none
Windows Firewall with advanced Security snap-in failed to load. Error Code 0x6D9

    Question

  • I'm trying to turn on my firewall and I get the the Error " Windows can't change Some of your settings. Error Code 0x80070422" When I try to go to advanced settings I gfet the error above "Windows Firewall with advanced Security snap-in failed to load. Error Code 0x6D9". I'm thinking that error in settings is why the firwall won't turn on. How can I get to the settings and check them?

    Wednesday, January 12, 2011 3:12 PM

Answers

All replies

  • First, are you opening Windows Firewall or Windows Firewall with Advanced Security by right clicking them and choosing 'Run as administrator " ?

    Second, what is the installed antivirus or security suite; was there an AV or Sec suite installed that you uninstalled and replaced with another one ?

    Third, did the native Windows 7 firewall function properly before this issue arose ? If yes and this issue is recent, have you tried rolling the system back using a recent System Restore point that was created when the firewall worked properly ?


    MowGreen Windows Expert IT Pro - Consumer Security
    Wednesday, January 12, 2011 7:37 PM
    Answerer
  • 1)I am Opening Windows Firwall Advanced Setting by going to CP > Windows Firewall> Advanced Settings> Click Yes> and then I get the error.

    2)I am using Avast free.

    3)It has always been this way from day one. It is a refurbished computer. I think it was a server at one time for the size of it.


    CardGunner
    Wednesday, January 12, 2011 7:48 PM
  • 1) Click the Start orb; in the Search all programs and files field type in firewall .
    Under Programs, right click Windows Firewall with Advanced Security; choose 'Run as administrator'.
    Agree to the UAC prompt to allow it to run with Elevated Privileges.

    What specifically happens for each step when you do the above ?
    Successfull/ Fails with a message and an error/ Fails with no error, just a message


    2) Did you replace an AV or Security Suite with Avast ? If so, which AV or Sec Suite, please ?
    You may need to run a removal tool to ensure that all remnants of the previously installed security software are no longer present.

    3) If this system was on a work network at one time then it may have been joined to a Domain. That would present a Privileges issue with the Local Service account. Do you know if that pertains to this system ?


    MowGreen Windows Expert IT Pro - Consumer Security
    Wednesday, January 12, 2011 9:00 PM
    Answerer
  • 1) I did all that. After the prompt I get the error. Header of the error in Grey banner " Windows Firewall with Advnaced Security snap-in"

    under that in body of error is a Big red X. Next to that is a Messsage " There was an error opening the Windows Firewall with Advanced Security snap-in"

    Under that is the message "The windows Firewall with Advanced Security snap-in failed to load. Restart the Windows Firewall Service on the computer that you are managing. Error code 0x6D9.

    2) I was told the computer was re-formatted and wiped clean. Avast was the only Virus protection ran on the system after that. Before it was wiped clean I have no idea what AV was running on there.  I have run CCleaner a few times to clean up cookies and other intrusive things.

    3) This computer is currently on a work network.


    CardGunner
    Wednesday, January 12, 2011 9:33 PM
  • 3) This computer is currently on a work network.



    Does the work network have an Admin ?
    Is the network using Group Policy ?

    I ask because if this is a self-managed system then you could  you first try creating and running the .bat file that Shekhar S - Microsoft Support
    has posted here - http://social.answers.microsoft.com/Forums/en-US/w7security/thread/e5ee6823-98f8-4575-a254-00a038b17e34

    If no joy, try the OneCare Safety Scan for Vista/Windows 7 , which will attempt to reenable and/or repair required services that are not functioning.


    MowGreen Windows Expert IT Pro - Consumer Security
    Wednesday, January 12, 2011 10:10 PM
    Answerer
  • Well I must have downloaded a update or something cause now it's working. I can NOW turn on my firewall and NOW get to the advanced settings. I must have been something I got from windows updates. I'll look at my update history and figure it out.

     

    The issue that is now before me is when I turn the firewall on I can't get to any of my network site or get onto the web. I'lll play around and see if I can fix this issue. If I can't I post a new thread with my newest issue.

     

    Thank you MowGreen for your help.


    CardGunner
    Wednesday, January 12, 2011 10:14 PM
  • You're welcome, CardGunner. See if this update is listed in Installed Updates 

     KB976902 - Description of the Windows 7 and Windows Server 2008 R2 installation software feature update

     I suspect that is the update that may have restored the firewall.

    • Marked as answer by GunnerCard Thursday, January 13, 2011 1:14 PM
    Wednesday, January 12, 2011 11:25 PM
    Answerer
  • You are exactly right! I did install that update yesterday. However the description says nothing about the firewall. Hmm.

