locked
Windows 7 Activated but continually shows not genuine RRS feed

  • Question

  • I have ~60 Windows 7 machines I am trying to roll out.  All were purchased from Dell and are completely legit...

    The status shows activated.  However, within a day or two, I get the small text, bottom right, that Windows is not Genuine.  Sometimes it also brings up a splash screen..

    I am really busy, and dealing with the annoyance is getting very old....we are not counterfeiters, have stolen nothing, and just want to use the software we paid for...tired of users asking if I've stolen software?

    Here's an mcdiag report, if anyone can help.  Thanks..

     

    Diagnostic Report (1.9.0027.0):

    -----------------------------------------

    Windows Validation Data-->

     

    Validation Code: 0

    Cached Online Validation Code: 0x0

    Windows Product Key: *****-*****-M3DJT-4J3WC-733WD

    Windows Product Key Hash: xo+ajVSpae7/4VoZjS7m6JL0f3A=

    Windows Product ID: 00371-OEM-8992671-00524

    Windows Product ID Type: 2

    Windows License Type: OEM SLP

    Windows OS version: 6.1.7601.2.00010100.1.0.048

    ID: {EE2E0061-1782-4BFD-A1B1-802DF5263F95}(3)

    Is Admin: Yes

    TestCab: 0x0

    LegitcheckControl ActiveX: Registered, 1.9.42.0

    Signed By: Microsoft

    Product Name: Windows 7 Professional

    Architecture: 0x00000000

    Build lab: 7601.win7sp1_gdr.110622-1506

    TTS Error: 

    Validation Diagnostic: 

    Resolution Status: N/A

     

    Vista WgaER Data-->

    ThreatID(s): N/A, hr = 0x80070002

    Version: N/A, hr = 0x80070002

     

    Windows XP Notifications Data-->

    Cached Result: N/A, hr = 0x80070002

    File Exists: No

    Version: N/A, hr = 0x80070002

    WgaTray.exe Signed By: N/A, hr = 0x80070002

    WgaLogon.dll Signed By: N/A, hr = 0x80070002

     

    OGA Notifications Data-->

    Cached Result: N/A, hr = 0x80070002

    Version: N/A, hr = 0x80070002

    OGAExec.exe Signed By: N/A, hr = 0x80070002

    OGAAddin.dll Signed By: N/A, hr = 0x80070002

     

    OGA Data-->

    Office Status: 100 Genuine

    Microsoft Office Professional Plus 2007 - 100 Genuine

    OGA Version: N/A, 0x80070002

    Signed By: N/A, hr = 0x80070002

    Office Diagnostics: 025D1FF3-364-80041010_025D1FF3-229-80041010_025D1FF3-230-1_025D1FF3-517-80040154_025D1FF3-237-80040154_025D1FF3-238-2_025D1FF3-244-80070002_025D1FF3-258-3_E2AD56EA-765-d003_E2AD56EA-766-0_E2AD56EA-134-80004005

     

    Browser Data-->

    Proxy settings: N/A

    User Agent: Mozilla/4.0 (compatible; MSIE 8.0; Win32)

    Default Browser: C:\Program Files\Internet Explorer\iexplore.exe

    Download signed ActiveX controls: Prompt

    Download unsigned ActiveX controls: Disabled

    Run ActiveX controls and plug-ins: Allowed

    Initialize and script ActiveX controls not marked as safe: Disabled

    Allow scripting of Internet Explorer Webbrowser control: Disabled

    Active scripting: Allowed

    Script ActiveX controls marked as safe for scripting: Allowed

     

    File Scan Data-->

     

