Windows Firewall not working after updating to windows 11

Luna Stardust 10 Reputation points
2026-08-20T08:24:09.71+00:00

Windows 11 25H2 build 26200.9168. Windows Defender Firewall service (MpsSvc) remains stuck in STOP_PENDING after reboot and after an in-place Windows repair reinstall. MpsSvc reports service-specific error 87 (“The parameter is incorrect”), and Event Viewer repeatedly logs Event ID 7024. BFE, mpsdrv, NSI, RpcSs and RpcEptMapper are all running. DISM completed successfully and SFC found no integrity violations. netsh advfirewall reset fails because it cannot contact the Firewall service, Control Panel gives 0x800706D9, and CheckNetIsolation.exe LoopbackExempt -s returns error 1753.

Windows for home | Windows 11 | Performance and system failures
0 comments

3 answers

Sort by: Newest
Most helpful Newest Oldest
  1. Ramesh Srinivasan 87,860 Reputation points Independent Advisor
    2026-08-20T09:21:09.43+00:00

    Hi Luna

    Error 1753 denotes that the Firewall service is not starting correctly. To resolve the issue, please follow the steps mentioned in the accepted answer in the thread below:

    Windows Firewall 0x800706d9 - Microsoft Q&A

    Restart Windows and check the status of the Windows Defender Firewall service.

    Was this answer helpful?

  2. Luna Stardust 10 Reputation points
    2026-08-20T08:26:01.2766667+00:00

    I have already completed these steps. RpcSs and RpcEptMapper are running, BFE is running, MpsSvc is configured Automatic, but MpsSvc remains stuck in STOP_PENDING with service-specific error 87. netsh advfirewall reset fails because it cannot contact Windows Defender Firewall. DISM completed successfully, SFC found no integrity violations, and I have also completed a Windows 11 25H2 repair reinstall with no change. Event Viewer repeatedly records Event ID 7024: “The parameter is incorrect.” Please escalate this to a support agent, as the documented troubleshooting has been exhausted.

    Was this answer helpful?

    2 people found this answer helpful.

  3. AI answer

    2026-08-20T08:24:28.66+00:00

    Since BFE, RpcSs, and RpcEptMapper are already running, the supported next steps are to focus on the Windows Defender Firewall service itself and its default configuration.

    1. In Services (services.msc), verify Windows Defender Firewall is set to Automatic.
    2. Also verify Base Filtering Engine is running.
    3. Open an elevated Command Prompt and make sure the required services are configured and started:
    sc config RpcEptMapper start= auto
sc start RpcEptMapper

sc config RpcSs start= auto
sc start RpcSs

sc config MpsSvc start= auto
sc start MpsSvc
    1. If MpsSvc still does not start, check whether the firewall policy registry key exists:
    reg query "HKLM\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy" /s
    1. If that key is missing or corrupted, reset the firewall service to its default configuration:
    netsh advfirewall reset
    1. Restart Windows and test Windows Defender Firewall again.

    Important points from Microsoft guidance:

    • Windows Update depends on the Windows Firewall service (MpsSvc) for internal communication.
    • Stopping the Windows Defender Firewall service is not supported and can cause broader Windows problems.
    • If the goal is only to turn the firewall off temporarily, disable the firewall profiles instead of stopping the service.

    If the service still fails with 0x800706D9 or remains stuck, Microsoft also documents a service-repair batch method that resets startup configuration for MpsSvc, KeyIso, BFE, and FwcAgent, then stops and starts those services. Run it as administrator exactly as documented.

    Use this content in a .bat file:

    sc config MpsSvc start= auto
sc config KeyIso start= auto
sc config BFE start= auto
sc config FwcAgent start= auto
net stop MpsSvc 
net start MpsSvc 
net stop KeyIso 
net start KeyIso
net start Wlansvc
net start dot3svc
net start EapHostnet 
net stop BFE 
net start BFE
net start PolicyAgent
net start MpsSvc
net start IKEEXT
net start DcaSvcnet 
net stop FwcAgent 
net start FwcAgent

    Save it as Repair.bat, then right-click it and select Run as administrator. If prompted to stop a service, press Y and then Enter.

    AI-generated content may be incorrect. Read our transparency notes for more information.

    Was this answer helpful?

Your answer

Answers can be marked as 'Accepted' by the question author and 'Recommended' by moderators, which helps users know the answer solved the author's problem.