locked
Gigabyte 3TB+ driver resets Windows 2008 R2 Activation: forever stuck with error 0x80070005 and slmgr.vbs with errCode 800A0046 RRS feed

  • Question

  • Man I wasted a whole day researching this until I thought to my self it has to be 3TB+unlock.. I wish someone could find out a fix, for now I'm keeping it stating its not genuine.. At least updated and everything still work, only thing annoying it the message!
    Wednesday, November 14, 2012 2:59 AM

Answers

  • I think I'm going to have to admit defeat - unless you want to carry on?

    Either way, I'm going to see if I can get some assistance on this issue from MS, as it's one of the few regular problems which still eludes me. This could take a few days - even if I'm successful.

    Best guess solution at the moment is a repair install :(

    Download the SP1 Refresh for your language and edition from the links on these pages...

    Heidoc - Microsoft DR Download links

    The links are for downloads from the Digital River servers run for MS, so are about as safe as you can get :)

    Once you have it downloaded, you then need to burn the DVD from it - use either the Windows Disk Image Burner, or (better still) your favourite burning application at the slowest speed possible.

    Note that you do NOT 'drag and drop' the file to the disk, you must use the 'burn an image' option from your app - or you'll end up with a useless coaster :)

    Once you have the disk burnt, check that it boots the (or any other) system OK - but do NOT start the repair from there - you must start the repair from within a normal Windows boot.

    Follow the instructions in this tutorial - http://www.sevenforums.com/tutorials/3413-repair-install.html

    - and they should help you get through it (it's not as difficult as it looks!)

    Always ask questions first if you're unsure - either here, or in sevenforums.

    Good luck with it!


    Noel Paton | Nil Carborundum Illegitemi | CrashFixPC | The Three-toed Sloth

    Tuesday, December 4, 2012 11:40 PM
    Moderator

All replies

  • Most Activation and Validation issues look the same, on the surface, but can have many different causes and fixes. This is why we ask for a diagnostic report and this is also why we ask that you create your own thread for your issue (in other words, don't post your issue in another person's thread).

    It just becomes too complicated to try to troubleshoot multiple different issues in the same thread.

    Wednesday, November 14, 2012 4:11 AM
    Answerer
  • To properly analyse and solve problems with Activation and Validation, we need to see a full copy of the report produced by the MGADiag tool
    (download and save to desktop - http://go.microsoft.com/fwlink/?linkid=52012 )
     Once saved, run the tool.
    Click on the Continue button, which will produce the report.
     To copy the report to your response, click on the Copy button in the tool (ignore any error messages at this point), and then paste (using either r-click/Paste, or Ctrl+V ) into your response.
      - **in your own thread**, please
     
    Please also state the Version and Edition of Windows quoted on your COA sticker (if you have one) on the case of your machine (or inside the battery compartment), but do NOT quote the Key on the sticker!
    http://www.microsoft.com/en-us/howtotell/Hardware.aspx

    Noel Paton | Nil Carborundum Illegitemi | CrashFixPC | The Three-toed Sloth

    Wednesday, November 14, 2012 9:15 AM
    Moderator
  • So this is for a Windows 2008 R2, I only responded to the other person topic because very error they got was the same as mine. I even named the topic of this topic similar..

    Diagnostic Report (1.9.0027.0):
    -----------------------------------------
    Windows Validation Data-->

    Validation Code: 50
    Cached Online Validation Code: N/A, hr = 0xc004f012
    Windows Product Key: N/A, hr=0x80070005
    Windows Product Key Hash: N/A, hr=0x80070005
    Windows Product ID: 55041-178-8094115-84644
    Windows Product ID Type: 6
    Windows License Type: Volume MAK
    Windows OS version: 6.1.7601.2.00030110.1.0.007
    ID: {8F2D769F-822F-4493-9DCD-A7B0F7676F32}(1)
    Is Admin: Yes
    TestCab: 0x0
    LegitcheckControl ActiveX: N/A, hr = 0x80070002
    Signed By: N/A, hr = 0x80070002
    Product Name: Windows Server 2008 R2 Standard
    Architecture: 0x00000009
    Build lab: 7601.win7sp1_gdr.120830-0333
    TTS Error:
    Validation Diagnostic:
    Resolution Status: N/A

    Vista WgaER Data-->
    ThreatID(s): N/A, hr = 0x80070002
    Version: N/A, hr = 0x80070002

    Windows XP Notifications Data-->
    Cached Result: N/A, hr = 0x80070002
    File Exists: No
    Version: N/A, hr = 0x80070002
    WgaTray.exe Signed By: N/A, hr = 0x80070002
    WgaLogon.dll Signed By: N/A, hr = 0x80070002

    OGA Notifications Data-->
    Cached Result: N/A, hr = 0x80070002
    Version: N/A, hr = 0x80070002
    OGAExec.exe Signed By: N/A, hr = 0x80070002
    OGAAddin.dll Signed By: N/A, hr = 0x80070002

    OGA Data-->
    Office Status: 109 N/A
    OGA Version: N/A, 0x80070002
    Signed By: N/A, hr = 0x80070002
    Office Diagnostics: B4D0AA8B-543-80070002_025D1FF3-364-80041010_025D1FF3-229-80041010_025D1FF3-230-1_025D1FF3-517-80040154_025D1FF3-237-80040154_025D1FF3-238-2_025D1FF3-244-80070002_025D1FF3-258-3

    Browser Data-->
    Proxy settings: N/A
    User Agent: Mozilla/4.0 (compatible; MSIE 8.0; Win32)
    Default Browser: C:\Program Files (x86)\Mozilla Firefox\firefox.exe
    Download signed ActiveX controls: Disabled
    Download unsigned ActiveX controls: Disabled
    Run ActiveX controls and plug-ins: Disabled
    Initialize and script ActiveX controls not marked as safe: Disabled
    Allow scripting of Internet Explorer Webbrowser control: Disabled
    Active scripting: Disabled
    Script ActiveX controls marked as safe for scripting: Disabled

    File Scan Data-->
    File Mismatch: C:\Windows\system32\wat\watadminsvc.exe[Hr = 0x80070003]
    File Mismatch: C:\Windows\system32\wat\npwatweb.dll[Hr = 0x80070003]
    File Mismatch: C:\Windows\system32\wat\watux.exe[Hr = 0x80070003]
    File Mismatch: C:\Windows\system32\wat\watweb.dll[Hr = 0x80070003]

    Other data-->
    Office Details: <GenuineResults><MachineData><UGUID>{8F2D769F-822F-4493-9DCD-A7B0F7676F32}</UGUID><Version>1.9.0027.0</Version><OS>6.1.7601.2.00030110.1.0.007</OS><Architecture>x64</Architecture><PKey>*****-*****-*****-*****-BBBBB</PKey><PID>55041-178-8094115-84644</PID><PIDType>6</PIDType><SID>S-1-5-21-656286308-1268218398-2113919334</SID><SYSTEM><Manufacturer>Supermicro</Manufacturer><Model>X9SCL/X9SCM</Model></SYSTEM><BIOS><Manufacturer>American Megatrends Inc.</Manufacturer><Version>1.1a</Version><SMBIOSVersion major="2" minor="7"/><Date>20110928000000.000000+000</Date></BIOS><HWID>29030E00018400FE</HWID><UserLCID>0409</UserLCID><SystemLCID>0409</SystemLCID><TimeZone>Central European Standard Time(GMT+01:00)</TimeZone><iJoin>0</iJoin><SBID><stat>3</stat><msppid></msppid><name></name><model></model></SBID><OEM/><GANotification/></MachineData><Software><Office><Result>109</Result><Products/><Applications/></Office></Software></GenuineResults>  

