Answered by:
Windows 7 Not Genuine, Error Code 0x80070005

Question
-
I've been running the Windows 7 Home Premium Upgrade for about a year on a 4 year old PC that originally had VISTA Home Premium OEM installed. Both OSs were purchased from legitmate retail sources, and were previously activated and validated. Two days ago, Windows Update installed 22 updates. After the updates, I started receiving notifications that my copy of Windows was not Genuine. Windows Activation indicates I need to "Activate Today" - but attempting to activate fails because it believes Windows isn't Genuine. I have tried to reactivate Windows by changing (reentering) the Product Key, but I get a 0x80070005 Error Code - Access is denied. I've not installed any other software recently or changed any service permissions or other computer settings, and scans with both Norton AV and Malwarebytes are negative. This is a stand alone PC that does not have any GPO applied to it that would interfer with validation permissions. As a side note, also following the updates, MS Word continued to work, but Excel will not launch because it inidicates it can't validate the Office license. I've "repaired" MS Office, but haven't been able to reboot my PC to determine if that helped because I'm in the middle of wiping a large non-system data hard drive that has to be returned due to a Smart event.
Here is a copy of theMGADiagToolOutput results. Any suggestions? Thanks.
Diagnostic Report (1.9.0027.0):
-----------------------------------------
Windows Validation Data-->Validation Code: 50
Cached Online Validation Code: 0x0
Windows Product Key: *****-*****-DMK78-78DC8-DFVH2
Windows Product Key Hash: hmApyGt6FzvBwoHvafO/0fDsS9s=
Windows Product ID: 00359-031-2055673-85594
Windows Product ID Type: 5
Windows License Type: Retail
Windows OS version: 6.1.7601.2.00010300.1.0.003
ID: {AAFB9CD5-BE8D-4FDC-B096-A8363B333DB5}(1)
Is Admin: Yes
TestCab: 0x0
LegitcheckControl ActiveX: Registered, 1.9.42.0
Signed By: Microsoft
Product Name: Windows 7 Home Premium
Architecture: 0x00000000
Build lab: 7601.win7sp1_gdr.111025-1505
TTS Error:
Validation Diagnostic:
Resolution Status: N/AVista WgaER Data-->
ThreatID(s): N/A, hr = 0x80070002
Version: N/A, hr = 0x80070002Windows XP Notifications Data-->
Cached Result: N/A, hr = 0x80070002
File Exists: No
Version: N/A, hr = 0x80070002
WgaTray.exe Signed By: N/A, hr = 0x80070002
WgaLogon.dll Signed By: N/A, hr = 0x80070002OGA Notifications Data-->
Cached Result: N/A, hr = 0x80070002
Version: 2.0.48.0
OGAExec.exe Signed By: Microsoft
OGAAddin.dll Signed By: MicrosoftOGA Data-->
Office Status: 100 Genuine
Microsoft Office Professional Edition 2003 - 100 Genuine
OGA Version: Registered, 2.0.48.0
Signed By: Microsoft
Office Diagnostics: B4D0AA8B-604-645_025D1FF3-364-80041010_025D1FF3-229-80041010_025D1FF3-230-1_025D1FF3-517-80040154_025D1FF3-237-80040154_025D1FF3-238-2_025D1FF3-244-80070002_025D1FF3-258-3_3E121E02-409-80004005_3E121E02-300-80004005_E2AD56EA-765-d003_E2AD56EA-766-0_E2AD56EA-134-80004005_E2AD56EA-765-7001_E2AD56EA-766-0_E2AD56EA-148-80004005_16E0B333-89-80004005_B4D0AA8B-1029-80004005Browser Data-->
Proxy settings: N/A
User Agent: Mozilla/4.0 (compatible; MSIE 8.0; Win32)
Default Browser: C:\Program Files\Internet Explorer\IEXPLORE.exe
Download signed ActiveX controls: Prompt
Download unsigned ActiveX controls: Disabled
Run ActiveX controls and plug-ins: Allowed
Initialize and script ActiveX controls not marked as safe: Disabled
Allow scripting of Internet Explorer Webbrowser control: Disabled
Active scripting: Allowed
Script ActiveX controls marked as safe for scripting: AllowedFile Scan Data-->
Other data-->
Office Details: <GenuineResults><MachineData><UGUID>{AAFB9CD5-BE8D-4FDC-B096-A8363B333DB5}</UGUID><Version>1.9.0027.0</Version><OS>6.1.7601.2.00010300.1.0.003</OS><Architecture>x32</Architecture><PKey>*****-*****-*****-*****-DFVH2</PKey><PID>00359-031-2055673-85594</PID><PIDType>5</PIDType><SID>S-1-5-21-3536316961-4079337705-1121685352</SID><SYSTEM><Manufacturer>OEM</Manufacturer><Model>OEM</Model></SYSTEM><BIOS><Manufacturer>Phoenix Technologies, LTD</Manufacturer><Version>6.00 PG</Version><SMBIOSVersion major="2" minor="5"/><Date>20070709000000.000000+000</Date></BIOS><HWID>10E13907018400FA</HWID><UserLCID>0409</UserLCID><SystemLCID>0409</SystemLCID><TimeZone>Central