Close

Fix: Error 1079 – Windows Time, Event Log, Firewall services fail to start

If you find that one of more of the following specified services may fail to start on your computer that is running Windows Server 2008, Windows 2008 R2 or Windows 7, then this article may interest you.

The services in question are:

  • Windows Time  (W32Time)
  • Windows Event Log  (eventlog)
  • Windows Firewall  (MpsSvc)

Moreover,  when you try to start the service/s manually, you may receive the following error message:

Error 1079: The account specified for this service is different from the account specified for other services running in the same process.

In such a case, KB2478117 recommends that you ensure that the service is being started by the Local System account instead of by the Local Service account (NT AUTHORITY\LocalService).

To do so, type services.msc in start search and hit Enter to open Services.

Scroll down to the service in question, say, Windows Firewall service and double click on it to open its Properties box.

 

Click Log On tab and under This account, type NT AUTHORITY\LocalService. You may set both Password fields blank.

Click Apply/OK.

In case of Windows Firewall service, repeat this step for the following services too:

Base Filtering Engine (BFE)
IPSec Policy Agent
Windows Time
IKE and AuthIP IPSec Keying Modules
DHCP Client
Diagnostic Policy
Network List Service
Network Location Awareness

BFE is a service that manages firewall and Internet Protocol security.

Now we’re getting the following error:

Error 5: The account specified for this service is different from the account specified for other services running in the same process.

This is a permissions problem in the registry. You can use SubInACL to fix this.

Download SubInACL and install it from here:
http://www.microsoft.com/downloads/details.aspx?FamilyId=E8BA3E56-D8FE-4A91-93CF-ED6985E3927B&displaylang=en

 

Then copy this code and save it in a batch file named reset.cmd

cd /d "%programfiles%\Windows Resource Kits\Tools"

subinacl /subkeyreg HKEY_LOCAL_MACHINE /grant=administrators=f /grant=system=f /grant=users=r /grant=everyone=r /grant=restricted=r /setowner=administrators
subinacl /keyreg HKEY_LOCAL_MACHINE /grant=administrators=f /grant=system=f /grant=users=r /grant=everyone=r /grant=restricted=r /setowner=administrators

subinacl /subkeyreg HKEY_CLASSES_ROOT /grant=administrators=f /grant=system=f /grant=users=r /setowner=administrators >> %temp%\subinacl_output.txt
subinacl /keyreg HKEY_CLASSES_ROOT /grant=administrators=f /grant=system=f /grant=users=r /setowner=administrators

subinacl /subdirectories %programfiles%\ /grant=administrators=f /grant=system=f /grant=users=e

subinacl /subdirectories %windir%\ /grant=administrators=f /grant=system=f /grant=users=e

subinacl /subkeyreg HKEY_LOCAL_MACHINE\system\currentcontrolset "/grant=nt service\trustedinstaller=f" "/grant=nt service\bfe=f" "/grant=local service=f" "/grant=network service=f" "/grant=nt service\dhcp=f" /grant=administrators=f /grant=system=f /grant=users=r /grant=everyone=r /grant=restricted=r /setowner=administrators >> %temp%\subinacl_output.txt

subinacl /keyreg HKEY_LOCAL_MACHINE\system\currentcontrolset "/grant=nt service\trustedinstaller=f" "/grant=nt service\bfe=f" "/grant=local service=f" "/grant=network service=f" "/grant=nt service\dhcp=f" /grant=administrators=f /grant=system=f /grant=users=r /grant=everyone=r /grant=restricted=r /setowner=administrators >> %temp%\subinacl_output.txt


 

Start CMD using the right-click -> Run As Administrator.
Change to the directory where you saved reset.cmd, then run reset.cmd.

The services should run now.

 

 

scroll to top