    Spsys.log Content: 0x80070002

    Licensing Data-->
    C:\Windows\system32\slmgr.vbs(1333, 5) Microsoft VBScript runtime error: Permission denied

    Windows Activation Technologies-->
    HrOffline: 0x00000000
    HrOnline: 0xC004C533
    HealthStatus: 0x0000000000000000
    Event Time Stamp: 11:14:2012 01:25
    ActiveX: Not Registered - 0x80040154
    Admin Service: Not Registered - 0x80040154
    HealthStatus Bitmask Output:


    HWID Data-->
    HWID Hash Current: LAAAAAAABAABAAEAAAAAAAAAAQABAAEAln3KXl7NYjRK3aLN1pVAWRoOLnM=

    OEM Activation 1.0 Data-->
    N/A

    OEM Activation 2.0 Data-->
    BIOS valid for OA 2.0: yes, but no SLIC table
    Windows marker version: N/A
    OEMID and OEMTableID Consistent: N/A
    BIOS Information:
      ACPI Table Name    OEMID Value    OEMTableID Value
      APIC            SUPERM        SMCI--MB
      FACP            SUPERM        SMCI--MB
      HPET            SUPERM        SMCI--MB
      MCFG            SUPERM        SMCI--MB
      SSDT            AMICPU        PROC
      SPMI            A M I         OEMSPMI
      EINJ            AMI        AMI EINJ
      ERST            AMIER        AMI ERST
      HEST            AMI        AMI HEST
      BERT            AMI        AMI BERT

    Wednesday, November 14, 2012 10:48 PM
  • Licensing Data-->
    C:\Windows\system32\slmgr.vbs(1333, 5) Microsoft VBScript runtime error: Permission denied

    is the source of your problem - which may or may not be related to the other major errors....

    Windows Product Key: N/A, hr=0x80070005
    Windows Product Key Hash: N/A, hr=0x80070005

    Please open an Elevated Command Prompt, and run the following commands

    sc sdshow plugplay

    REG QUERY "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsNT\CurrentVersion\ProfileList\S-1-5-18" /S

    REG QUERY "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsNT\CurrentVersion\ProfileList\S-1-5-19" /S

    REG QUERY "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsNT\CurrentVersion\ProfileList\S-1-5-20" /S REG QUERY HKU REG QUERY HKU\S-1-5-20

    post the results

      Here are some instructions to make life easier :)

    1) To open an Elevated Command Prompt Window (the ECP window), click on Start, All Programs, Accessories – then right-click on Command Prompt, and select Run as Administrator. Accept the UAC prompt. 

    2) To run the commands easier, highlight the block of commands, and right-click on the highlight – select Copy. In the CP Window, click on the black/white icon at top left – select Paste. The commands will run but may not complete the last command, so hit the Enter Key once. 

    3) To copy the results... click on the Black/White icon in the top left, and select Edit... 'Select All', and hit the Enter key - then use Ctrl+V or r-click+Paste to paste it into your response.     


    Noel Paton | Nil Carborundum Illegitemi | CrashFixPC | The Three-toed Sloth



    Wednesday, November 14, 2012 11:28 PM
    Moderator
  • So here is what happened:

    Microsoft Windows [Version 6.1.7601]
    Copyright (c) 2009 Microsoft Corporation.  All rights reserved.

    C:\Users\Administrator>sc sdshow plugplayREG QUERY "HKEY_LOCAL_MACHINE\
    SOFTWARE\Microsoft\WindowsNT\CurrentVersion\ProfileList\S-1-5-18" /SREG QUERY "H
    KEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsNT\CurrentVersion\ProfileList\S-1-5-
    19" /SREG QUERY "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsNT\CurrentVersion\
    ProfileList\S-1-5-20" /S
    [SC] OpenService FAILED 1060:

    The specified service does not exist as an installed service.


    C:\Users\Administrator>REG QUERY HKU

    HKEY_USERS\.DEFAULT
    HKEY_USERS\S-1-5-19
    HKEY_USERS\S-1-5-20
    HKEY_USERS\S-1-5-21-656286308-1268218398-2113919334-500
    HKEY_USERS\S-1-5-21-656286308-1268218398-2113919334-500_Classes
    HKEY_USERS\S-1-5-18

    C:\Users\Administrator>REG QUERY HKU\S-1-5-20

    HKEY_USERS\S-1-5-20\AppEvents
    HKEY_USERS\S-1-5-20\Console
    HKEY_USERS\S-1-5-20\Control Panel
    HKEY_USERS\S-1-5-20\Environment
    HKEY_USERS\S-1-5-20\EUDC
    HKEY_USERS\S-1-5-20\Keyboard Layout
    HKEY_USERS\S-1-5-20\Network
    HKEY_USERS\S-1-5-20\Printers
    HKEY_USERS\S-1-5-20\Software
    HKEY_USERS\S-1-5-20\System

    C:\Users\Administrator>

    Wednesday, November 14, 2012 11:56 PM
  • Sorry about that - I lost a CR/LF at the end of the first two commands! (now edited back in)

    Please run the first three again....

    sc sdshow plugplay
    REG QUERY "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\ProfileList\S-1-5-18" /S
    REG QUERY "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\ProfileList\S-1-5-19" /S
    


    Noel Paton | Nil Carborundum Illegitemi | CrashFixPC | The Three-toed Sloth

    Thursday, November 15, 2012 12:16 AM
    Moderator
  • OK so here it is:

    Microsoft Windows [Version 6.1.7601]
    Copyright (c) 2009 Microsoft Corporation.  All rights reserved.

    C:\Users\Administrator>sc sdshow plugplay

    D:(A;;CCLCSWRPWPDTLOCRRC;;;SY)(A;;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;BA)(A;;CCLCSWLOCR
    RC;;;IU)(A;;CCLCSWLOCRRC;;;SU)S:(AU;FA;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;WD)

    C:\Users\Administrator>REG QUERY "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft
    \Windows NT\CurrentVersion\ProfileList\S-1-5-18" /S

    HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\ProfileList\S-1-
    5-18
        Flags    REG_DWORD    0xc
        State    REG_DWORD    0x0
        RefCount    REG_DWORD    0x1
        Sid    REG_BINARY    010100000000000512000000
        ProfileImagePath    REG_EXPAND_SZ    %systemroot%\system32\config\systemprof
    ile


    C:\Users\Administrator>REG QUERY "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft
    \Windows NT\CurrentVersion\ProfileList\S-1-5-19" /S

    HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\ProfileList\S-1-
    5-19
        ProfileImagePath    REG_EXPAND_SZ    C:\Windows\ServiceProfiles\LocalService

        Flags    REG_DWORD    0x0
        State    REG_DWORD    0x0


    C:\Users\Administrator>REG QUERY "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft
    \Windows NT\CurrentVersion\ProfileList\S-1-5-20" /S

    HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\ProfileList\S-1-
    5-20
        ProfileImagePath    REG_EXPAND_SZ    C:\Windows\ServiceProfiles\NetworkServi
    ce
        Flags    REG_DWORD    0x0
        State    REG_DWORD    0x0


    C:\Users\Administrator>

    Thursday, November 15, 2012 2:15 AM
  • That looks normal enough

    I'm not sure how well the WAT update works with Server versions - but please try installing it anyhow, then run another MGADiag report.

    http://support.microsoft.com/kb/971033


    Noel Paton | Nil Carborundum Illegitemi | CrashFixPC | The Three-toed Sloth

    Thursday, November 15, 2012 10:56 AM
    Moderator
  • No luck thus far:

    Microsoft Windows [Version 6.1.7601]
    Copyright (c) 2009 Microsoft Corporation.  All rights reserved.