Standard Time(GMT-06:00)</TimeZone><iJoin>0</iJoin><SBID><stat>3</stat><msppid></msppid><name></name><model></model></SBID><OEM/><GANotification><File Name="OGAAddin.dll" Version="2.0.48.0"/></GANotification></MachineData><Software><Office><Result>100</Result><Products><Product GUID="{91E30409-6000-11D3-8CFE-0150048383C9}"><LegitResult>100</LegitResult><Name>Microsoft Office Professional Edition 2003</Name><Ver>11</Ver><Val>8E5722A38BBB5D4</Val><Hash>rGUbJ0QZFI8HO1mxQ3g/OzTxl1Q=</Hash><Pid>73931-746-5372551-57157</Pid><PidType>1</PidType></Product></Products><Applications><App Id="15" Version="11" Result="100"/><App Id="16" Version="11" Result="100"/><App Id="18" Version="11" Result="100"/><App Id="19" Version="11" Result="100"/><App Id="1A" Version="11" Result="100"/><App Id="1B" Version="11" Result="100"/><App Id="44" Version="11" Result="100"/><App Id="A1" Version="11" Result="100"/></Applications></Office></Software></GenuineResults>Spsys.log Content: 0x80070002
Licensing Data-->
C:\Windows\system32\slmgr.vbs(1333, 5) Microsoft VBScript runtime error: Permission deniedWindows Activation Technologies-->
HrOffline: 0x00000000
HrOnline: 0x00000000
HealthStatus: 0x0000000000000000
Event Time Stamp: 11:28:2011 04:54
ActiveX: Registered, Version: 7.1.7600.16395
Admin Service: Registered, Version: 7.1.7600.16395
HealthStatus Bitmask Output:
HWID Data-->
N/A, hr = 0x80070005OEM Activation 1.0 Data-->
N/AOEM Activation 2.0 Data-->
BIOS valid for OA 2.0: yes, but no SLIC table
Windows marker version: N/A
OEMID and OEMTableID Consistent: N/A
BIOS Information:
ACPI Table Name OEMID Value OEMTableID Value
APIC IntelR AWRDACPI
FACP IntelR AWRDACPI
MCFG IntelR AWRDACPI
SSDT PmRef CpuPmWednesday, December 21, 2011 7:26 AM
Answers
-
Noel,
Well . . . here's one that will leave you scratching your head. Before running any of the tests I mentioned above, I shut everything down, shut off the PC, removed the defective hard drive I had wiped and reformatted (1 of 2 discs in a Raid 1 data-only array that was reporting a SMART event) and then rebooted into Windows.
Once I booted into Windows, I checked and Windows now shows as activated, and I am able to pass the validation test on the Microsoft website. Hopefully this was just an isolated incident somehow related either to the disk wiping process I as doing, or (since this was the first chance I had to reboot the PC since the updates) perhaps the reboot "fixed" something that didn't install correctly the first time from the updates and eliminated whatever was causing the interference. In any event (knock on wood), it looks like I'm back in business. I'll mark this as answered, and hopefully the problem won't surface again and require a trip back to this forum.
Again, thanks for the suggestions and assistance!
- Marked as answer by STL2040F Thursday, December 22, 2011 4:50 AM
Thursday, December 22, 2011 4:49 AM
All replies
-
"STL2040F" wrote in message news:06ed4eb0-d3fe-4b8b-8de1-843c6286af70...
I've been running the Windows 7 Home Premium Upgrade for about a year on a 4 year old PC that originally had VISTA Home Premium OEM installed. Both OSs were purchased from legitmate retail sources, and were previously activated and validated. Two days ago, Windows Update installed 22 updates. After the updates, I started receiving notifications that my copy of Windows was not Genuine. Windows Activation indicates I need to "Activate Today" - but attempting to activate fails because it believes Windows isn't Genuine. I have tried to reactivate Windows by changing (reentering) the Product Key, but I get a 0x80070005 Error Code - Access is denied. I've not installed any other software recently or changed any service permissions or other computer settings, and scans with both Norton AV and Malwarebytes are negative. This is a stand alone PC that does not have any GPO applied to it that would interfer with validation permissions. As a side note, also following the updates, MS Word continued to work, but Excel will not launch because it inidicates it can't validate the Office license. I've "repaired" MS Office, but haven't been able to reboot my PC to determine if that helped because I'm in the middle of wiping a large non-system data hard drive that has to be returned due to a Smart event.
