The AD FS Web Agent Authentication Service validates incoming authentication requests. Users are either allowed or denied access to web applications based on their security token and the permissions on the application. Fix: (1) GPO: Computer Configuration\Windows Settings\Security Settings\System Services!AD FS Web Agent Authentication Service (2) REG: HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\ifssvc!Start