    C:\Users\Administrator>sc sdshow plugplay

    D:(A;;CCLCSWRPWPDTLOCRRC;;;SY)(A;;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;BA)(A;;CCLCSWLOCR
    RC;;;IU)(A;;CCLCSWLOCRRC;;;SU)S:(AU;FA;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;WD)

    C:\Users\Administrator>REG QUERY "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft
    \Windows NT\CurrentVersion\ProfileList\S-1-5-18" /S

    HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\ProfileList\S-1-
    5-18
        Flags    REG_DWORD    0xc
        State    REG_DWORD    0x0
        RefCount    REG_DWORD    0x1
        Sid    REG_BINARY    010100000000000512000000
        ProfileImagePath    REG_EXPAND_SZ    %systemroot%\system32\config\systemprof
    ile


    C:\Users\Administrator>REG QUERY "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft
    \Windows NT\CurrentVersion\ProfileList\S-1-5-19" /S

    HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\ProfileList\S-1-
    5-19
        ProfileImagePath    REG_EXPAND_SZ    C:\Windows\ServiceProfiles\LocalService

        Flags    REG_DWORD    0x0
        State    REG_DWORD    0x0


    C:\Users\Administrator>REG QUERY "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft
    \Windows NT\CurrentVersion\ProfileList\S-1-5-20" /S

    HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\ProfileList\S-1-
    5-20
        ProfileImagePath    REG_EXPAND_SZ    C:\Windows\ServiceProfiles\NetworkServi
    ce
        Flags    REG_DWORD    0x0
        State    REG_DWORD    0x0


    C:\Users\Administrator>

    Friday, November 16, 2012 12:47 AM
  • (its the MGADIag report I needed :) )

    (download and save to desktop - http://go.microsoft.com/fwlink/?linkid=52012 )
     Once saved, run the tool.
    Click on the Continue button, which will produce the report.
     To copy the report to your response, click on the Copy button in the tool (ignore any error messages at this point), and then paste (using either r-click/Paste, or Ctrl+V ) into your response.


    Noel Paton | Nil Carborundum Illegitemi | CrashFixPC | The Three-toed Sloth

    Friday, November 16, 2012 9:17 AM
    Moderator
  • Sorry for the very late update, been a very busy week! Here is the result:

    Diagnostic Report (1.9.0027.0):
    -----------------------------------------
    Windows Validation Data-->

    Validation Code: 50
    Cached Online Validation Code: N/A, hr = 0xc004f012
    Windows Product Key: N/A, hr=0x80070005
    Windows Product Key Hash: N/A, hr=0x80070005
    Windows Product ID: 55041-178-8094115-84644
    Windows Product ID Type: 6
    Windows License Type: Volume MAK
    Windows OS version: 6.1.7601.2.00030110.1.0.007
    ID: {8F2D769F-822F-4493-9DCD-A7B0F7676F32}(3)
    Is Admin: Yes
    TestCab: 0x0
    LegitcheckControl ActiveX: N/A, hr = 0x80070002
    Signed By: N/A, hr = 0x80070002
    Product Name: Windows Server 2008 R2 Standard
    Architecture: 0x00000009
    Build lab: 7601.win7sp1_gdr.120830-0333
    TTS Error:
    Validation Diagnostic:
    Resolution Status: N/A

    Vista WgaER Data-->
    ThreatID(s): N/A, hr = 0x80070002
    Version: N/A, hr = 0x80070002

    Windows XP Notifications Data-->
    Cached Result: N/A, hr = 0x80070002
    File Exists: No
    Version: N/A, hr = 0x80070002
    WgaTray.exe Signed By: N/A, hr = 0x80070002
    WgaLogon.dll Signed By: N/A, hr = 0x80070002

    OGA Notifications Data-->
    Cached Result: N/A, hr = 0x80070002
    Version: N/A, hr = 0x80070002
    OGAExec.exe Signed By: N/A, hr = 0x80070002
    OGAAddin.dll Signed By: N/A, hr = 0x80070002

    OGA Data-->
    Office Status: 109 N/A
    OGA Version: N/A, 0x80070002
    Signed By: N/A, hr = 0x80070002
    Office Diagnostics: B4D0AA8B-543-80070002_025D1FF3-364-80041010_025D1FF3-229-80041010_025D1FF3-230-1_025D1FF3-517-80040154_025D1FF3-237-80040154_025D1FF3-238-2_025D1FF3-244-80070002_025D1FF3-258-3

    Browser Data-->
    Proxy settings: N/A
    User Agent: Mozilla/4.0 (compatible; MSIE 8.0; Win32)
    Default Browser: C:\Program Files (x86)\Mozilla Firefox\firefox.exe
    Download signed ActiveX controls: Disabled
    Download unsigned ActiveX controls: Disabled
    Run ActiveX controls and plug-ins: Disabled
    Initialize and script ActiveX controls not marked as safe: Disabled
    Allow scripting of Internet Explorer Webbrowser control: Disabled
    Active scripting: Disabled
    Script ActiveX controls marked as safe for scripting: Disabled

    File Scan Data-->

    Other data-->
    Office Details: <GenuineResults><MachineData><UGUID>{8F2D769F-822F-4493-9DCD-A7B0F7676F32}</UGUID><Version>1.9.0027.0</Version><OS>6.1.7601.2.00030110.1.0.007</OS><Architecture>x64</Architecture><PKey>*****-*****-*****-*****-BBBBB</PKey><PID>55041-178-8094115-84644</PID><PIDType>6</PIDType><SID>S-1-5-21-656286308-1268218398-2113919334</SID><SYSTEM><Manufacturer>Supermicro</Manufacturer><Model>X9SCL/X9SCM</Model></SYSTEM><BIOS><Manufacturer>American Megatrends Inc.</Manufacturer><Version>1.1a</Version><SMBIOSVersion major="2" minor="7"/><Date>20110928000000.000000+000</Date></BIOS><HWID>29030E00018400FE</HWID><UserLCID>0409</UserLCID><SystemLCID>0409</SystemLCID><TimeZone>Central European Standard Time(GMT+01:00)</TimeZone><iJoin>0</iJoin><SBID><stat>3</stat><msppid></msppid><name></name><model></model></SBID><OEM/><GANotification/></MachineData><Software><Office><Result>109</Result><Products/><Applications/></Office></Software></GenuineResults>  

    Spsys.log Content: 0x80070002

    Licensing Data-->
    C:\Windows\system32\slmgr.vbs(1333, 5) Microsoft VBScript runtime error: Permission denied