Here is a copy of theMGADiagToolOutput results. Any suggestions? Thanks.
Diagnostic Report (1.9.0027.0):
-----------------------------------------
Windows Validation Data-->Validation Code: 50
Cached Online Validation Code: 0x0
Windows Product Key: *****-*****-DMK78-78DC8-DFVH2
Windows Product Key Hash: hmApyGt6FzvBwoHvafO/0fDsS9s=
Windows Product ID: 00359-031-2055673-85594
Windows Product ID Type: 5
Windows License Type: Retail
Windows OS version: 6.1.7601.2.00010300.1.0.003
Licensing Data-->
C:\Windows\system32\slmgr.vbs(1333, 5) Microsoft VBScript runtime error: Permission deniedUnfortunately, we’ve not had much success with curing this particular problem – but see if you can associate with the problem as defined here.Have you been using any king of Registry Cleaner? If so, then see if you can UNDO the damage it’s done, either from the program itself, or by using System Restore.
Noel Paton | Nil Carborundum Illegitemi | CrashFixPC | The Three-toed SlothWednesday, December 21, 2011 8:28 AMModerator -
Noel,
Thanks. I had reviewed the link you provided before I posted. I don't have any GPOs applied, and in HKU/S-1-5-20, NETWORK SERVICE has both Full Control and Read permissions checked, as it should. I'm not missing any of the registry keys specified in HKLM, and all of the values in those keys look correct, except for the ProfileImagePath value (the Microsoft support article references a series of HEX values, and my registry values are path locations on the C drive). I didn't want to mess with replacing registry key values (or try anything that would require a system reboot) while I was in the process of wiping my data hard drive, but that process will be complete soon, so when it's done, I'll experiment with changing the ProfileImagePath values (and possibly a Windows repair and/or system restore) and see if there is any difference and report back later.
I don't use any registry cleaners. I suspect something happened as a result of all of the Windows security updates and patches I just applied. They all indicate they were installed successfully, but 22 is a large number to apply in one shot, and something might have gotten messed up. I shut down my PC and let Windows automatically install the updates without checking to see how many there were, so by the time I realized there were so many, it was too late to split them up.
Wednesday, December 21, 2011 2:40 PM -
"STL2040F" wrote in message news:a9e9e9fb-f006-4b30-8c8b-cc9e10717224...
Noel,
Thanks. I had reviewed the link you provided before I posted. I don't have any GPOs applied, and in HKU/S-1-5-20, NETWORK SERVICE has both Full Control and Read permissions checked, as it should. I'm not missing any of the registry keys specified in HKLM, and all of the values in those keys look correct, except for the ProfileImagePath value (the Microsoft support article references a series of HEX values, and my registry values are path locations on the C drive). I didn't want to mess with replacing registry key values (or try anything that would require a system reboot) while I was in the process of wiping my data hard drive, but that process will be complete soon, so when it's done, I'll experiment with changing the ProfileImagePath values (and possibly a Windows repair and/or system restore) and see if there is any difference and report back later.
I don't use any registry cleaners. I suspect something happened as a result of all of the Windows security updates and patches I just applied. They all indicate they were installed successfully, but 22 is a large number to apply in one shot, and something might have gotten messed up. I shut down my PC and let Windows automatically install the updates without checking to see how many there were, so by the time I realized there were so many, it was too late to split them up.
(I’ve done all 90+ at one fell swoop before without a problem, but.....)I had an interesting result on a PC this morning with an 80070005 error – it turned out that a registry error had been causing problems with all sorts of things.....please open regedit, and look for theHKEY_USERS\S-1-5-21-2025428036-2626030595-3146414242-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\User Shell FoldersKey -check the Data for the AppData value – it should read%USERPROFILE%\AppData\Roamingif it reads anything else, then modify it to the above.(on that machine it read ‘C:\Users\<username>\Application Data’ instead)
Noel Paton | Nil Carborundum Illegitemi | CrashFixPC | The Three-toed SlothWednesday, December 21, 2011 3:15 PMModerator -
Noel,
Thanks. My HKEY_USERS\S-1-5-21 key has a different series of following numbers in the name from what you quote above, but the AppData value in the User Shell Folders in the comparable path you indicate has the value you say it should, i.e.
%USERPROFILE%\AppData\Roaming
I'm going to try a repair and if that doesn't help, I'm going to try replacing the ProfileImagePath values in the "missing keys" section in accordance with http://support.microsoft..com/kb/2008385
FYI - below are the values the support article instructs to merge into the registry. In all three, it specifies a binary hex number for the ProfileImagePath. My values are not binary, but "Expand_SZ" and the key values I will replace are indicated in red below. I'll report back if this makes any difference. If neither of these two things do the trick, I have to go out of town tomorrow, so I'll set this aside and deal with it next week when I get back in town.
