ionuttbara / windows-defender-remover

A tool which is uses to remove Windows Defender in Windows 8.x, Windows 10 (every version) and Windows 11.
Other
3.7k stars 253 forks source link

Can't enable anymore (Firewall shows 0x6D9) #127

Closed rudolphos closed 8 months ago

rudolphos commented 9 months ago

What affects the bug ?

Windows Defender Security App and Windows Defender Firewall with Advanced Security

When does this occur?

When launching Windows Defender Firewall with Advanced Security image Shows error 0x6D9

There was an error opening the Windows Firewall with Advanced Security snap-in, The Windows Firewall with Advanced Security snap-in failed to load, Restart the Windows Firewall service on the computer that you are managing, Error 0x6D9.

This service can't be started:

Windows could not start the Windows Defender Firewall service on Local Computer. Error 1068: The dependency service or group failed to start.

image

Windows Defender Firewall can't change some of your settings. Error code 0x8007042c

And can't open Windows defender image

In which version of Windows does this issue happen ? Write version complete.

Windows 10 22H2

How do we replicate the issue?

Previously use Y option in the script - Press (Y) for removing Defender and Security Components (old method, breaking Windows Updates/UWP in some version of Windows, removes files and unregisters classes) As that was the only way to disable Defender..

Now after trying to enable it using R option - Press (R) for enabling Defender and Security Components (restore actions where N is pressed) It doesn't enable anymore anything. And it seems Defender is permanently removed, the only way to repair 0x6D9 error seems to be a clean install of Windows or an in-place upgrade.

I've tried sfc/ scannow and DISM component repair without any success. I also used Tweaking.com tool to repair Windows Firewall, of course without any success.

Expected behavior (if you have any solution write here.)

It shouldn't have disabled Windows Defender Firewall with Advanced Security permanently since many .msi installers depend on it to add firewall rules.

For example this .MSI log file shows it.

ExecFirewallExceptions:  Entering ExecFirewallExceptions in C:\WINDOWS\Installer\MSIC1B2.tmp, version 3.11.4516.0
ExecFirewallExceptions:  Installing firewall exception2 Cloudflare WARP (C:\Program Files\Cloudflare\Cloudflare WARP\warp-svc.exe)
ExecFirewallExceptions:  Error 0x800706d9: failed trying to find existing app
ExecFirewallExceptions:  Error 0x800706d9: failed to add/update application exception for name 'Cloudflare WARP', file 'C:\Program Files\Cloudflare\Cloudflare WARP\warp-svc.exe'
CustomAction WixExecFirewallExceptionsInstall returned actual error code 1603 (note this may not be 100% accurate if translation happened inside sandbox)
Action ended 3:56:22: InstallFinalize. Return value 3.
ExecFirewallExceptions:  Entering ExecFirewallExceptions in C:\WINDOWS\Installer\MSIC1E2.tmp, version 3.11.4516.0
ExecFirewallExceptions:  Uninstalling firewall exception2 Cloudflare WARP (C:\Program Files\Cloudflare\Cloudflare WARP\warp-svc.exe)
ExecFirewallExceptions:  Error 0x800706d9: failed to remove authorized app
ExecFirewallExceptions:  Error 0x800706d9: failed to remove application exception for name 'Cloudflare WARP', file 'C:\Program Files\Cloudflare\Cloudflare WARP\warp-svc.exe'
CustomAction WixRollbackFirewallExceptionsInstall returned actual error code 1603 but will be translated to success due to continue marking
Info 1903.Scheduling reboot operation: Deleting file C:\Program Files\Cloudflare\Cloudflare WARP\TBDC1F2.tmp. Must reboot to complete operation.
Action ended 3:56:22: INSTALL. Return value 3.
MSI (s) (C0:8C) [03:56:22:212]: Product: Cloudflare WARP -- Installation failed.

MSI (s) (C0:8C) [03:56:22:213]: Windows Installer installed the product. Product Name: Cloudflare WARP. Product Version: 24.1.7.1. Product Language: 1033. Manufacturer: Cloudflare, Inc.. Installation success or error status: 1603.
ionuttbara commented 8 months ago

noted. a fix is coming

ionuttbara commented 8 months ago

fixed in 12.6.9