    Windows Activation Technologies-->
    HrOffline: 0x00000000
    HrOnline: 0xC004C533
    HealthStatus: 0x0000000000000000
    Event Time Stamp: 11:16:2012 01:45
    ActiveX: Registered, Version: 7.1.7600.16395
    Admin Service: Registered, Version: 7.1.7600.16395
    HealthStatus Bitmask Output:


    HWID Data-->
    HWID Hash Current: LAAAAAAABAABAAEAAAAAAAAAAQABAAEAln3KXl7NYjRK3aLN1pVAWRoOLnM=

    OEM Activation 1.0 Data-->
    N/A

    OEM Activation 2.0 Data-->
    BIOS valid for OA 2.0: yes, but no SLIC table
    Windows marker version: N/A
    OEMID and OEMTableID Consistent: N/A
    BIOS Information:
      ACPI Table Name    OEMID Value    OEMTableID Value
      APIC            SUPERM        SMCI--MB
      FACP            SUPERM        SMCI--MB
      HPET            SUPERM        SMCI--MB
      MCFG            SUPERM        SMCI--MB
      SSDT            AMICPU        PROC
      SPMI            A M I         OEMSPMI
      EINJ            AMI        AMI EINJ
      ERST            AMIER        AMI ERST
      HEST            AMI        AMI HEST
      BERT            AMI        AMI BERT

    Sunday, November 25, 2012 9:25 PM
  • Please run the following commands, and post the results....

    SC QC TRUSTEDINSTALLER
    SC QC BITS
    SC QC BFE
    SC QC WUAUSERV


    Noel Paton | Nil Carborundum Illegitemi | CrashFixPC | The Three-toed Sloth

    Sunday, November 25, 2012 9:31 PM
    Moderator
  • Done:

    Microsoft Windows [Version 6.1.7601]
    Copyright (c) 2009 Microsoft Corporation.  All rights reserved.

    C:\Users\Administrator>SC QC TRUSTEDINSTALLER
    [SC] QueryServiceConfig SUCCESS

    SERVICE_NAME: TRUSTEDINSTALLER
            TYPE               : 10  WIN32_OWN_PROCESS
            START_TYPE         : 3   DEMAND_START
            ERROR_CONTROL      : 1   NORMAL
            BINARY_PATH_NAME   : C:\Windows\servicing\TrustedInstaller.exe
            LOAD_ORDER_GROUP   : ProfSvc_Group
            TAG                : 0
            DISPLAY_NAME       : Windows Modules Installer
            DEPENDENCIES       :
            SERVICE_START_NAME : localSystem

    C:\Users\Administrator>SC QC BITS
    [SC] QueryServiceConfig SUCCESS

    SERVICE_NAME: BITS
            TYPE               : 20  WIN32_SHARE_PROCESS
            START_TYPE         : 3   DEMAND_START
            ERROR_CONTROL      : 1   NORMAL
            BINARY_PATH_NAME   : C:\Windows\System32\svchost.exe -k netsvcs
            LOAD_ORDER_GROUP   :
            TAG                : 0
            DISPLAY_NAME       : Background Intelligent Transfer Service
            DEPENDENCIES       : RpcSs
                               : EventSystem
            SERVICE_START_NAME : LocalSystem

    C:\Users\Administrator>SC QC BFE
    [SC] QueryServiceConfig SUCCESS

    SERVICE_NAME: BFE
            TYPE               : 20  WIN32_SHARE_PROCESS
            START_TYPE         : 2   AUTO_START
            ERROR_CONTROL      : 1   NORMAL
            BINARY_PATH_NAME   : C:\Windows\system32\svchost.exe -k LocalServiceNoNe
    twork
            LOAD_ORDER_GROUP   : NetworkProvider
            TAG                : 0
            DISPLAY_NAME       : Base Filtering Engine
            DEPENDENCIES       : RpcSs
            SERVICE_START_NAME : NT AUTHORITY\LocalService

    C:\Users\Administrator>SC QC WUAUSERV
    [SC] QueryServiceConfig SUCCESS

    SERVICE_NAME: WUAUSERV
            TYPE               : 20  WIN32_SHARE_PROCESS
            START_TYPE         : 2   AUTO_START  (DELAYED)
            ERROR_CONTROL      : 1   NORMAL
            BINARY_PATH_NAME   : C:\Windows\system32\svchost.exe -k netsvcs
            LOAD_ORDER_GROUP   :
            TAG                : 0
            DISPLAY_NAME       : Windows Update
            DEPENDENCIES       : rpcss
            SERVICE_START_NAME : LocalSystem

    C:\Users\Administrator>

    Sunday, November 25, 2012 9:42 PM
  • Please run the following commands and post the results....

    ICACLS C:\Windows\Servicing

    ICACLS C:\Windows\Servicing\TrustedInstaller.exe


    Noel Paton | Nil Carborundum Illegitemi | CrashFixPC | The Three-toed Sloth


    Sunday, November 25, 2012 9:55 PM
    Moderator
  • Here are the results:

    Microsoft Windows [Version 6.1.7601]
    Copyright (c) 2009 Microsoft Corporation.  All rights reserved.

    C:\Users\Administrator>ICACLS C:\Windows\Servicing
    C:\Windows\Servicing NT SERVICE\TrustedInstaller:(F)
                         NT SERVICE\TrustedInstaller:(OI)(CI)(IO)(F)
                         NT AUTHORITY\SYSTEM:(RX)
                         NT AUTHORITY\SYSTEM:(OI)(CI)(IO)(GR,GE)
                         BUILTIN\Administrators:(F)
                         BUILTIN\Administrators:(OI)(CI)(IO)(GR,GE)
                         BUILTIN\Users:(RX)
                         BUILTIN\Users:(OI)(CI)(IO)(GR,GE)

    Successfully processed 1 files; Failed processing 0 files

    C:\Users\Administrator>
    C:\Users\Administrator>ICACLS C:\Windows\Servicing\TrustedInstaller
    C:\Windows\Servicing\TrustedInstaller: The system cannot find the file specified
    .
    Successfully processed 0 files; Failed processing 1 files

    C:\Users\Administrator>

    Sunday, November 25, 2012 10:29 PM
  • My mistake on the last one - sorry.

    It should have been

    ICACLS C:\Windows\Servicing\TrustedInstaller.exe

    The folder permissions are a little odd - Administrators doesn't usually have Full permissions on that folder.


    Noel Paton | Nil Carborundum Illegitemi | CrashFixPC | The Three-toed Sloth


    Sunday, November 25, 2012 11:03 PM
    Moderator
  • I think I changed the permissions with take full control when I was first encountering this error. Here is what it showed:

    Microsoft Windows [Version 6.1.7601]
    Copyright (c) 2009 Microsoft Corporation.  All rights reserved.

    C:\Users\Administrator>ICACLS C:\Windows\Servicing\TrustedInstaller.exe

    C:\Windows\Servicing\TrustedInstaller.exe NT SERVICE\TrustedInstaller:(F)
                                              BUILTIN\Administrators:(RX)
                                              NT AUTHORITY\SYSTEM:(RX)
                                              BUILTIN\Users:(RX)

    Successfully processed 1 files; Failed processing 0 files

    C:\Users\Administrator>

    Sunday, November 25, 2012 11:20 PM
  • We may have to delve into the registry permissions -

    Please run the following commands - do NOT post the results, but just tell me whether you get what looks like sensible output, or an error message.