Thanks for the help and suggestions.
________________________________________________-
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\ProfileList\S-1-5-18]
"Flags"=dword:0000000c
"State"=dword:00000000
"RefCount"=dword:00000001
"Sid"=hex:01,01,00,00,00,00,00,05,12,00,00,00
"ProfileImagePath"=hex(2):25,00,73,00,79,00,73,00,74,00,65,00,6d,00,72,00,6f,\
00,6f,00,74,00,25,00,5c,00,73,00,79,00,73,00,74,00,65,00,6d,00,33,00,32,00,\
5c,00,63,00,6f,00,6e,00,66,00,69,00,67,00,5c,00,73,00,79,00,73,00,74,00,65,\
00,6d,00,70,00,72,00,6f,00,66,00,69,00,6c,00,65,00,00,00 (REG_EXPAND_SZ %systemroot%\system32\config\systemprofile)[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\ProfileList\S-1-5-19]
"ProfileImagePath"=hex(2):43,00,3a,00,5c,00,57,00,69,00,6e,00,64,00,6f,00,77,\
00,73,00,5c,00,53,00,65,00,72,00,76,00,69,00,63,00,65,00,50,00,72,00,6f,00,\
66,00,69,00,6c,00,65,00,73,00,5c,00,4c,00,6f,00,63,00,61,00,6c,00,53,00,65,\
00,72,00,76,00,69,00,63,00,65,00,00,00 (REG_EXPAND_SZ C:\Windows\ServiceProfiles\LocalService)
"Flags"=dword:00000000
"State"=dword:00000000[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\ProfileList\S-1-5-20]
"ProfileImagePath"=hex(2):43,00,3a,00,5c,00,57,00,69,00,6e,00,64,00,6f,00,77,\
00,73,00,5c,00,53,00,65,00,72,00,76,00,69,00,63,00,65,00,50,00,72,00,6f,00,\
66,00,69,00,6c,00,65,00,73,00,5c,00,4e,00,65,00,74,00,77,00,6f,00,72,00,6b,\
00,53,00,65,00,72,00,76,00,69,00,63,00,65,00,00,00 (REG_EXPAND_SZ C:\Windows\ServiceProfiles\NetworkService)
"Flags"=dword:00000000
"State"=dword:00000000Thursday, December 22, 2011 3:42 AM -
Noel,
Well . . . here's one that will leave you scratching your head. Before running any of the tests I mentioned above, I shut everything down, shut off the PC, removed the defective hard drive I had wiped and reformatted (1 of 2 discs in a Raid 1 data-only array that was reporting a SMART event) and then rebooted into Windows.
Once I booted into Windows, I checked and Windows now shows as activated, and I am able to pass the validation test on the Microsoft website. Hopefully this was just an isolated incident somehow related either to the disk wiping process I as doing, or (since this was the first chance I had to reboot the PC since the updates) perhaps the reboot "fixed" something that didn't install correctly the first time from the updates and eliminated whatever was causing the interference. In any event (knock on wood), it looks like I'm back in business. I'll mark this as answered, and hopefully the problem won't surface again and require a trip back to this forum.
Again, thanks for the suggestions and assistance!
- Marked as answer by STL2040F Thursday, December 22, 2011 4:50 AM
Thursday, December 22, 2011 4:49 AM -
"STL2040F" wrote in message news:577035e0-9666-4ea8-8ee9-b90d943bc8eb...
Noel,
Well . . . here's one that will leave you scratching your head. Before running any of the tests I mentioned above, I shut everything down, shut off the PC, removed the defective hard drive I had wiped and reformatted (1 of 2 discs in a Raid 1 data-only array that was reporting a SMART event) and then rebooted into Windows.
Once I booted into Windows, I checked and Windows now shows as activated, and I am able to pass the validation test on the Microsoft website. Hopefully this was just an isolated incident somehow related either to the disk wiping process I as doing, or (since this was the first chance I had to reboot the PC since the updates) perhaps the reboot "fixed" something that didn't install correctly the first time from the updates and eliminated whatever was causing the interference. In any event (knock on wood), it looks like I'm back in business. I'll mark this as answered, and hopefully the problem won't surface again and require a trip back to this forum.
Again, thanks for the suggestions and assistance!
That is positively weird!Thanks for letting us know.Good Luck
Noel Paton | Nil Carborundum Illegitemi | CrashFixPC | The Three-toed SlothThursday, December 22, 2011 7:41 AMModerator