    Thanks again for your help.


    CardGunner
    Thursday, January 13, 2011 1:14 PM
  • The description of the update is not as pertinent as the files of the update. There are WMI and WBEM .dll files included in KB976902. Without getting too bogged down in technical details, they are Windows Management Instrumentation related files.
    " WMI publishes information, configures device settings, and supplies event notification from device drivers. "

    If WMI isn't functioning properly, neither will the native Windows 7 firewall.

    Apparently, installing KB976902 installed and registered WMI related .dll files, thereby repairing the non-functional firewall.
    Anyway, that's only my theory, for what it's worth. <w>


    MowGreen Windows Expert IT Pro - Consumer Security
    Thursday, January 13, 2011 9:10 PM
    Answerer
  • So, what does one do if the update mentioned is actually installed, but that person is getting the EXACT SAME THING as CardGunner was getting -- meaning...ME...I currently have that update installed, am running Avast Free, and on a personal laptop running Win 7 SP 1.

    Please, the first person that asks me all of the crap that everyone else asked CardGunner, I'm gonna pull out my Barret 98 and start popping heads like grapes!!  Don't even bother asking the same questions, because the only answer you're gonna get is this,

    • "So, what does one do if the update mentioned is actually installed, but that person is getting the EXACT SAME THING as CardGunner was getting -- meaning...ME...I currently have that update installed, am running Avast Free, and on a personal laptop running Win 7 SP 1."

    I even opened up the secret Admin account to see if I can get Win Firewall to start up, but no joy!

    Here's a REALLY GOOD QUESTION..."Why doesn't Microsoft let someone that has a genuine copy of Windows be able to DOWNLOAD and REINSTALL for themselves, Windows Firewall??"  Seriously, wouldn't that make the WHOLE thing THAT MUCH EASIER??  Hmmm, my bet is it would.  BUT, as I'm probably going to be told, MS won't do it for some bullshit reason!!

    Thursday, February 09, 2012 8:51 AM
  • Hi mflintjer,

    I realize quite a bit of time has passed since you sought help, but I just happened to run into this very problem today and figured I would repost what worked for me...just in case anyone else out there is looking for answers to this frustrating problem...

    0x6d9 Error Code Fix

    Originally posted here: http://answers.microsoft.com/en-us/windows/forum/windows_vista-security/trying-to-turn-on-windows-firewall-getting-error/a8dc26c1-010d-4f16-8531-d609731f7015?page=2 :

    This firewall issue is commonly found on vista and windows 7 (64 BIT OS)

    This is a symptom for rootkit on 64 bit systems

    if you find a folder called system64 ("C:/WINDOWS/SYSTEM64" (NOT "sysWOW64"))

    and a file called "consrv.dll" ("C:/WINDOWS/SYSTEM32/CONSRV.DLL") you're infected
    by zero access rootkit.

    It is recommended to contact malware removal forums to remove it first, then try the following
    fix

    Download both the registry files:

    Windows firewall: http://download.bleepingcomputer.com/win-services/7/MpsSvc.reg

    Base filtering engine: http://download.bleepingcomputer.com/win-services/7/BFE.reg

    Launch them and you should get a UAC prompt now

    Click YES  & Restart your PC

    Now, Press Windows + R key and type

    regedit and click ok

    go to

    HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\BFE

    Right click on it-permissions

    Click on ADD and type "Everyone" and click ok

    Now Click on Everyone

    Below you have permission for users

    Select full control and click ok

    Now, open RUN and type "services.msc" and click ok

    start base filtering engine service and then windows firewall service

    You may also be missing security center and windows defender services

    Downloads:

    Security center  - wscsvc ( http://download.bleepingcomputer.com/win-services/7/wscsvc.reg )

    Windows defender - windefend ( http://download.bleepingcomputer.com/win-services/7/WinDefend.reg )

    Launch them and click YES when you get a UAC prompt

    Good luck,

    NanduPradeep Kumar

    In my case, I DID NOT have either the "system64" folder nor the "consrv.dll" file that NanduPradeep Kumar mentions as evidence of the zero access rootkit infection. What I deduced however, is that my AV and ASW had already scrubbed them, but obviously could not replace the damaged registry entries. While others have been able to recover from this condition using System Restore, I believe too much time has passed for me and there were no Restoration Points available to me pre-infection. In any case, I followed NanduPradeep Kumar's instructions from the point of downloading the registry entries, and his solution restored access to my Windows Firewall control panel.

