that these depend on is failing to start. This is usually the results of a missing or corrupted file.

Let's look at the DHCP service first. There are two Non plug and play "devices" and another service that this service depends upon. So, is the Network Store Interface service running? To see the two non PnP devices, go to the Device Manager, select anything so as to highlight the window, and then, at the top of the screen, pick view and select Show hidden devices. In the device list, expand Non Plug and Play Devices. The two you're interested in right now are the first one - Ancillary Function Driver for Winsock, and much further down the list NetIO Legacy TDI Support Driver. For each of these, double click and pick the Driver tab. Make sure they are set to "System" and started. If either is not started and will not start, the corresponding driver file is likely missing or corrupted. The first one is afd.sys and the second is tdx.sys.

After checking these things, give me an update and we can go from there.

Network Store Interface Service will not start, (error 1079)

Both AFD and NetIO show up are both set to System and started

First, make sure the Local Service is the logon account associated with Network Store Interface Service. Second, do the same as in the last post for the non PnP driver NSI Proxy Service driver, with the necessary driver being nsiproxy.sys.

I'll need a bit of hand holding here. How do I make sure the Local Service is the logon account.....?

I jumped ahead and switched the Windows Firewall "log on" option to "Local System Account" instead of "This Account" and now when I switch back to "This Account" it says to enter a valid password

For both the Firewall and Network Store Interface Service, on the logon tab, it should have "This account" selected and the account is "Local Service". Make sure to delete the password in both boxes. It should tell you that the Local Service account has been granted logon access. (This is the same as I had you do to the Firewall service in my 2nd post, btw)

Ok, got it. What happens is when I clear the password and press OK, I do not get message indicating granted local access. And when I double click and check the log on tab, the password field is not empty anymore.

You should be fine. It will show to have a password when you go back and look at it, but this is not really important. If you blanked it and hit Apply, you should see the message. You need to do this for both the service I mentioned.

Is the NSI Proxy Service driver showing that it is started? If so, try to start the Network Store Interface Service.

NSI status is started.

Starting Network Store Interface Service results in:

Error 1079: The account specified for this service is different from the account specified for other services running in the same process.

And you changed/verified that this service is using Local Service (note the space) for the logon?

Edit: if so, try this user instead: NT AUTHORITY\LocalService

Do the same for Base Filtering Engine (BFE) service.

Be sure to blank the password for each and then restart the services.

This what I see for Network Store Interface Service logon on tab



I will try the other user instead

Edit:

Tried NT AUTHORITY\LocalService for both services, and got the same error code when restarting Network Store Interface.

Also, when I go back into the logon tab for both services, it does not show NT AUTHORITY\LocalService but simply Local Service instead.

They are the same user, just slightly different syntax to arrive at it. Try restarting the computer since we've made these changes and see what happens.

So, I restarted the machine and retried starting those services and am still getting the same errors. Is this looking like a fresh install of Windows is required?

you might try a repair/upgrade install first.

Thanks for your trouble in this, I'll give that route a shot.