Windows Firewall Error 0x80070424: Fixes That Work

Windows Firewall error 0x80070424, which appears as “Windows firewall can’t change some of your settings,” usually means the Windows Defender Firewall service is stopped, disabled, or its underlying driver is corrupted. The fix is to restart the Windows Defender Firewall service, restore its default registry settings, or repair the system files that manage the firewall. Below are the step-by-step methods that resolve this error on current versions of Windows 10 and Windows 11.

What Causes Error 0x80070424?

The error code 0x80070424 is a Windows system error that translates to “The specified service does not exist as an installed service.” In the context of Windows Firewall, it appears when the Windows Defender Firewall service (also known as “mpssvc”) is not running or is misconfigured. The most common triggers are:

• Third-party antivirus or security suites that disable the Windows Firewall service to replace it with their own.
• Manual changes to the service’s startup type (e.g., setting it to “Disabled” in Services).
• Corrupted system files or registry entries related to the firewall.
• Malware that modifies firewall settings to block security alerts.

This error typically appears when you open Windows Security > Firewall & network protection and try to toggle any setting, such as turning on the firewall for a network profile.

Method 1: Restart the Windows Defender Firewall Service

The quickest fix is to ensure the firewall service is running and set to start automatically. Follow these steps:

1. Press Windows + R, type services.msc, and press Enter.
2. Scroll down to Windows Defender Firewall (on some systems it may be listed as Windows Firewall).
3. Right-click it and select Properties.
4. In the Startup type dropdown, select Automatic (or Automatic (Delayed Start)).
5. If the service is stopped, click Start. If it’s already running, click Stop and then Start to restart it.
6. Click Apply and then OK.

If the service fails to start, note the error message. It may indicate that the service is disabled by Group Policy or that its dependencies are missing. In that case, proceed to the next methods.

Method 2: Use the Windows Security Troubleshooter

Windows includes a built-in troubleshooter that can automatically detect and fix firewall service issues. To run it:

1. Open Settings (Windows + I) and go to System > Troubleshoot > Other troubleshooters (Windows 11) or Update & Security > Troubleshoot > Additional troubleshooters (Windows 10).
2. Find Windows Security or Network Adapter (depending on your version) and click Run.
3. Follow the on-screen instructions. The troubleshooter will check for common problems and may restart the firewall service automatically.

This method is safe and often resolves the issue without manual registry edits.

Method 3: Restore Firewall Defaults via Registry

If the service is present but still not functioning, the firewall’s registry keys may be corrupted. You can reset them to defaults using the netsh command:

1. Open Command Prompt as administrator (right-click Start and select Terminal (Admin) or Command Prompt (Admin)).
2. Type the following command and press Enter:
   netsh advfirewall reset
3. Restart your computer.

This command restores the firewall policy to its default state. It does not delete any third-party firewall rules you may have created, but it resets all built-in rules and profiles. If the error persists, you can also try re-registering the firewall service DLLs:

1. In the same Command Prompt, run:
   regsvr32 firewallapi.dll
regsvr32 hnetcfg.dll
2. Restart your PC.

Method 4: Check Group Policy and Third-Party Security Software

On Windows Pro, Enterprise, or Education editions, Group Policy can disable the Windows Firewall. To check:

1. Press Windows + R, type gpedit.msc, and press Enter.
2. Navigate to Computer Configuration > Administrative Templates > Network > Network Connections > Windows Defender Firewall.
3. Look for policies like “Protect all network connections” or “Windows Defender Firewall: Allow local policy merge.” If any policy is set to Disabled, double-click it and set it to Not Configured or Enabled as appropriate.
4. Close the editor and run gpupdate /force in Command Prompt.

Also, if you have a third-party antivirus or firewall suite installed, it may deliberately disable the Windows firewall. Temporarily uninstall the third-party software (not just disable it) and see if the error disappears. If it does, reinstall the third-party software and configure its own firewall settings to not interfere with Windows Firewall.

Method 5: Repair System Files with SFC and DISM

Corrupted system files can also cause this error. Run the System File Checker and Deployment Image Servicing and Management tools:

1. Open Command Prompt as administrator.
2. Run sfc /scannow and wait for it to complete (it may take 10-15 minutes).
3. If SFC finds issues but cannot fix them, run DISM /Online /Cleanup-Image /RestoreHealth.
4. Restart your PC and check if the error is gone.

These tools replace corrupted Windows files with healthy copies from the local cache or Windows Update. They are safe and do not affect your personal files.

Frequently Asked Questions

Why does error 0x80070424 appear even when I am an administrator?

The error is not about permissions; it’s about the firewall service not running. Even an administrator cannot change firewall settings if the service is stopped or disabled. The methods above restore the service to its normal state.

Can I fix this error by resetting Windows Firewall from the Control Panel?

Yes, you can try the “Restore defaults” option in the Windows Defender Firewall Control Panel applet (control panel > Windows Defender Firewall > Restore defaults). However, this only resets firewall rules, not the service itself. If the service is disabled, you’ll still need to restart it via Services.msc.

Will this error affect my internet connection?

No, the error itself does not block internet access. However, if the firewall is off, your PC is more vulnerable to network threats. The error prevents you from turning the firewall on, so it’s important to fix it to maintain security.

Is it safe to use the netsh advfirewall reset command?

Yes, it is safe. The command resets all firewall rules to their default state, which is the intended configuration for most users. It will remove any custom inbound/outbound rules you’ve created, so you may need to re-add them after the reset.

What if none of these methods work?

If the error persists after trying all methods, you may have a deeper system corruption. Consider using Windows Startup Repair, performing a system restore to a point before the issue started, or using the “Reset this PC” feature (which keeps your files). If the problem is caused by malware, run a full offline scan with Windows Defender or a reputable third-party scanner.

Related

• Windows Key Not Working? Fixes That Work
• How to Transfer iCloud Contacts to Android
• Discord Not Working on Android or iPhone? Fixes