I’m trying Net Firewall (trial version) on a windows 2000 advanced server sp4 but NTKernelService doesn’t start as service automaticaly. When I start it manually I receive the following message:
Could not Start NTKernelService service on Local Computer. The service did not return an error. This could be an internal Windows error or an internal service error
And in the Event viewer I find this message
The description for Event ID ( 0 ) in Source ( NTKernelService ) cannot be found. The local computer may not have the necessary registry information or message DLL files to display messages from a remote computer. The following information is part of the event: Service started.
NTKernelService stats dirung system start up, load latest firewall configuration into the driver and exits. So the situation you have expirienced is normal, this service should not be running, all the packet filtering functionality implemented in the kernel mode driver. Service is only responsible for configuring it.