    Other data-->

    Office Details: <GenuineResults><MachineData><UGUID>{EE2E0061-1782-4BFD-A1B1-802DF5263F95}</UGUID><Version>1.9.0027.0</Version><OS>6.1.7601.2.00010100.1.0.048</OS><Architecture>x32</Architecture><PKey>*****-*****-*****-*****-733WD</PKey><PID>00371-OEM-8992671-00524</PID><PIDType>2</PIDType><SID>S-1-5-21-3980903740-3493495384-949081153</SID><SYSTEM><Manufacturer>Dell Inc.</Manufacturer><Model>OptiPlex 380                 </Model></SYSTEM><BIOS><Manufacturer>Dell Inc.</Manufacturer><Version>A02</Version><SMBIOSVersion major="2" minor="5"/><Date>20100827000000.000000+000</Date></BIOS><HWID>87F23207018400F8</HWID><UserLCID>0409</UserLCID><SystemLCID>0409</SystemLCID><TimeZone>Eastern Standard Time(GMT-05:00)</TimeZone><iJoin>0</iJoin><SBID><stat>3</stat><msppid></msppid><name></name><model></model></SBID><OEM><OEMID>DELL  </OEMID><OEMTableID>B10K   </OEMTableID></OEM><GANotification/></MachineData><Software><Office><Result>100</Result><Products><Product GUID="{90120000-0011-0000-0000-0000000FF1CE}"><LegitResult>100</LegitResult><Name>Microsoft Office Professional Plus 2007</Name><Ver>12</Ver><Val>77A7820368FFD88</Val><Hash>JjzdMRem4VYmVap6rs5VX2DPO5Q=</Hash><Pid>89409-708-8548541-65127</Pid><PidType>14</PidType></Product></Products><Applications><App Id="15" Version="12" Result="100"/><App Id="16" Version="12" Result="100"/><App Id="18" Version="12" Result="100"/><App Id="19" Version="12" Result="100"/><App Id="1A" Version="12" Result="100"/><App Id="1B" Version="12" Result="100"/><App Id="44" Version="12" Result="100"/></Applications></Office></Software></GenuineResults>  

     

    Spsys.log Content: 0x80070002

     

    Licensing Data-->

    Software licensing service version: 6.1.7601.17514

     

    Name: Windows(R) 7, Professional edition

    Description: Windows Operating System - Windows(R) 7, OEM_SLP channel

    Activation ID: 50e329f7-a5fa-46b2-85fd-f224e5da7764

    Application ID: 55c92734-d682-4d71-983e-d6ec3f16059f

    Extended PID: 00371-00178-926-700524-02-1033-7600.0000-3632010

    Installation ID: 014604924003501342722160880740239944563054941581631262

    Processor Certificate URL: http://go.microsoft.com/fwlink/?LinkID=88338

    Machine Certificate URL: http://go.microsoft.com/fwlink/?LinkID=88339

    Use License URL: http://go.microsoft.com/fwlink/?LinkID=88341

    Product Key Certificate URL: http://go.microsoft.com/fwlink/?LinkID=88340

    Partial Product Key: 733WD

    License Status: Licensed

    Remaining Windows rearm count: 4

    Trusted time: 9/7/2011 1:47:49 PM

     

    Windows Activation Technologies-->

    HrOffline: 0x00000000

    HrOnline: 0x00000000

    HealthStatus: 0x0000000000000000

    Event Time Stamp: 9:6:2011 09:13

    ActiveX: Registered, Version: 7.1.7600.16395

    Admin Service: Registered, Version: 7.1.7600.16395

    HealthStatus Bitmask Output:

     

     

    HWID Data-->

    HWID Hash Current: MAAAAAEAAwABAAIAAAABAAAAAQABAAEA6GG4V/DpPnaqdsrnrgqkC6wrsrQeVUbK

     

    OEM Activation 1.0 Data-->

    N/A

     

    OEM Activation 2.0 Data-->

    BIOS valid for OA 2.0: yes

    Windows marker version: 0x20001

    OEMID and OEMTableID Consistent: yes

    BIOS Information: 

      ACPI Table Name OEMID Value OEMTableID Value

      APIC DELL   B10K   

      FACP DELL   B10K   

      HPET DELL   B10K   

      BOOT DELL   B10K   

      MCFG DELL   B10K   

      SSDT DELL st_ex

      TCPA DELL   B10K   

      ____ DELL   B10K   

      SLIC DELL   B10K   

      SSDT DELL st_ex

      SSDT DELL st_ex

      SSDT DELL st_ex

    Wednesday, September 7, 2011 5:56 PM

Answers

  • "pkonshak" wrote in message news:ace3ae2e-ef7c-4d37-b8c7-3e57bd8a91a6...