    REG QUERY "HKLM\SOFTWARE\Microsoft\Internet Explorer\Registration" /S

    REG QUERY "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion"


    Noel Paton | Nil Carborundum Illegitemi | CrashFixPC | The Three-toed Sloth

    Monday, November 26, 2012 12:58 PM
    Moderator
  • It doesn't seem like there was any error but there was a lot of 0's and other numbers that don't quite make sense. The second one showed system information & info about registry entries.
    Monday, November 26, 2012 7:07 PM
  • That's OK - the bits with lots of zero's contain your Product Key, which is why I didn't want you to post it.

    It sounds like that Key is intact - the question becomes, are the permissions to them proper, as well? (or is the permissions problem somewhere else, since it's more likely a file permissions problem than a registry one. ).

    We'll come back to that after a bit more file-checking.

    Please run the following commands - and just quote the number of files and folders found in teh summary at the end of each. (the list could be VERY long!)

    Each command could take a couple of minutes and may appears to freeze. just leave it alone until the prompt comes back.

    (in an Elevated Command Prompt)

    DIR C:\Windows /AR /S

    DIR C:\Windows\System32 /AR /S

    DIR C:\Windows\Logs /AR /S

    DIR C:\Windows\SoftwareDistribution /s

    DIR C:\Windows\Catroot /s


    Noel Paton | Nil Carborundum Illegitemi | CrashFixPC | The Three-toed Sloth

    Monday, November 26, 2012 7:32 PM
    Moderator
  • DIR C:\Windows /AR /S (Had 50 Files and 120 Dir)

    DIR C:\Windows\System32 /AR /S (Had 6 Files and 0 Dir)

    DIR C:\Windows\Logs /AR /S (said the following)

     Volume in drive C has no label.
     Volume Serial Number is ####-####
     File Not Found

    DIR C:\Windows\SoftwareDistribution /s (Had 2764 Files and 1115 Dir)

    DIR C:\Windows\Catroot /s (0 Files and 2 Dir)

    Monday, November 26, 2012 9:21 PM
  • The only surprising one there is the SoftwareDistribution one - it seems a rather large number to me, but I don't have a realistic number to compare it against, having deleted my own back in April. - probably best to leave them alone for the moment

    Please run the following commands and post the results.

    DIR C:Windows\System32\catroot2

    ICACLS C:\Windows\System32\catroot2

    ICACLS C:\Windows\System32\catroot2\*.*


    Noel Paton | Nil Carborundum Illegitemi | CrashFixPC | The Three-toed Sloth

    Monday, November 26, 2012 10:13 PM
    Moderator
  • I checked another windows 2008 R2 and it had even more files when I ran "DIR C:\Windows\SoftwareDistribution /s"

    It said there was 5210 Files and 668 Dir.. Here is the results of what you asked:

    Microsoft Windows [Version 6.1.7601]
    Copyright (c) 2009 Microsoft Corporation.  All rights reserved.

    C:\Users\Administrator>DIR C:Windows\System32\catroot2
    The system cannot find the path specified.

    C:\Users\Administrator>
    C:\Users\Administrator>ICACLS C:\Windows\System32\catroot2
    C:\Windows\System32\catroot2 NT SERVICE\CryptSvc:(F)
                                 NT SERVICE\CryptSvc:(OI)(CI)(IO)(F)
                                 NT SERVICE\TrustedInstaller:(I)(F)
                                 NT SERVICE\TrustedInstaller:(I)(CI)(IO)(F)
                                 NT AUTHORITY\SYSTEM:(I)(F)
                                 NT AUTHORITY\SYSTEM:(I)(OI)(CI)(IO)(F)
                                 BUILTIN\Administrators:(I)(F)
                                 BUILTIN\Administrators:(I)(OI)(CI)(IO)(F)
                                 BUILTIN\Users:(I)(RX)
                                 BUILTIN\Users:(I)(OI)(CI)(IO)(GR,GE)
                                 MP423146\Administrator:(I)(F)
                                 CREATOR OWNER:(I)(OI)(CI)(IO)(F)

    Successfully processed 1 files; Failed processing 0 files

    C:\Users\Administrator>
    C:\Users\Administrator>ICACLS C:\Windows\System32\catroot2\*.*
    C:\Windows\System32\catroot2\dberr.txt NT SERVICE\CryptSvc:(I)(F)
                                           NT AUTHORITY\SYSTEM:(I)(F)
                                           BUILTIN\Administrators:(I)(F)
                                           BUILTIN\Users:(I)(RX)
                                           MP423146\Administrator:(I)(F)

    C:\Windows\System32\catroot2\edb.chk NT SERVICE\CryptSvc:(I)(F)
                                         NT AUTHORITY\SYSTEM:(I)(F)
                                         BUILTIN\Administrators:(I)(F)
                                         BUILTIN\Users:(I)(RX)
                                         MP423146\Administrator:(I)(F)

    C:\Windows\System32\catroot2\edb.log NT SERVICE\CryptSvc:(I)(F)
                                         NT AUTHORITY\SYSTEM:(I)(F)
                                         BUILTIN\Administrators:(I)(F)
                                         BUILTIN\Users:(I)(RX)
                                         NT AUTHORITY\NETWORK SERVICE:(I)(F)

    C:\Windows\System32\catroot2\edb005B2.log NT SERVICE\CryptSvc:(I)(F)
                                              NT AUTHORITY\SYSTEM:(I)(F)
                                              BUILTIN\Administrators:(I)(F)
                                              BUILTIN\Users:(I)(RX)
                                              NT AUTHORITY\NETWORK SERVICE:(I)(F)

    C:\Windows\System32\catroot2\edb005B3.log NT SERVICE\CryptSvc:(I)(F)
                                              NT AUTHORITY\SYSTEM:(I)(F)
                                              BUILTIN\Administrators:(I)(F)
                                              BUILTIN\Users:(I)(RX)
                                              NT AUTHORITY\NETWORK SERVICE:(I)(F)

    C:\Windows\System32\catroot2\edb005B4.log NT SERVICE\CryptSvc:(I)(F)
                                              NT AUTHORITY\SYSTEM:(I)(F)
                                              BUILTIN\Administrators:(I)(F)
                                              BUILTIN\Users:(I)(RX)
                                              NT AUTHORITY\NETWORK SERVICE:(I)(F)

    C:\Windows\System32\catroot2\edb005B5.log NT SERVICE\CryptSvc:(I)(F)
                                              NT AUTHORITY\SYSTEM:(I)(F)
                                              BUILTIN\Administrators:(I)(F)
                                              BUILTIN\Users:(I)(RX)
                                              NT AUTHORITY\NETWORK SERVICE:(I)(F)

    C:\Windows\System32\catroot2\edb005B6.log NT SERVICE\CryptSvc:(I)(F)
                                              NT AUTHORITY\SYSTEM:(I)(F)
                                              BUILTIN\Administrators:(I)(F)
                                              BUILTIN\Users:(I)(RX)
                                              NT AUTHORITY\NETWORK SERVICE:(I)(F)

    C:\Windows\System32\catroot2\edb005B7.log NT SERVICE\CryptSvc:(I)(F)
                                              NT AUTHORITY\SYSTEM:(I)(F)
                                              BUILTIN\Administrators:(I)(F)
                                              BUILTIN\Users:(I)(RX)
                                              NT AUTHORITY\NETWORK SERVICE:(I)(F)

