Windows Firewall Error 0x80070422: Fixes

Windows Firewall error 0x80070422 usually means the Windows Firewall service (or its dependencies) is disabled or not running, so Windows can’t apply your settings. The fix is to re-enable the Windows Defender Firewall service and its supporting services, then restart the firewall — a process that takes about five minutes and requires administrator access.

What Causes Error 0x80070422?

This error appears when you try to open Windows Firewall, change a rule, or turn the firewall on/off, and Windows returns the code 0x80070422. The root cause is almost always one of these:

The Windows Defender Firewall service (named mpssvc) is set to Disabled or Manual.
A required dependency — the Base Filtering Engine (BFE) — is stopped.
Third-party security software has taken over firewall duties and disabled the Windows service.
Group Policy or a system tweak has turned off the firewall via registry or policy settings.
System file corruption or a pending Windows update is interfering with service startup.

Because the firewall is a core security component, Windows won’t let you change settings while the service isn’t running. The error is a safeguard, not a random glitch.

How to Fix Error 0x80070422 (Step-by-Step)

These steps apply to Windows 10 and Windows 11. You’ll need an administrator account.

Open Services: Press Win + R, type services.msc, and press Enter.
Find Windows Defender Firewall: Scroll to the entry named Windows Defender Firewall (or Windows Firewall on older builds). Double-click it.
Set Startup Type to Automatic: In the General tab, change Startup type to Automatic. If the Service status is Stopped, click Start.
Check Dependencies: Click the Dependencies tab. Note the listed services (typically Base Filtering Engine). Make sure each of those is also running and set to Automatic.
Restart the Service: After starting, right-click Windows Defender Firewall in the list and choose Restart.
Test the Firewall: Open Windows Security (or Control Panel) and try to change a firewall setting. The error should be gone.

If the service won’t start, or if it immediately stops, proceed to the next section.

What to Do If the Service Won’t Start

Sometimes the service is set correctly but still fails to start. Try these in order:

Run the System File Checker: Open Command Prompt as administrator and run sfc /scannow. This repairs corrupted system files that might be blocking the service.
Check the Base Filtering Engine: In Services, locate Base Filtering Engine. If it’s not running, set it to Automatic and start it. If it fails, look for a third-party antivirus or firewall that might be conflicting.
Temporarily disable third-party security: Some suites (like certain VPNs, parental controls, or anti-malware tools) disable the Windows firewall service. Disable their firewall component or uninstall the software temporarily, then try starting the service again.
Use the Windows Firewall troubleshooter: Microsoft provides a dedicated troubleshooter. Download it from the Microsoft Support site (search “Windows Firewall troubleshooter”), run it, and follow the prompts.
Check Group Policy: Press Win + R, type gpedit.msc (Pro/Enterprise only). Navigate to Computer Configuration → Administrative Templates → Network → Network Connections → Windows Defender Firewall. Ensure the policy “Windows Defender Firewall: Protect all network connections” is set to Enabled or Not Configured.

If none of these work, a registry fix may be needed. Open Registry Editor (regedit) and go to HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\mpssvc. Set the Start DWORD value to 2 (Automatic). Reboot. This is safe if you only change that one value.

Why Does This Error Happen After a Windows Update?

Windows updates occasionally reset service configurations or introduce new security policies. In some cases, an update fails to apply cleanly, leaving the firewall service in a stopped state. The error 0x80070422 is commonly reported after feature updates (like upgrading from Windows 10 to 11) or monthly cumulative updates. The fix is the same as above, but if the service keeps stopping, check that the update itself isn’t pending a reboot. Restart your PC, then try the service steps again.

Is It Safe to Disable Windows Firewall?

No. Windows Firewall is a critical layer of protection against inbound and outbound network threats. Disabling it — even temporarily — exposes your system to malware, ransomware, and unauthorized access. If you have a third-party firewall, it’s better to keep Windows Firewall enabled and let the third-party manage rules, or disable only the third-party’s firewall and rely on Windows. Never disable both. If you’re troubleshooting a network issue, temporarily disable the firewall for a few minutes, but re-enable it immediately after testing.

Frequently Asked Questions

Will I lose my firewall rules if I reset the service?

No. Resetting the service startup type or restarting the service does not delete your custom rules. Your rules are stored in the registry and remain intact. If you run the troubleshooter, it may reset some settings to defaults, but it usually preserves custom rules.

Can I fix this error without administrator access?

No. Changing service settings requires administrator privileges. If you’re on a work or school computer, contact your IT department. On a personal PC, ensure your account is an administrator (Settings → Accounts → Your Info).

Why does the error say “Windows cannot modify the firewall settings”?

That’s the friendly version of the same error. It appears when the service is stopped or when Group Policy restricts changes. The underlying cause and fix are identical to error 0x80070422.

Does this error mean my computer is already infected?

Not necessarily. The error is a service configuration issue, not a sign of malware. However, if the service was disabled by something other than you, it’s worth running a full antivirus scan to rule out malicious tampering.

What if the error persists after all steps?

If you’ve tried every step and the service still won’t start, consider a system restore to a point before the problem began, or use the Windows Media Creation Tool to perform an in-place upgrade repair. Back up your data first. In rare cases, a corrupted driver or a failing hard drive can cause this, so check your disk health with chkdsk.

General steps for current mainstream versions; menus can differ by device and version. See the disclaimer or report an error.

More in this bed

The whole Tech How-To bed →