    I don't seen any evidence that SPPSVC is being blocked, but I added an exception for it in the 3rd party tool to make sure it isn't stopping it.  I'll give it some time and see what happens.

    We were big fans of Steady State, which could be used to lock down public access pc's to keep them from being trashed.  Worked like a dream.  Unfortunately it's not available for Win7, so we've had to turn to 3rd party programs to provide the same sort of security.

    It’s possible to lock Win7 down quite severely  - more so than Vista, I believe – and there are options in Parental Controls to restrict things. I had no experience with Steady State, but I know that many found it useful. I was surprised myself when it wasn’t included by default in at least some editions of Win7.
    Just in case there’s something else interfering, it may be useful for you to compare your service settings with the ‘norms’.... http://www.blackviper.com/2010/12/17/black-vipers-windows-7-service-pack-1-service-configurations/#more-2975
     
     

    Noel Paton | Nil Carborundum Illegitemi | CrashFixPC | The Three-toed Sloth
    • Proposed as answer by Darin Smith MS Wednesday, September 7, 2011 10:35 PM
    • Marked as answer by Darin Smith MS Monday, September 12, 2011 10:26 PM
    Wednesday, September 7, 2011 7:47 PM
    Moderator

All replies

  • "pkonshak" wrote in message news:1b5679c3-f738-4b4b-89d6-6e73991618bc...

    I have ~60 Windows 7 machines I am trying to roll out.  All were purchased from Dell and are completely legit...

    The status shows activated.  However, within a day or two, I get the small text, bottom right, that Windows is not Genuine.  Sometimes it also brings up a splash screen..

    I am really busy, and dealing with the annoyance is getting very old....we are not counterfeiters, have stolen nothing, and just want to use the software we paid for...tired of users asking if I've stolen software?

    Here's an mcdiag report, if anyone can help.  Thanks..

     

    Diagnostic Report (1.9.0027.0):

    -----------------------------------------

    Windows Validation Data-->

     

    Validation Code: 0

    Cached Online Validation Code: 0x0

    Windows Product Key: *****-*****-M3DJT-4J3WC-733WD

    Windows Product Key Hash: xo+ajVSpae7/4VoZjS7m6JL0f3A=

    Windows Product ID: 00371-OEM-8992671-00524

    Windows Product ID Type: 2

    Windows License Type: OEM SLP

    Windows OS version: 6.1.7601.2.00010100.1.0.048

     
     
     
    There appears to be no problem with the report that you showed us – was that from a machine that was showing the problem at the time the report was started?
    Does the non-genuine issue tend to disappear after the machines have been running for a while?
    If so, it may be a race condition caused by something in the build you are using – which is preventing the Software Protection Service properly functioning at boot – What anti-Virus is running on the machine, and what AV has EVER been installed on the image in use? (AV’s seem to be the most likely to cause such race conditions)

    Noel Paton | Nil Carborundum Illegitemi | CrashFixPC | The Three-toed Sloth
    Wednesday, September 7, 2011 6:06 PM
    Moderator
  • Hmmmm...I was getting the error as a restricted user.  I had to log out, log in as admin, download wgadiag before I ran the report.  At this minute, the machine appears fine.

    We are running as restricted users because these machines are in a public environment.....we have a util, fortres 101 installed which "locks" down the machine even further..

    There is no AV other than MS Security Essentials..

    These are, in fact, brand new.  No other AV added.

    What is Software Protection Service?  Perhaps the security app is stopping it.  If I know what process or exe is running, I can make sure is has full rights to everything...

    Wednesday, September 7, 2011 6:16 PM
  • "pkonshak" wrote in message news:cf2b251f-6802-4241-9b4b-de8bdaada38d...