    C:\Windows\System32\catroot2\edb005B8.log NT SERVICE\CryptSvc:(I)(F)
                                              NT AUTHORITY\SYSTEM:(I)(F)
                                              BUILTIN\Administrators:(I)(F)
                                              BUILTIN\Users:(I)(RX)
                                              NT AUTHORITY\NETWORK SERVICE:(I)(F)

    C:\Windows\System32\catroot2\edbres00001.jrs NT SERVICE\CryptSvc:(I)(F)
                                                 NT AUTHORITY\SYSTEM:(I)(F)
                                                 BUILTIN\Administrators:(I)(F)
                                                 BUILTIN\Users:(I)(RX)
                                                 MP423146\Administrator:(I)(F)

    C:\Windows\System32\catroot2\edbres00002.jrs NT SERVICE\CryptSvc:(I)(F)
                                                 NT AUTHORITY\SYSTEM:(I)(F)
                                                 BUILTIN\Administrators:(I)(F)
                                                 BUILTIN\Users:(I)(RX)
                                                 MP423146\Administrator:(I)(F)

    C:\Windows\System32\catroot2\{127D0A1D-4EF2-11D1-8608-00C04FC295EE} NT SERVICE\C
    ryptSvc:(I)(F)
                                                                        NT SERVICE\C
    ryptSvc:(I)(OI)(CI)(IO)(F)
                                                                        NT SERVICE\T
    rustedInstaller:(I)(F)
                                                                        NT SERVICE\T
    rustedInstaller:(I)(CI)(IO)(F)
                                                                        NT AUTHORITY
    \SYSTEM:(I)(F)
                                                                        NT AUTHORITY
    \SYSTEM:(I)(OI)(CI)(IO)(F)
                                                                        BUILTIN\Admi
    nistrators:(I)(F)
                                                                        BUILTIN\Admi
    nistrators:(I)(OI)(CI)(IO)(F)
                                                                        BUILTIN\User
    s:(I)(RX)
                                                                        BUILTIN\User
    s:(I)(OI)(CI)(IO)(GR,GE)
                                                                        MP423146\Adm
    inistrator:(I)(F)
                                                                        CREATOR OWNE
    R:(I)(OI)(CI)(IO)(F)

    C:\Windows\System32\catroot2\{F750E6C3-38EE-11D1-85E5-00C04FC295EE} NT SERVICE\C
    ryptSvc:(OI)(CI)(F)
                                                                        NT AUTHORITY
    \SYSTEM:(OI)(CI)(F)
                                                                        BUILTIN\Admi
    nistrators:(OI)(CI)(F)
                                                                        BUILTIN\User
    s:(OI)(CI)(RX)
                                                                        BUILTIN\User
    s:(CI)(AD)
                                                                        BUILTIN\User
    s:(CI)(WD)
                                                                        NT AUTHORITY
    \NETWORK SERVICE:(F)
                                                                        NT SERVICE\C
    ryptSvc:(I)(F)
                                                                        NT SERVICE\C
    ryptSvc:(I)(OI)(CI)(IO)(F)
                                                                        NT SERVICE\T
    rustedInstaller:(I)(F)
                                                                        NT SERVICE\T
    rustedInstaller:(I)(CI)(IO)(F)
                                                                        NT AUTHORITY
    \SYSTEM:(I)(F)
                                                                        NT AUTHORITY
    \SYSTEM:(I)(OI)(CI)(IO)(F)
                                                                        BUILTIN\Admi
    nistrators:(I)(F)
                                                                        BUILTIN\Admi
    nistrators:(I)(OI)(CI)(IO)(F)
                                                                        BUILTIN\User
    s:(I)(RX)
                                                                        BUILTIN\User
    s:(I)(OI)(CI)(IO)(GR,GE)
                                                                        MP423146\Adm
    inistrator:(I)(F)
                                                                        CREATOR OWNE
    R:(I)(OI)(CI)(IO)(F)

    Successfully processed 14 files; Failed processing 0 files

    C:\Users\Administrator>

    Tuesday, November 27, 2012 12:43 AM
  • That all looks normal enough

    I wish there was an easier way to extract permissions within the registry - but without installing new programs, there is only the manual way.....

    Please open Regedit

    in the left pane, navigate to the following key -

    HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion

    Right-click on the key name (CurrentVersion) and select Permissions.

    Click on teh 'Advanced' button

    Click on the 'Owner' tab - who is the current owner?

    Click back on the Permissions tab,

    What Names are listed?

    What Permissions do they have?

    (post your results at this point)

    put a tick in the 'Replace all child.....' box, and click Apply

    Click OK (twice) and exit Regedit

    Reboot, and run another MGADiag report, and post that.


    Noel Paton | Nil Carborundum Illegitemi | CrashFixPC | The Three-toed Sloth

    Tuesday, November 27, 2012 7:55 AM
    Moderator
  • The current owner is Administrator & Administrators

    Trusted Installer - Full Control

    SYSTEM - Full Control

    Administrators - Full Control

    Users - Read

    sppsvc - Special

    When I puck a tick on the replace all child and the TrustedInstaller was the one highlighted it said that it could not set security in the key currently selected or some of its subkeys.

    Here is the MGADiag:

    Diagnostic Report (1.9.0027.0):
    -----------------------------------------
    Windows Validation Data-->

    Validation Code: 50
    Cached Online Validation Code: N/A, hr = 0xc004f012
    Windows Product Key: N/A, hr=0x80070005
    Windows Product Key Hash: N/A, hr=0x80070005
    Windows Product ID: 55041-178-8094115-84644
    Windows Product ID Type: 6
    Windows License Type: Volume MAK
    Windows OS version: 6.1.7601.2.00030110.1.0.007
    ID: {8F2D769F-822F-4493-9DCD-A7B0F7676F32}(3)
    Is Admin: Yes
    TestCab: 0x0
    LegitcheckControl ActiveX: N/A, hr = 0x80070002
    Signed By: N/A, hr = 0x80070002
    Product Name: Windows Server 2008 R2 Standard
    Architecture: 0x00000009
    Build lab: 7601.win7sp1_gdr.120830-0333
    TTS Error:
    Validation Diagnostic:
    Resolution Status: N/A

    Vista WgaER Data-->
    ThreatID(s): N/A, hr = 0x80070002
    Version: N/A, hr = 0x80070002

    Windows XP Notifications Data-->
    Cached Result: N/A, hr = 0x80070002
    File Exists: No
    Version: N/A, hr = 0x80070002
    WgaTray.exe Signed By: N/A, hr = 0x80070002
    WgaLogon.dll Signed By: N/A, hr = 0x80070002

    OGA Notifications Data-->
    Cached Result: N/A, hr = 0x80070002
    Version: N/A, hr = 0x80070002
    OGAExec.exe Signed By: N/A, hr = 0x80070002
    OGAAddin.dll Signed By: N/A, hr = 0x80070002

    OGA Data-->
    Office Status: 109 N/A
    OGA Version: N/A, 0x80070002
    Signed By: N/A, hr = 0x80070002
    Office Diagnostics: B4D0AA8B-543-80070002_025D1FF3-364-80041010_025D1FF3-229-80041010_025D1FF3-230-1_025D1FF3-517-80040154_025D1FF3-237-80040154_025D1FF3-238-2_025D1FF3-244-80070002_025D1FF3-258-3

