Netsh int ip reset says access denied

Resetting the TCP/IP stack can be a useful way to clear any issues that might be preventing your computer from accessing the Internet or network. In Windows, there are lots of things that could screw up a systems TCP/IP stack and lead to connectivity issues. This is because Microsoft Windows stores most network information including the TCP/IP stack details in the registry and there are lots of ways for third party applications to modify this information.

Luckily Microsoft also implemented a way to reset the TCP/IP stack back to defaults which can clear up a variety of issues. The command to clear and reset the TCP/IP stack (on Windows XP, 7, 8 and 10) is:

netsh int ip reset c:\resetlog.txt

The command must be run in an elevated command prompt windows (WIN+X) and it can be destructive in terms of IPv4 info set on an adapter, so…like don’t run it remotely on a server with a static IP.

But I digress. The issue I’m really getting to is related to Homegroup membership and the Windows 10 upgrade. I found that if you’re upgrading from Windows 7 to Windows 10 and the original system you’re upgrading was joined to a homegroup, then the upgraded system might have issues with the TCP/IP stack (I.e. obtaining an IP address via DHCP).

[the problem]

I spent hours troubleshooting this on several freshly upgraded systems running Windows 10 that couldn’t connect to the network because they couldn’t obtain an IP from the DHCP server. All machines exhibited the same issue and all machines were previously joined to a homegroup (not a domain). Here are the symptoms:

  1. The system is upgraded from Windows 7 to Windows 10 build 1511 and works as expected but cannot obtain an IP address via Ethernet or Wi-Fi.
  2. The system works normally if a static IP is assigned.
  3. Resetting the TCP/IP stack results in the following information:
    netsh int ipv4 reset
    Resetting interface, OK!
    Resetting Unicast Address, OK!
    Resetting Neighbor, OK!
    Resetting Path, OK!
    Resetting , failed.
    Access is denied.Resetting , OK!
    Restart the computer to complete this action

[the solution]

In essence having had the systems joined to a homegroup somehow messed up the TCP/IP stack in windows 10 after the upgrade to the point that the system cannot obtain an IP address from DHCP. Here’s how to fix the issue:

  1. Open Regedit.
  2. Navigate to HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Nsi and expand that folder.
  3. Expand the subfolder named {eb004a00-9b1a-11d4-9123-0050047759bc} and right-click the subfolder named 26. Select Permissions… and ensure that for Everyone the Full Control box is checked.
  4. change_network_key_permission_registry_editor
  5. Press WIN+X to open a command prompt with elevated permissions. Type netsh int ip reset and hit enter. Now you should see the following results:
    Resetting , OK!Restart the computer to complete this action
  6. Reboot the system.

That’s it.

Comments

24 responses to “Netsh int ip reset says access denied”

  1. CB Avatar
    CB

    Thanks for this post. Do you know where I need to change permissions to get this command to work?:

    netsh Int ipv6 reset reset.log

    I have made your change in the folder 26 but I still get the access denied error. I am trying to fix a problem of all browsers crashing in W10.

  2. Johnny Lai Avatar
    Johnny Lai

    Hi David,
    I have tried to set permission on subfolder 26, but everytime i restart my pc it removes the tick in ‘full control’. Do you know why this happens?
    Btw. How do you know it is the subfolder named 26 that should have full control?
    Regards,
    Johnny Lai

    1. Wyatt Avatar
      Wyatt

      Having the same problem. Very frustrating. The solution works, but I must go through the entire process each time.

      1. SW Avatar
        SW

        I have one user who has had the folder reset permissions again too. Very odd.

    2. Klerp Avatar
      Klerp

      I am having the same problem, have you figured a solution?

  3. JJ Avatar
    JJ

    Thanks!

  4. Amit Avatar
    Amit

    Thank u

  5. Not require Avatar
    Not require

    iT works. thanx

  6. RJB Avatar
    RJB

    I have multiple instances of {eb004a00-9b1a-11d4-9123-0050047759bc}, none of which have the same entries, but several have a “26” in them.

    1. lar Avatar
      lar

      try removing the shades before editing your registry.
      8o)
      ok, i also had to look twice…

  7. Thank yoj Avatar
    Thank yoj

    YOU’RE GREAT MAN.

  8. Geir Sten Avatar
    Geir Sten

    Tnx David. Exactly what I needed!

  9. Melissa Avatar
    Melissa

    I have been looking for this solution for what seems like forever. You Rock! Thank-you!

  10. Jesse Olejnicak Avatar
    Jesse Olejnicak

    I want to thank you for finding this out. For one reason or another my computer has this issue a few times a year. This has saved me tons of hassle. I humbly thank you and may you always find a clean pair of socks when you need them most.

  11. Michael Linder Avatar

    I, too, have executed your permissions changes as an administrator (which seem to hold after a reboot, in my case) and added myself with full permissions just for luck but without success. Of course, it would help if Microsoft identified the part of this apparent multi-action process is resisting a full reset.

    Any new clues?

    PS C:\Windows\system32> netsh int ip reset c:\resetlog.txt
    Resetting Compartment Forwarding, OK!
    Resetting Compartment, OK!
    Resetting Control Protocol, OK!
    Resetting Echo Sequence Request, OK!
    Resetting Global, OK!
    Resetting Interface, OK!
    Resetting Anycast Address, OK!
    Resetting Multicast Address, OK!
    Resetting Unicast Address, OK!
    Resetting Neighbor, OK!
    Resetting Path, OK!
    Resetting Potential, OK!
    Resetting Prefix Policy, OK!
    Resetting Proxy Neighbor, OK!
    Resetting Route, OK!
    Resetting Site Prefix, OK!
    Resetting Subinterface, OK!
    Resetting Wakeup Pattern, OK!
    Resetting Resolve Neighbor, OK!
    Resetting , OK!
    Resetting , OK!
    Resetting , OK!
    Resetting , OK!
    Resetting , failed.
    Access is denied.
    Resetting , OK!
    Resetting , OK!
    Resetting , OK!
    Resetting , OK!
    Resetting , OK!
    Resetting , OK!
    Resetting , OK!
    Restart the computer to complete this action.

  12. Adela Avatar
    Adela

    It work. Highly appreciated. May you find a happy moment in each day 🙂

  13. Ade Avatar
    Ade

    You are awesome !! Thank you. This was driving me crazy!!

  14. Adi Avatar
    Adi

    I have many sub folder with same name, but none has no. 26

  15. Yani Avatar
    Yani

    It works for me. Thank you!!

  16. Aidan Avatar
    Aidan

    For Ipv6 it’s: HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Nsi\{eb004a01-9b1a-11d4-9123-0050047759bc}\26

    Alternatively, use Process Monitor and filter on “ACCESS DENIED” results for RegOpenKey events with Process Name “netsh.exe”. This will show you the reg key that it can’t open.

    1. Jupp Avatar
      Jupp

      Thanks for the ipv6 solution.

  17. sumit.k Avatar
    sumit.k

    i am not getting 26 folder after giving it full permission

  18. Sully Avatar
    Sully

    This mostly fix’s my problem so I give permission to the folder and try the code again on cmd and it works and tells me to restart after restart I’m back at square one is there is a solution for this too?

  19. Dana Avatar
    Dana

    How do I do the same for ipv6 instead of ipv4?