    Hmmmm...I was getting the error as a restricted user.  I had to log out, log in as admin, download wgadiag before I ran the report.  At this minute, the machine appears fine.

    We are running as restricted users because these machines are in a public environment.....we have a util, fortres 101 installed which "locks" down the machine even further..

    There is no AV other than MS Security Essentials..

    These are, in fact, brand new.  No other AV added.

    What is Software Protection Service?  Perhaps the security app is stopping it.  If I know what process or exe is running, I can make sure is has full rights to everything...

    The Software Protection Service (sppsvc.exe) as required by Windows to be able to run at all times – and will certainly cause non-genuine messages if disabled by a GP or other program.
    Are you certain that the original image did not contain a pre-installed AV option (even if never properly installed and/or activated)?

    Noel Paton | Nil Carborundum Illegitemi | CrashFixPC | The Three-toed Sloth
    Wednesday, September 7, 2011 6:33 PM
    Moderator
  • Hi,

    Here's a diag report from one which displayed the not genuine error right as I started the MGADIAG util.  I am logged in as a retricted user.  The not genuine error went away the second  MGADIAG util finished:

     

    Diagnostic Report (1.9.0027.0):

    -----------------------------------------

    Windows Validation Data-->

     

    Validation Code: 0

    Cached Online Validation Code: 0x0

    Windows Product Key: *****-*****-M3DJT-4J3WC-733WD

    Windows Product Key Hash: xo+ajVSpae7/4VoZjS7m6JL0f3A=

    Windows Product ID: 00371-OEM-8992671-00524

    Windows Product ID Type: 2

    Windows License Type: OEM SLP

    Windows OS version: 6.1.7601.2.00010100.1.0.048

    ID: {F7731B4E-1D60-44D4-8462-B0D8FB8A4DA8}(2)

    Is Admin: No

    TestCab: 0x0

    LegitcheckControl ActiveX: Registered, 1.9.42.0

    Signed By: Microsoft

    Product Name: Windows 7 Professional

    Architecture: 0x00000000

    Build lab: 7601.win7sp1_gdr.110622-1506

    TTS Error: 

    Validation Diagnostic: 

    Resolution Status: N/A

     

    Vista WgaER Data-->

    ThreatID(s): N/A, hr = 0x80070002

    Version: N/A, hr = 0x80070002

     

    Windows XP Notifications Data-->

    Cached Result: N/A, hr = 0x80070002

    File Exists: No

    Version: N/A, hr = 0x80070002

    WgaTray.exe Signed By: N/A, hr = 0x80070002

    WgaLogon.dll Signed By: N/A, hr = 0x80070002

     

    OGA Notifications Data-->

    Cached Result: N/A, hr = 0x80070002

    Version: N/A, hr = 0x80070002

    OGAExec.exe Signed By: N/A, hr = 0x80070002

    OGAAddin.dll Signed By: N/A, hr = 0x80070002

     

    OGA Data-->

    Office Status: 100 Genuine

    Microsoft Office Professional Plus 2007 - 100 Genuine

    OGA Version: N/A, 0x80070002

    Signed By: N/A, hr = 0x80070002

    Office Diagnostics: 025D1FF3-364-80041010_025D1FF3-229-80041010_025D1FF3-230-1_025D1FF3-517-80040154_025D1FF3-237-80040154_025D1FF3-238-2_025D1FF3-244-80070002_025D1FF3-258-3_E2AD56EA-765-d003_E2AD56EA-766-0_E2AD56EA-134-80004005

     

    Browser Data-->

    Proxy settings: proxy2.carmel.lib.in.us:3128

    User Agent: Mozilla/4.0 (compatible; MSIE 8.0; Win32)

    Default Browser: C:\Program Files\Internet Explorer\iexplore.exe

    Download signed ActiveX controls: Prompt

    Download unsigned ActiveX controls: Disabled

    Run ActiveX controls and plug-ins: Allowed

    Initialize and script ActiveX controls not marked as safe: Disabled

    Allow scripting of Internet Explorer Webbrowser control: Disabled

    Active scripting: Allowed

    Script ActiveX controls marked as safe for scripting: Allowed

     

