Adding permissions "NT Service\mpssvc" not working - the account is not found. Firewall not running (error 5 (0x5))

Question

_{Thursday, October 13, 2011 11:08 AM}

Hi all,

i have a problem with the firewall-service on a Windows 2008 Std SP2. The firewall service does not start. Access denied problem. I can see that on some registry-keys the permissions for the "NT Service\MpsSvc" account are missing.

I found some similar threads, and here is decripted what to do.

But if i try to add the permissions for "NT Service\MpsSvc" the server does not find this account - so, i cannot add it to the registry key.

What i have to do that i can select this account ?

Thanks

Bruno

All replies (6)

_{Thursday, October 20, 2011 5:50 AM ✅Answered}

i added everyone permissions now for the needed reg-keys. That solved my problem that i could start the firewall-service and reach the server again (and configure the firewall). Anyway, i don't understand why i could not add the MPSSVC (local or domain, but i know that it is a local account)

Bruno

_{Thursday, October 13, 2011 7:26 PM}

I think you need to set permissions to few registry entries and hopefully that will work for you. please refer to following microsoft KB articles that discribe the issue you shared. if still not works please do inform. We will try some other methods.

http://support.microsoft.com/kb/943996

http://support.microsoft.com/kb/929455 

VP Mishra System Administrator MCP, MCSA, MCSE, MCTS

_{Friday, October 14, 2011 6:58 AM}

Hi Mishra,

i know the articles. Thank you.

But the problem is, that i can not ADD the account to the registry keys. The account  "NT Service\MpsSvc" is not resolved when i try to add the permissions.

Bruno

_{Friday, October 14, 2011 11:51 AM | 1 vote}

 

But the problem is, that i can not ADD the account to the registry keys. The account  "NT Service\MpsSvc" is not resolved when i try to add the permissions.

Bruno

While adding permissions and resolving for account name, in location select "local machine" instead of domain. MpsSvc is local machine account !

Also, please have a look at below article

http://blogs.technet.com/b/networking/archive/2011/06/14/the-windows-firewall-service-fails-to-start-registry-permissions.aspx

HTH

Thanks, Santosh (MCTS W2K8 AD and SCCM) “ To Infinity and Beyond… ”

_{Tuesday, November 6, 2012 5:04 AM}

Hey bruno,

In order to give write permission to MpsSvc account for the needed reg-keys, i did the following

Right click the reg key >> click Permissions. >> In Enter the object name to select box, type "NT Service\MpsSvc" and add,  which will add MpsSVC account.

When you go to "advanced" and "find now" button to locate this account, it shouldn't list there. I don't know why :P ..

_{Monday, January 6, 2014 6:59 PM}

Bruno I also had the same issue adding the nt service\mpssvc account.  I found it was due to the machine being a member of a domain.  in the location section, i navigated away from the domain name, scrolled up and selected the computer name.  I understand this thread is old, but if i needed it 2 years later maybe someone else will too :-)