Dear technet forum, We have about over 200 Windows 7 Enterprise computers in my domain which experience the following behavior: The Windows firewall cannot start (error 5 -access denied) To solve this problem, I just have to add the "NT Service\MpsSVC service" (with SetValue and QueryValues) permission to HKLM:\SYSTEM\CurrentControlSet\services\SharedAccess\Epoch as described in this article http://blogs.technet.com/b/networking/archive/2011/06/14/the-windows-firewall-service-fails-to-start-registry-permissions.aspx Now my problem is that a few days later, the permission I granted gets removed again ! How can I figure out WHAT is removing this permission ?

Hi, This issue occurs may be caused by the policy settings for an object. Please check it in Microsoft Management Console(MMC). For reference, http://technet.microsoft.com/en-us/library/cc757864(WS.10).aspxKim Zhou TechNet Community Support

Hi, This issue occurs may be caused by the policy settings for an object. Please check it in Microsoft Management Console(MMC). For reference, http://technet.microsoft.com/en-us/library/cc757864(WS.10).aspxKim Zhou TechNet Community Support