Windows 防火墙^{(Windows Firewall)}作为抵御恶意软件的第一层，因此始终建议将其保持为“开启”状态——除非您使用第三方防火墙软件。如果由于某种未知原因，您发现 Windows防火墙^(Firewall)在启动时没有自动启动，那么您可能想尝试以下一些故障排除步骤。

Windows 防火墙^{(Windows Firewall)}服务未启动

您可能收到的错误消息是：

• Windows 防火墙^{(Windows Firewall)}不是默认防火墙
• Windows 防火墙无法启动
• Windows 无法启动 Windows 防火墙

如果Windows 防火墙^{(Windows Firewall)}无法启动，您可能会在Windows系统上看到的其他错误是：

1. Windows 防火墙^{(Windows Firewall)}服务因服务特定错误 87 (0x57) 而终止
2. 错误 0x80004015：该类配置为作为不同于调用者的安全 ID 运行。
3. Windows 防火墙^{(Windows Firewall)}服务因服务特定错误 6801 (0x1A91) 而终止。
4. 事件 ID：7024 – Windows 防火墙^{(Windows Firewall)}服务因服务特定错误 5 (0x5) 而终止
5. Windows 无法在本地计算机上启动^{(Local Computer)}基本过滤引擎^{(Base Filtering Engine)}服务。错误 5：访问被拒绝。
6. Windows 无法在本地计算机上启动^{(Local Computer)}IPsec 策略代理^{(IPsec Policy Agent)}服务。错误 1068：依赖服务或组启动失败^{(The dependency service or group failed to start)}。
7. Windows 无法在本地计算机上启动^{(Local Computer)}网络位置感知^{(Network Location Awareness)}。
8. cmd.exe中的“net start mpssvc”返回系统错误1297。

我们建议您尝试以下故障排除：

1. 扫描恶意软件
2. 运行 SFC 和 DISM
3. 检查防火墙服务状态
4. 检查防火墙相关的驱动程序^{(Firewall-related Driver)}状态
5. 运行组策略结果工具
6. 运行 Windows 防火墙疑难解答
7. 重置 Windows 防火墙设置。

1]扫描恶意软件

首先，使用优秀的防病毒软件扫描您的机器以查找恶意软件。如果您安装了第 3 方防火墙或安全套件^{(Security Suite)}，那么这也可能是问题的原因。很多时候，第三方安全软件可以禁用Windows 防火墙^{(Windows Firewall)}，甚至阻止它启动。

2]运行SFC和DISM

运行系统文件检查器或sfc /scannow 。您可能还想运行 DISM^{(Run DISM)}并查看是否有帮助。

3]检查防火墙服务状态

接下来，在Windows 开始搜索中键入^{(Windows Start Search)}services.msc并按Enter打开Services。此处确保Windows 防火墙服务^{(Windows Firewall Service)}已启动并设置为Automatic。您可以通过单击“开始^(Start)”按钮来执行此操作。此外，确保远程过程调用服务^{(Remote Procedure Call Service)}和基本过滤引擎服务^{(Base Filtering Engine Service)}已启动并设置为自动。

4]检查防火墙相关的驱动程序^{(Check Firewall-related Driver)}状态

现在您还必须确保Windows 防火墙授权驱动程序^{(Windows Firewall Authorization Driver)}(mdsdrv.sys) 正常运行。

为此，请在搜索栏中键入devmgmt.msc并按 Enter 打开Device Manager。在Views选项卡中，选中Show Hidden Devices并显示Devices By Connection。

在列表中找到 Windows 防火墙授权驱动程序^{(Locate Windows Firewall Authorization Driver)}并双击它以打开其属性^(Properties)框。单击^(Click)Driver选项卡并确保进程已启动，并且启动类型为Demand。单击确定。

重启^(Reboot)。希望^(Hopefully)您的 Windows防火墙^(Firewall)现在应该可以正常工作了。

5]运行组策略结果工具

如果没有帮助，则运行组策略结果工具^{(the Group Policy Result Tool)}以检查是否有防火墙策略阻止它。打开提升的命令提示符窗口，键入gpresult -z并按Enter。在Resultant Set Of Policies For Computer下^(Computer)检查^(Check)，尤其是在Security Options下。

6]运行Windows防火墙疑难解答^{(Run Windows Firewall Troubleshooter)}

运行Windows 防火墙疑难解答，看看它是否对您有帮助。Microsoft的此ATS将帮助您自动修复和修复Windows 防火墙^{(Windows Firewall)}问题。查看它是否适用于您的 Windows，或者它是否是内置的。

7]重置Windows防火墙设置

将 Windows 防火墙设置重置为默认值^{(Reset Windows Firewall settings to defaults)}，看看是否有帮助。

顺便说一句，如果您需要轻松访问以下面板，您可以稍微偏离主题，您可以键入以下运行^(Run)命令并按Enter

• 防火墙设置：FirewallSettings
• 防火墙控制面板：FirewallControlPanel
• 具有高级安全^{(Advanced Security)}性的Windows防火墙^(Firewall)：wf.msc

如果您的Windows 无法在本地计算机上启动 Windows 防火墙，您可能希望看到这篇文章。 如果您收到Windows 防火墙已阻止此应用程序的某些功能消息，请参阅此帖子。

提示^(TIP)：您可能也会对如何配置 Windows 防火墙感兴趣。^{(Configure the Windows Firewall)}

Windows Firewall service does not start in Windows 11/10

Windows Firewall acts as the first layer of defense against malware, so it is always advisable to keep it turned ‘ON’ – unless you are using third-party firewall software. If for some unknown reason if you find your Windows Firewall does not start automatically at startup, then here are a few troubleshooting steps you may want to try out.