    Dave

    • Proposed as answer by ecchichuu Monday, June 04, 2012 1:51 PM
    Monday, June 04, 2012 4:35 AM
  • Eerily timely that this solution was posted 9 hours before I needed it, and Kumar's post is only 3 days old as well. thx to Enzeru and Kumar those steps restored my Firewall. I also needed to restore Security Center and Defender as well and there was no sign of the files of that rootkit infection. Nothing in my virus chest either. dammit... I'd like to be know exactly how this happened...
    • Edited by ecchichuu Monday, June 04, 2012 1:57 PM
    Monday, June 04, 2012 1:57 PM
  • Hi

    I tried the above steps, but I am still getting the error: "The Windows firewall with Advanced Security snap-in failed to load. Restart the Windows Firewall service on the computer that you are managing. Error code: 0x6D9. This happens when I try to open Windows Firewall with Advanced Security.

    If I try to access the fw settings in Control Panel or in the Network and Sharing Center simply nothing happens.

    The firewall seems to be running, at least it gives me messages and under services it's turned on. Restarting it does not help, but I am not getting any errors there.

    However, I can access the settings if Windows (Win7 Pro) is booted in safe mode.

    Thanks for any HELP!

    Wednesday, July 04, 2012 2:14 PM
  • I am facing the same issue as Romansk and when I try to start fw, it says "Windows could not start the Windows Firewall on Local Computer. .... If this is a non-Microsoft service, contact the service vendor  and refer to service-specific error code 5.
    Wednesday, July 25, 2012 8:27 PM
  • Those who have this error code

    Windows could not start Windows Firewall on local Computer. See event log, if non-windows services contact vendor. Error code 5.

    Check this thread

    http://social.technet.microsoft.com/Forums/en/w7itprosecurity/thread/5366225a-46e7-4d6c-a389-8bd18a5c3aad

    We need import shared access key and provide permissions similar to base filtering engine to enable firewall

    Zero access variants symptoms differ now creating folders in Installer and Appdata\local folders and infecting services.exe

    good luck

    Friday, July 27, 2012 2:32 AM
  • hey gunner how did u solve window firewall and window defender problems?? i have same issue:(
    Saturday, November 24, 2012 2:17 AM
  • Hey everyone.  This same exact error and behavior of Windows firewall seem to be linked to another issue with Group Policy Client service.  Here is a re-post with the solution from Microsoft community forum (http://answers.microsoft.com/en-us/windows/forum/windows_7-performance/why-wont-windows-connect-to-the-group-policy/b73107f8-8447-4599-87a5-65ecc6a63aa0?page=2)

    NOTE: before trying this solution make sure you are having the issue with Group Policy Client service, i.e.:

    1. Non-admin users cannot log in to the computer
    2. When admin logs in, a message appears informing you that Windows cannot connect to Group Policy Client service
    3. Group Policy Client service does not appear to be Started in services.msc snap-in

    If you have all three symptoms listed above, then the fix may resolve the Firewall error code 0x6D9

    Video walkthrough for those who are not very technical is here: http://youtu.be/4m5KEmckWK4

    I had this issue on my laptop since November, and it really bugged me.  I sifted through the event log and found the pattern of events that preceded the issue, and, probably, caused it.

    In short, the pattern is as follows: Windows updates run automatically as scheduled, and when reboot is initiated after the updates are finished, the computer crashes (probably during reboot sequence).  When it boots up, it reports that the last shutdown was unexpected, and the issue begins to occur.

    I spent 2 days trying to dig out a solution from the Internet, to no avail, until I came across this page.  It doesn't say anything about this particular problem, but it gives more information about SVCHOST process that starts many services, including Group Policy Client.  It looks like during reboot a vital registry settings were lost during crash and Group Policy Client "don't know" how to start.  Let me explain:

    There are two places to look in the registry:

    1. HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services this path should contain gpsvc key (a folder), which is responsible for service parameters and configuration.  I found that the key was intact, so, you do not touch anything here - just check that the key exists.
    2. HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SVCHOST This is the most important path you should look into, as it must contain the keys and values referred in the key #1.  Below are descriptions what must be present there.
    • There must be Multi-String value called GPSvcGroup. My laptop was missing it.  So, you should create multi-string value named GPSvcGroup and assign it value GPSvc.
    • Next, you must create a key (a folder) and name it GPSvcGroup - this key normally should be there, but, again, it was missin on my laptop.
    • Then open newly-created GPSvcGroup folder and create 2 DWORD values:
    1. First called AuthenticationCapabilities and you must give it a value of 0x00003020 (or 12320 in decimal)
    2. Second is called CoInitializeSecurityParam and it must have value of 1.

    Once you complete all steps above, reboot the computer and the problem will be fixed.




