Windows Firewall not working after updating to windows 11

Since BFE, RpcSs, and RpcEptMapper are already running, the supported next steps are to focus on the Windows Defender Firewall service itself and its default configuration.

1. In Services (services.msc), verify Windows Defender Firewall is set to Automatic.
2. Also verify Base Filtering Engine is running.
3. Open an elevated Command Prompt and make sure the required services are configured and started:

sc config RpcEptMapper start= auto
sc start RpcEptMapper

sc config RpcSs start= auto
sc start RpcSs

sc config MpsSvc start= auto
sc start MpsSvc

4. If MpsSvc still does not start, check whether the firewall policy registry key exists:

reg query "HKLM\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy" /s

5. If that key is missing or corrupted, reset the firewall service to its default configuration:

netsh advfirewall reset

6. Restart Windows and test Windows Defender Firewall again.

Important points from Microsoft guidance:

• Windows Update depends on the Windows Firewall service (MpsSvc) for internal communication.
• Stopping the Windows Defender Firewall service is not supported and can cause broader Windows problems.
• If the goal is only to turn the firewall off temporarily, disable the firewall profiles instead of stopping the service.

If the service still fails with 0x800706D9 or remains stuck, Microsoft also documents a service-repair batch method that resets startup configuration for MpsSvc, KeyIso, BFE, and FwcAgent, then stops and starts those services. Run it as administrator exactly as documented.

Use this content in a .bat file:

sc config MpsSvc start= auto
sc config KeyIso start= auto
sc config BFE start= auto
sc config FwcAgent start= auto
net stop MpsSvc 
net start MpsSvc 
net stop KeyIso 
net start KeyIso
net start Wlansvc
net start dot3svc
net start EapHostnet 
net stop BFE 
net start BFE
net start PolicyAgent
net start MpsSvc
net start IKEEXT
net start DcaSvcnet 
net stop FwcAgent 
net start FwcAgent

Save it as Repair.bat, then right-click it and select Run as administrator. If prompted to stop a service, press Y and then Enter.

• “0x8007042c” error message when you try to start Windows Firewall
• Troubleshoot Windows Update error 0x800706D9
• Windows Update issues troubleshooting
• Manage Windows Firewall with the command line