Windows Firewall service does not start

The error messages you could receive are:

• Windows Firewall is not the default firewall
• Windows Firewall does not start
• Windows could not start the Windows Firewall

If Windows Firewall fails to start, the other errors you could see on your Windows system are:

1. The Windows Firewall service terminated with service-specific error 87 (0x57)
2. Error 0x80004015: The class is configured to run as a security id different from the caller.
3. The Windows Firewall service terminated with service-specific error 6801 (0x1A91).
4. Event ID: 7024 – The Windows Firewall service terminated with service-specific error 5 (0x5)
5. Windows could not start the Base Filtering Engine service on Local Computer. Error 5: Access is denied.
6. Windows could not start the IPsec Policy Agent service on Local Computer. Error 1068: The dependency service or group failed to start.
7. Windows could not start the Network Location Awareness on Local Computer.
8. “net start mpssvc” in cmd.exe returns the system error 1297.

We suggest you try the following troubleshooting:

1. Scan for malware
2. Run SFC and DISM
3. Check Firewall Services status
4. Check Firewall-related Driver status
5. Run Group Policy Result Tool
6. Run Windows Firewall Troubleshooter
7. Reset Windows Firewall settings.

1] Scan for malware

First, scan your machine for malware using good antivirus software. If you have installed a 3rd party firewall or a Security Suite, then that could also be the cause of the problem. Many times, third-party security software can disable the Windows Firewall and even prevent it from starting up.

2] Run SFC and DISM

Run System File Checker or sfc /scannow. You may also want to Run DISM and see if that helps.

3] Check Firewall Services status

Next, type services.msc in Windows Start Search and hit Enter to open up Services. Here ensure that the Windows Firewall Service is started and set on Automatic. You do this by clicking on the Start button. Also, ensure that the Remote Procedure Call Service & the Base Filtering Engine Service is started and set on Automatic.

4] Check Firewall-related Driver status

Now you also have to ensure that the Windows Firewall Authorization Driver (mdsdrv.sys) is running properly.

To do so, type devmgmt.msc in the search bar and hit enter to open Device Manager. In the Views tab, check on Show Hidden Devices and also show Devices By Connection.

Locate Windows Firewall Authorization Driver in the list and double-click on it to open its Properties box. Click on the Driver tab and ensure that the process is started, and the startup type is Demand. Click OK.

Reboot. Hopefully, your Windows Firewall should be working OK now.

5] Run Group Policy Result Tool

If it does not help then run the Group Policy Result Tool to check if there is a Firewall policy blocking it. Open an elevated command prompt window, type gpresult -z and hit Enter. Check under Resultant Set Of Policies For Computer, esp under Security Options.

6] Run Windows Firewall Troubleshooter

Run the Windows Firewall Troubleshooter and see if it helps you. This ATS from Microsoft will help you repair and fix Windows Firewall problems automatically. See if it is available for your Windows or if it is built-in.

7]  Reset Windows Firewall settings

Reset Windows Firewall settings to defaults and see if that helps.

Incidentally, drifting a bit away from the main topic, should you need to access the following panels easily, you can type the following Run commands and hit Enter

• Firewall Settings: FirewallSettings
• Firewall Control Panel: FirewallControlPanel
• Windows Firewall with Advanced Security: wf.msc

You might want to see this post if your Windows could not start the Windows Firewall on Local Computer. See this post if you receive Windows Firewall has blocked some features of this app message.

TIP: How to Configure the Windows Firewall may also interest you.

Related posts

• 如何在Windows 11/10中配置Windows Firewall

• 如何在Windows 10 Windows Firewall中允许或阻止程序

• Windows 10中的进口，Export，Repair，Restore Default Firewall Policy

• 在Windows 10上打开或Off Windows Defender Firewall Notifications

• Windows 10 Review，Download Best Free Firewall software

• Windows Update未能安装或不会在Windows 11/10下载

• 您的PC不支持Miracast - Windows 10错误

• Windows Troubleshooters不在Windows 10工作

• 无法从iPhone导入Photos到Windows 11/10 PC

• 已删除的Printer在Windows 10中重新出现并重返

• Windows 11/10中Pictures folder中Screenshots未保存

• 在Windows 10​​6计算机上检测到扫描仪错误

• Snip and Sketch冻结在Windows 10

• Run作为administrator option未显示或在Windows 11/10中工作

• WMI Provider Host（WmiPrvSE.exe）High CPU Usage在Windows 10

• 您的组织已关闭Windows 10中的自动更新

• Windows Firewall无法更改您的一些设置

• Fix Device encryption在Windows 11/10中暂时暂停错误

• Device Manager是空白和不显示任何Windows 11/10

• Brave浏览器不打开或Windows 11/10工作