    • Edited by SQL-ER Friday, March 15, 2013 5:55 AM
    • Proposed as answer by HashKeyLime Tuesday, April 30, 2013 4:25 PM
    Friday, March 15, 2013 5:50 AM
  • Hey everyone.  This same exact error and behavior of Windows firewall seem to be linked to another issue with Group Policy Client service.  Here is a re-post with the solution from Microsoft community forum (http://answers.microsoft.com/en-us/windows/forum/windows_7-performance/why-wont-windows-connect-to-the-group-policy/b73107f8-8447-4599-87a5-65ecc6a63aa0?page=2)

    NOTE: before trying this solution make sure you are having the issue with Group Policy Client service, i.e.:

    1. Non-admin users cannot log in to the computer
    2. When admin logs in, a message appears informing you that Windows cannot connect to Group Policy Client service
    3. Group Policy Client service does not appear to be Started in services.msc snap-in

    If you have all three symptoms listed above, then the fix may resolve the Firewall error code 0x6D9

    Video walkthrough for those who are not very technical is here: http://youtu.be/4m5KEmckWK4

    I had this issue on my laptop since November, and it really bugged me.  I sifted through the event log and found the pattern of events that preceded the issue, and, probably, caused it.

    In short, the pattern is as follows: Windows updates run automatically as scheduled, and when reboot is initiated after the updates are finished, the computer crashes (probably during reboot sequence).  When it boots up, it reports that the last shutdown was unexpected, and the issue begins to occur.

    I spent 2 days trying to dig out a solution from the Internet, to no avail, until I came across this page.  It doesn't say anything about this particular problem, but it gives more information about SVCHOST process that starts many services, including Group Policy Client.  It looks like during reboot a vital registry settings were lost during crash and Group Policy Client "don't know" how to start.  Let me explain:

    There are two places to look in the registry:

    1. HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services this path should contain gpsvc key (a folder), which is responsible for service parameters and configuration.  I found that the key was intact, so, you do not touch anything here - just check that the key exists.
    2. HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SVCHOST This is the most important path you should look into, as it must contain the keys and values referred in the key #1.  Below are descriptions what must be present there.
    • There must be Multi-String value called GPSvcGroup. My laptop was missing it.  So, you should create multi-string value named GPSvcGroup and assign it value GPSvc.
    • Next, you must create a key (a folder) and name it GPSvcGroup - this key normally should be there, but, again, it was missin on my laptop.
    • Then open newly-created GPSvcGroup folder and create 2 DWORD values:
    1. First called AuthenticationCapabilities and you must give it a value of 0x00003020 (or 12320 in decimal)
    2. Second is called CoInitializeSecurityParam and it must have value of 1.

    Once you complete all steps above, reboot the computer and the problem will be fixed.





    EXTREMELY Helpful answer.

    Absolutely to the point, with clear instructions and completely solved my problem.  I had also been getting and obscure Group Policy error every time I rebooted and this fixed it also.  Thank you for taking the time to post this fix.

    Tuesday, April 30, 2013 4:28 PM
  • I replaced AVG 2013 trial with Avast Free after my computer was getting unstable while AVG indicated that it too was returning some infections. But when I repace.d that AV w/Avast, my comp really went wild. It started opening numerous programs w/o any commands or prompts from me. Evcerything just opened up, programs, dialogs, etc. Then it just completely crashed, and this after I had re-installed Win7 Pro x64 with a MS replacement disc ever since then I haven't been able to open a stable OS. even after running the various fixes, updates (when update worked), solutions. and most aggravating of all my keyboard has a mind of it's own, especially when I'm getting close to running/installing 'fixes that would probably have worked.

    What to do? I have an older laptop (Dell Notebook with expired warranty and a dubious history). OEM Windows Vista. It has (had) duo processors until windows media player network sharing started running itself in the background. At one time when I was in Task Manager it was using upwards of 2.4GB of resources. it was allI could do to 'end process' and keep it at bay while trying stop other processes eating up memory. A lot of this scenario in the last week  to ten days. Troubleshooters 'work' for just a feww minutes to maybe 2-3 hours. And then the same xxx starts again. even after using msconfig (system configuration) recommendations several times.

    Any point me in the best direction tips would REALLY HELP!! And I mean something like a firm 'this what you have to do' not 'you could try this' suggestion. Can somebody out there help me? I'm not really adept at the keyboard to enable detailed descriptions to be submitted fast enough to provide feedback that counts, I think?

    Thanks all FR

    '


    • Edited by FR_KJ in OmaNe Tuesday, May 14, 2013 3:14 PM win7 firewall, updates
    Tuesday, May 14, 2013 3:13 PM