    Browser Data-->
    Proxy settings: N/A
    User Agent: Mozilla/4.0 (compatible; MSIE 8.0; Win32)
    Default Browser: C:\Program Files (x86)\Mozilla Firefox\firefox.exe
    Download signed ActiveX controls: Disabled
    Download unsigned ActiveX controls: Disabled
    Run ActiveX controls and plug-ins: Disabled
    Initialize and script ActiveX controls not marked as safe: Disabled
    Allow scripting of Internet Explorer Webbrowser control: Disabled
    Active scripting: Disabled
    Script ActiveX controls marked as safe for scripting: Disabled

    File Scan Data-->

    Other data-->
    Office Details: <GenuineResults><MachineData><UGUID>{8F2D769F-822F-4493-9DCD-A7B0F7676F32}</UGUID><Version>1.9.0027.0</Version><OS>6.1.7601.2.00030110.1.0.007</OS><Architecture>x64</Architecture><PKey>*****-*****-*****-*****-BBBBB</PKey><PID>55041-178-8094115-84644</PID><PIDType>6</PIDType><SID>S-1-5-21-656286308-1268218398-2113919334</SID><SYSTEM><Manufacturer>Supermicro</Manufacturer><Model>X9SCL/X9SCM</Model></SYSTEM><BIOS><Manufacturer>American Megatrends Inc.</Manufacturer><Version>1.1a</Version><SMBIOSVersion major="2" minor="7"/><Date>20110928000000.000000+000</Date></BIOS><HWID>29030E00018400FE</HWID><UserLCID>0409</UserLCID><SystemLCID>0409</SystemLCID><TimeZone>Central European Standard Time(GMT+01:00)</TimeZone><iJoin>0</iJoin><SBID><stat>3</stat><msppid></msppid><name></name><model></model></SBID><OEM/><GANotification/></MachineData><Software><Office><Result>109</Result><Products/><Applications/></Office></Software></GenuineResults>  

    Spsys.log Content: 0x80070002

    Licensing Data-->
    C:\Windows\system32\slmgr.vbs(1333, 5) Microsoft VBScript runtime error: Permission denied

    Windows Activation Technologies-->
    HrOffline: 0x00000000
    HrOnline: 0xC004C533
    HealthStatus: 0x0000000000000000
    Event Time Stamp: 11:28:2012 20:56
    ActiveX: Registered, Version: 7.1.7600.16395
    Admin Service: Registered, Version: 7.1.7600.16395
    HealthStatus Bitmask Output:


    HWID Data-->
    HWID Hash Current: LAAAAAAABAABAAEAAAAAAAAAAQABAAEAln3KXl7NYjRK3aLN1pVAWRoOLnM=

    OEM Activation 1.0 Data-->
    N/A

    OEM Activation 2.0 Data-->
    BIOS valid for OA 2.0: yes, but no SLIC table
    Windows marker version: N/A
    OEMID and OEMTableID Consistent: N/A
    BIOS Information:
      ACPI Table Name    OEMID Value    OEMTableID Value
      APIC            SUPERM        SMCI--MB
      FACP            SUPERM        SMCI--MB
      HPET            SUPERM        SMCI--MB
      MCFG            SUPERM        SMCI--MB
      SSDT            AMICPU        PROC
      SPMI            A M I         OEMSPMI
      EINJ            AMI        AMI EINJ
      ERST            AMIER        AMI ERST
      HEST            AMI        AMI HEST
      BERT            AMI        AMI BERT

    Wednesday, November 28, 2012 8:00 PM
  • Ah - that may be the problem, then

    Owner of the Key should be Administrators.

    It sounds as if the subkeys are either corrupted, or ownership has been stolen.

    Please open regedit

    Navigate to the Key again, and go to the Permissions dialog.

    Click on Advanced.

    Make sure that the Current Owner says 'Administrators (<machinename>\Administrators)'

    put a tick in the 'Replace owner on subcontainers and objects' box - click Apply and OK (once only)

    Now click on the Advanced button again

    In the Permissions tab, make sure that all users have 'Apply to' set to 'This key and subkeys' - except CREATOR OWNER, which should be 'Subkeys only'

    [EDIT] - DELETE the 'sppsvc' entry in the Permissions box. [/EDIT]

    Put a tick in the 'Replace all child permissions...' box, and click Apply

    (what happens?)

    Click OK out, and exit Regedit

    reboot and run another MGADiag report.


    Noel Paton | Nil Carborundum Illegitemi | CrashFixPC | The Three-toed Sloth


    Wednesday, November 28, 2012 8:24 PM
    Moderator
  • Well Administrators is currently an owner, should I be removing Administrator so Administrators is the only one there?

    Also when doing "Replace owner on subcontainers and objects" after hitting apply I got the same error as before, it said that it could not set security in the key currently selected or some of its subkeys.

    So before I continue with the steps I just need to make sure that I'm not missing something on the owner part, should I remove Administrator (without the S)?

    Wednesday, November 28, 2012 9:10 PM
  • There can only be one entry in the Current Owner box

    There can be any number of entries in the 'Change Owner to...' box

    If you are getting that error there, with Administrators as the current owner, then move down to the 'Security' subKey and do the same thing there - see if that corrects the problem.


    Noel Paton | Nil Carborundum Illegitemi | CrashFixPC | The Three-toed Sloth

    Wednesday, November 28, 2012 9:46 PM
    Moderator
  • I see it now, well the current owner is set to "TrustedInstaller" not Administrators. So how do I change it to administrators.
    Wednesday, November 28, 2012 9:54 PM
  • Highlight the 'Administrators' entry in the Change Owner to... box, and click Apply

    Noel Paton | Nil Carborundum Illegitemi | CrashFixPC | The Three-toed Sloth

    Wednesday, November 28, 2012 10:25 PM
    Moderator
  • Ok even after changing it, the same message occured "registry editor could not set owner on the key current selected, or some of its subkeys."

    Also I do not have "CREATOR OWNER" under permissions. Just TrustedInstaller, System, Administrators and Users.

    After tick on replace, I got the same message as before "Registry Editor could not set security in the key currently selected, or some of its subkeys."

    MGADiag report:

    Diagnostic Report (1.9.0027.0):
    -----------------------------------------
    Windows Validation Data-->

    Validation Code: 50
    Cached Online Validation Code: N/A, hr = 0xc004f012
    Windows Product Key: N/A, hr=0x80070005
    Windows Product Key Hash: N/A, hr=0x80070005
    Windows Product ID: 55041-178-8094115-84644
    Windows Product ID Type: 6
    Windows License Type: Volume MAK
    Windows OS version: 6.1.7601.2.00030110.1.0.007
    ID: {8F2D769F-822F-4493-9DCD-A7B0F7676F32}(3)
    Is Admin: Yes
    TestCab: 0x0
    LegitcheckControl ActiveX: N/A, hr = 0x80070002
    Signed By: N/A, hr = 0x80070002
    Product Name: Windows Server 2008 R2 Standard
    Architecture: 0x00000009
    Build lab: 7601.win7sp1_gdr.120830-0333
    TTS Error:
    Validation Diagnostic:
    Resolution Status: N/A

    Vista WgaER Data-->
    ThreatID(s): N/A, hr = 0x80070002
    Version: N/A, hr = 0x80070002

