Dear technet forum,
We have about over 200 Windows 7 Enterprise computers in my domain which experience the following behavior:
The Windows firewall cannot start (error 5 -access denied)
To solve this problem, I just have to add the "NT Service\MpsSVC service" (with SetValue and QueryValues) permission to HKLM:\SYSTEM\CurrentControlSet\services\SharedAccess\Epoch
as described in this article

http://blogs.technet.com/b/networking/archive/2011/06/14/the-windows-firewall-service-fails-to-start-registry-permissions.aspx


Now my problem is that a few days later, the permission I granted gets removed again !

How can I figure out WHAT is removing this permission ?

Need to support users over the internet? click here try our remote control online beta

Hi,


This issue occurs may be caused by the policy settings for an object.


Please check it in Microsoft Management Console(MMC).

For reference,

http://technet.microsoft.com/en-us/library/cc757864(WS.10).aspxKim
Zhou

TechNet Community Support

Need to support users over the internet? click here try our remote control online beta

Hi,


This issue occurs may be caused by the policy settings for an object.


Please check it in Microsoft Management Console(MMC).

For reference,

http://technet.microsoft.com/en-us/library/cc757864(WS.10).aspxKim
Zhou

TechNet Community Support

There is an amazing pack of free network admin tools. click here to download it