.      How to articles       Windows Services       Group Policy             Donate        
Computer step by step

How to Start/Stop Base Filtering Engine service

Service name: BFE

Display name: Base Filtering Engine


Description:

The Base Filtering Engine (BFE) is a service that manages firewall and Internet Protocol security (IPsec) policies and implements user
mode filtering. Stopping or disabling the BFE service will significantly reduce the security of the system. It will also result in
unpredictable behavior in IPsec management and firewall applications.

Path to executable:

C:\WINDOWS\system32\svchost.exe -k LocalServiceNoNetwork -p

CMD:
This method shows you how to Start/Stop Base Filtering Engine service from Command Prompt

Perform the following steps:

Please go to Start and click on the Type here to search

Type cmd, right click on cmd icon under the Programs and click on Run as administrator

Services Regedit CMD Msconfig

Please confirm User Account Control pop-up

Please select, right and copy a registry key from below, then right click on command prompt window, select Paste and press Enter


To Start Base Filtering Engine service:

net start BFE

sc start BFE


Note: You can’t start a service if Startup type is on Disabled.


To Stop Base Filtering Engine service:

net stop BFE

sc stop BFE


To change Startup type:

Automatic:

REG add "HKLM\SYSTEM\CurrentControlSet\PerfHost\BFE" /v Start /t REG_DWORD /d 2 /f

sc config BFE start= auto

Manual:

REG add "HKLM\SYSTEM\CurrentControlSet\services\BFE" /v Start /t REG_DWORD /d 3 /f

sc config BFE start= demand

Disabled:

REG add "HKLM\SYSTEM\CurrentControlSet\services\BFE" /v Start /t REG_DWORD /d 4 /f

sc config BFE start= disabled

Automatic (Delayed Start):

REG add "HKLM\SYSTEM\CurrentControlSet\services\BFE" /v Start /t REG_DWORD /d 2 /f

sc config BFE start= delayed-auto


Note: When you change to Automatic (Delayed Start) a new key DelayedAutostart is created with value 1.

REG add "HKLM\SYSTEM\CurrentControlSet\services\BFE" /v DelayedAutostart /t REG_DWORD /d 1 /f


When you change to Automatic from Automatic (Delayed Start), DelayedAutostart change value to 0.

REG add "HKLM\SYSTEM\CurrentControlSet\services\BFE" /v DelayedAutostart /t REG_DWORD /d 0 /f