    File Scan Data-->

     

    Other data-->

    Office Details: <GenuineResults><MachineData><UGUID>{E13A0DB5-B4F5-4517-9140-3A6D551BE40F}</UGUID><Version>1.9.0027.0</Version><OS>6.1.7601.2.00010100.1.0.048</OS><Architecture>x32</Architecture><PKey>*****-*****-*****-*****-733WD</PKey><PID>00371-OEM-8992671-00524</PID><PIDType>2</PIDType><SID>S-1-5-21-3980903740-3493495384-949081153</SID><SYSTEM><Manufacturer>Dell Inc.</Manufacturer><Model>OptiPlex 380                 </Model></SYSTEM><BIOS><Manufacturer>Dell Inc.</Manufacturer><Version>A02</Version><SMBIOSVersion major="2" minor="5"/><Date>20100827000000.000000+000</Date></BIOS><HWID>870E3E07018400F8</HWID><UserLCID>0409</UserLCID><SystemLCID>0409</SystemLCID><TimeZone>Eastern Standard Time(GMT-05:00)</TimeZone><iJoin>0</iJoin><SBID><stat>3</stat><msppid></msppid><name></name><model></model></SBID><OEM><OEMID>DELL  </OEMID><OEMTableID>B10K   </OEMTableID></OEM><GANotification/></MachineData><Software><Office><Result>100</Result><Products><Product GUID="{90120000-0011-0000-0000-0000000FF1CE}"><LegitResult>100</LegitResult><Name>Microsoft Office Professional Plus 2007</Name><Ver>12</Ver><Val>77A7820368FFD88</Val><Hash>JjzdMRem4VYmVap6rs5VX2DPO5Q=</Hash><Pid>89409-708-8548541-65127</Pid><PidType>14</PidType></Product></Products><Applications><App Id="15" Version="12" Result="100"/><App Id="16" Version="12" Result="100"/><App Id="18" Version="12" Result="100"/><App Id="19" Version="12" Result="100"/><App Id="1A" Version="12" Result="100"/><App Id="1B" Version="12" Result="100"/><App Id="44" Version="12" Result="100"/></Applications></Office></Software></GenuineResults>  

     

    Spsys.log Content: 0x80070002

     

    Licensing Data-->

    Software licensing service version: 6.1.7601.17514

     

    Name: Windows(R) 7, Professional edition

    Description: Windows Operating System - Windows(R) 7, OEM_SLP channel

    Activation ID: 50e329f7-a5fa-46b2-85fd-f224e5da7764

    Application ID: 55c92734-d682-4d71-983e-d6ec3f16059f

    Extended PID: 00371-00178-926-700524-02-1033-7600.0000-3632010

    Installation ID: 003452726463018014508043786173388594790106920674515432

    Processor Certificate URL: http://go.microsoft.com/fwlink/?LinkID=88338

    Machine Certificate URL: http://go.microsoft.com/fwlink/?LinkID=88339

    Use License URL: http://go.microsoft.com/fwlink/?LinkID=88341

    Product Key Certificate URL: http://go.microsoft.com/fwlink/?LinkID=88340

    Partial Product Key: 733WD

    License Status: Licensed

    Remaining Windows rearm count: 4

    Trusted time: 9/7/2011 2:43:02 PM

     

    Windows Activation Technologies-->

    HrOffline: 0x00000000

    HrOnline: 0x00000000

    HealthStatus: 0x0000000000000000

    Event Time Stamp: 9:6:2011 09:13

    ActiveX: Registered, Version: 7.1.7600.16395

    Admin Service: Registered, Version: 7.1.7600.16395

    HealthStatus Bitmask Output:

     

     

    HWID Data-->

    HWID Hash Current: MAAAAAEAAwABAAIAAAABAAAAAQABAAEA6GGcPvDpyuc+dqp2WOqkC6wrsrSc+0bK

     

