Windows Firewall not working after updating to windows 11

Question

Windows Firewall not working after updating to windows 11

Luna Stardust 10

Windows 11 25H2 build 26200.9168. Windows Defender Firewall service (MpsSvc) remains stuck in STOP_PENDING after reboot and after an in-place Windows repair reinstall. MpsSvc reports service-specific error 87 (“The parameter is incorrect”), and Event Viewer repeatedly logs Event ID 7024. BFE, mpsdrv, NSI, RpcSs and RpcEptMapper are all running. DISM completed successfully and SFC found no integrity violations. netsh advfirewall reset fails because it cannot contact the Firewall service, Control Panel gives 0x800706D9, and CheckNetIsolation.exe LoopbackExempt -s returns error 1753.

0 comments

3 answers

Your answer

Answer 1

Luna Stardust 10

I have already completed these steps. RpcSs and RpcEptMapper are running, BFE is running, MpsSvc is configured Automatic, but MpsSvc remains stuck in STOP_PENDING with service-specific error 87. netsh advfirewall reset fails because it cannot contact Windows Defender Firewall. DISM completed successfully, SFC found no integrity violations, and I have also completed a Windows 11 25H2 repair reinstall with no change. Event Viewer repeatedly records Event ID 7024: “The parameter is incorrect.” Please escalate this to a support agent, as the documented troubleshooting has been exhausted.

KRISHNA VISHWAKARMA 0 Reputation points

2026-09-15T15:18:03.4+00:00

Same I am facing issues not able to start service and some systems on windows defender firewall service not visible

Answer 2

Ramesh Srinivasan 87,860 Independent Advisor

Hi Luna

Error 1753 denotes that the Firewall service is not starting correctly. To resolve the issue, please follow the steps mentioned in the accepted answer in the thread below:

Windows Firewall 0x800706d9 - Microsoft Q&A

Restart Windows and check the status of the Windows Defender Firewall service.

Wistaria sinensis 0 Reputation points

2026-09-02T08:03:50.5533333+00:00

I have the same exact error after windows 11 update.
I tried everything to restore the Windows firewall functionality, included that bat file but it didn't work. the bat file fails miserably as it says that the service can't be stopped (as it's STOP PENDING). this command in particular fails

C:\Windows\System32>net stop MpsSvc Il servizio sta per essere avviato o arrestato. Riprovare in seguito.
JuliaMarvin 22,805 Reputation points Volunteer Moderator

2026-09-02T08:08:07.0333333+00:00

@Wistaria sinensis
Please start your own question/thread.

Answer 3

Since BFE, RpcSs, and RpcEptMapper are already running, the supported next steps are to focus on the Windows Defender Firewall service itself and its default configuration.

In Services (services.msc), verify Windows Defender Firewall is set to Automatic.
Also verify Base Filtering Engine is running.
Open an elevated Command Prompt and make sure the required services are configured and started:

sc config RpcEptMapper start= auto
sc start RpcEptMapper

sc config RpcSs start= auto
sc start RpcSs

sc config MpsSvc start= auto
sc start MpsSvc

If MpsSvc still does not start, check whether the firewall policy registry key exists:

reg query "HKLM\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy" /s

If that key is missing or corrupted, reset the firewall service to its default configuration:

netsh advfirewall reset

Restart Windows and test Windows Defender Firewall again.

Important points from Microsoft guidance:

Windows Update depends on the Windows Firewall service (MpsSvc) for internal communication.
Stopping the Windows Defender Firewall service is not supported and can cause broader Windows problems.
If the goal is only to turn the firewall off temporarily, disable the firewall profiles instead of stopping the service.

If the service still fails with 0x800706D9 or remains stuck, Microsoft also documents a service-repair batch method that resets startup configuration for MpsSvc, KeyIso, BFE, and FwcAgent, then stops and starts those services. Run it as administrator exactly as documented.

Use this content in a .bat file:

sc config MpsSvc start= auto
sc config KeyIso start= auto
sc config BFE start= auto
sc config FwcAgent start= auto
net stop MpsSvc 
net start MpsSvc 
net stop KeyIso 
net start KeyIso
net start Wlansvc
net start dot3svc
net start EapHostnet 
net stop BFE 
net start BFE
net start PolicyAgent
net start MpsSvc
net start IKEEXT
net start DcaSvcnet 
net stop FwcAgent 
net start FwcAgent

Save it as Repair.bat, then right-click it and select Run as administrator. If prompted to stop a service, press Y and then Enter.