    OEM Activation 1.0 Data-->

    N/A

     

    OEM Activation 2.0 Data-->

    BIOS valid for OA 2.0: yes

    Windows marker version: 0x20001

    OEMID and OEMTableID Consistent: yes

    BIOS Information: 

      ACPI Table Name OEMID Value OEMTableID Value

      APIC DELL   B10K   

      FACP DELL   B10K   

      HPET DELL   B10K   

      BOOT DELL   B10K   

      MCFG DELL   B10K   

      SSDT DELL st_ex

      TCPA DELL   B10K   

      ____ DELL   B10K   

      SLIC DELL   B10K   

      SSDT DELL st_ex

      SSDT DELL st_ex

      SSDT DELL st_ex

    Wednesday, September 7, 2011 6:47 PM
  • "pkonshak" wrote in message news:b8f237c5-2c38-4b4f-976a-03d7eb959339...

    Hi,

    Here's a diag report from one which displayed the not genuine error right as I started the MGADIAG util.  I am logged in as a retricted user.  The not genuine error went away the second  MGADIAG util finished:

     

    Diagnostic Report (1.9.0027.0):

    -----------------------------------------

    Windows Validation Data-->

     

    Validation Code: 0

    Cached Online Validation Code: 0x0

    Windows Product Key: *****-*****-M3DJT-4J3WC-733WD

    Windows Product Key Hash: xo+ajVSpae7/4VoZjS7m6JL0f3A=

    Windows Product ID: 00371-OEM-8992671-00524

    Windows Product ID Type: 2

    Windows License Type: OEM SLP

    Windows OS version: 6.1.7601.2.00010100.1.0.048

    ID: {F7731B4E-1D60-44D4-8462-B0D8FB8A4DA8}(2)

    Is Admin: No

     

     

     
    Running MGADiag forces the system to attempt a repair on the WGA components – and it seems to have worked.
    This again would support the theory that it’s a race condition causing the problem, or that the SPPSVC is somehow blocked while in User mode.
    Is there any evidence in the Event log as to stalled services?

    Noel Paton | Nil Carborundum Illegitemi | CrashFixPC | The Three-toed Sloth
    Wednesday, September 7, 2011 7:02 PM
    Moderator
  • I don't seen any evidence that SPPSVC is being blocked, but I added an exception for it in the 3rd party tool to make sure it isn't stopping it.  I'll give it some time and see what happens.

    We were big fans of Steady State, which could be used to lock down public access pc's to keep them from being trashed.  Worked like a dream.  Unfortunately it's not available for Win7, so we've had to turn to 3rd party programs to provide the same sort of security.

    Wednesday, September 7, 2011 7:26 PM
  • "pkonshak" wrote in message news:ace3ae2e-ef7c-4d37-b8c7-3e57bd8a91a6...

    I don't seen any evidence that SPPSVC is being blocked, but I added an exception for it in the 3rd party tool to make sure it isn't stopping it.  I'll give it some time and see what happens.

    We were big fans of Steady State, which could be used to lock down public access pc's to keep them from being trashed.  Worked like a dream.  Unfortunately it's not available for Win7, so we've had to turn to 3rd party programs to provide the same sort of security.

    It’s possible to lock Win7 down quite severely  - more so than Vista, I believe – and there are options in Parental Controls to restrict things. I had no experience with Steady State, but I know that many found it useful. I was surprised myself when it wasn’t included by default in at least some editions of Win7.
    Just in case there’s something else interfering, it may be useful for you to compare your service settings with the ‘norms’.... http://www.blackviper.com/2010/12/17/black-vipers-windows-7-service-pack-1-service-configurations/#more-2975
     
     

    Noel Paton | Nil Carborundum Illegitemi | CrashFixPC | The Three-toed Sloth
    • Proposed as answer by Darin Smith MS Wednesday, September 7, 2011 10:35 PM
    • Marked as answer by Darin Smith MS Monday, September 12, 2011 10:26 PM
    Wednesday, September 7, 2011 7:47 PM
    Moderator