    Windows XP Notifications Data-->
    Cached Result: N/A, hr = 0x80070002
    File Exists: No
    Version: N/A, hr = 0x80070002
    WgaTray.exe Signed By: N/A, hr = 0x80070002
    WgaLogon.dll Signed By: N/A, hr = 0x80070002

    OGA Notifications Data-->
    Cached Result: N/A, hr = 0x80070002
    Version: N/A, hr = 0x80070002
    OGAExec.exe Signed By: N/A, hr = 0x80070002
    OGAAddin.dll Signed By: N/A, hr = 0x80070002

    OGA Data-->
    Office Status: 109 N/A
    OGA Version: N/A, 0x80070002
    Signed By: N/A, hr = 0x80070002
    Office Diagnostics: B4D0AA8B-543-80070002_025D1FF3-364-80041010_025D1FF3-229-80041010_025D1FF3-230-1_025D1FF3-517-80040154_025D1FF3-237-80040154_025D1FF3-238-2_025D1FF3-244-80070002_025D1FF3-258-3

    Browser Data-->
    Proxy settings: N/A
    User Agent: Mozilla/4.0 (compatible; MSIE 8.0; Win32)
    Default Browser: C:\Program Files (x86)\Mozilla Firefox\firefox.exe
    Download signed ActiveX controls: Disabled
    Download unsigned ActiveX controls: Disabled
    Run ActiveX controls and plug-ins: Disabled
    Initialize and script ActiveX controls not marked as safe: Disabled
    Allow scripting of Internet Explorer Webbrowser control: Disabled
    Active scripting: Disabled
    Script ActiveX controls marked as safe for scripting: Disabled

    File Scan Data-->

    Other data-->
    Office Details: <GenuineResults><MachineData><UGUID>{8F2D769F-822F-4493-9DCD-A7B0F7676F32}</UGUID><Version>1.9.0027.0</Version><OS>6.1.7601.2.00030110.1.0.007</OS><Architecture>x64</Architecture><PKey>*****-*****-*****-*****-BBBBB</PKey><PID>55041-178-8094115-84644</PID><PIDType>6</PIDType><SID>S-1-5-21-656286308-1268218398-2113919334</SID><SYSTEM><Manufacturer>Supermicro</Manufacturer><Model>X9SCL/X9SCM</Model></SYSTEM><BIOS><Manufacturer>American Megatrends Inc.</Manufacturer><Version>1.1a</Version><SMBIOSVersion major="2" minor="7"/><Date>20110928000000.000000+000</Date></BIOS><HWID>29030E00018400FE</HWID><UserLCID>0409</UserLCID><SystemLCID>0409</SystemLCID><TimeZone>Central European Standard Time(GMT+01:00)</TimeZone><iJoin>0</iJoin><SBID><stat>3</stat><msppid></msppid><name></name><model></model></SBID><OEM/><GANotification/></MachineData><Software><Office><Result>109</Result><Products/><Applications/></Office></Software></GenuineResults>  

    Spsys.log Content: 0x80070002

    Licensing Data-->
    C:\Windows\system32\slmgr.vbs(1333, 5) Microsoft VBScript runtime error: Permission denied

    Windows Activation Technologies-->
    HrOffline: 0x00000000
    HrOnline: 0xC004C533
    HealthStatus: 0x0000000000000000
    Event Time Stamp: 11:29:2012 00:05
    ActiveX: Registered, Version: 7.1.7600.16395
    Admin Service: Registered, Version: 7.1.7600.16395
    HealthStatus Bitmask Output:


    HWID Data-->
    HWID Hash Current: LAAAAAAABAABAAEAAAAAAAAAAQABAAEAln3KXl7NYjRK3aLN1pVAWRoOLnM=

    OEM Activation 1.0 Data-->
    N/A

    OEM Activation 2.0 Data-->
    BIOS valid for OA 2.0: yes, but no SLIC table
    Windows marker version: N/A
    OEMID and OEMTableID Consistent: N/A
    BIOS Information:
      ACPI Table Name    OEMID Value    OEMTableID Value
      APIC            SUPERM        SMCI--MB
      FACP            SUPERM        SMCI--MB
      HPET            SUPERM        SMCI--MB
      MCFG            SUPERM        SMCI--MB
      SSDT            AMICPU        PROC
      SPMI            A M I         OEMSPMI
      EINJ            AMI        AMI EINJ
      ERST            AMIER        AMI ERST
      HEST            AMI        AMI HEST
      BERT            AMI        AMI BERT

    Wednesday, November 28, 2012 11:06 PM
  • Ok- in Regedit, go back to teh base sppsvc Key and right-click on it.

    Select Export.

    Save the file as 'sppcorr.reg'

    Upload it to your public SkyDrive and post a link


    Noel Paton | Nil Carborundum Illegitemi | CrashFixPC | The Three-toed Sloth

    Thursday, November 29, 2012 12:50 AM
    Moderator
  • where is "sppsvc" located in regedit? I only see ones under controlset2/services?
    Friday, November 30, 2012 4:56 AM
  • HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\sppsvc


    Noel Paton | Nil Carborundum Illegitemi | CrashFixPC | The Three-toed Sloth

    Friday, November 30, 2012 8:49 AM
    Moderator
  • Here is a link:

    https://skydrive.live.com/redir?resid=587B0C4447235052!123&authkey=!ABYSnZ6HeRinfqo

    Friday, November 30, 2012 6:17 PM
  • Sorry about the delay - I missed the post somehow!

    That looks normal.

    Please download the Farbar Service Scanner from

     

    http://www.bleepingcomputer.com/download/farbar-service-scanner/

     

    Run it, and tick all the options, then click on the Scan button - save the output to your desktop, then upload it to your Public SkyDrive, and post a link.

     

     


    Noel Paton | Nil Carborundum Illegitemi | CrashFixPC | The Three-toed Sloth

    Sunday, December 2, 2012 11:08 AM
    Moderator
  • Here is a link:

    https://skydrive.live.com/redir?resid=587B0C4447235052!124&authkey=!ACJ68my8YWX0b6Q

    Monday, December 3, 2012 1:58 AM
  • Now that's odd!

    The two missing services are the Windows Security Center, and the Backup service.

    Neither have anything directly to do with your problem, so far as I know, but could be indicators of more general problems.

    The fact that the two main files involved are also apparently missing  is worrying, as these files should have been protected.

    Please run a couple of system scans....

    Please run a full CHKDSK and SFC scan....

     

    Click on Start > All Programs > Accessories

    Right-click on the Command Prompt entry

    Select Run as Administrator and accept the UAC prompt - the Elevated Command Prompt window should pop up.

     

    At the Command prompt, type

     

    CHKDSK C: /R

     

    and hit the Enter key.

    You will be told that the drive is locked,

    and the CHKDSK will run at he next boot - hit the Y key, and then reboot.

     

    The CHKDSK will take a few hours depending on the size of the drive, so be patient!

     

    After the CHKDSK has run, Windows should boot normally (possibly after a second auto-reboot) -

    then run the SFC.

     

    SFC -System File Checker - Instructions

    Click on Start > All Programs > Accessories

    Right-click on the Command Prompt entry

    Select Run as Administrator and accept the UAC prompt - the Elevated Command Prompt window should pop up.

     

    At the Command prompt, type

     

    SFC /SCANNOW

     

    and hit the Enter key

     

    Wait for the scan to finish - make a note of any error messages - and then reboot.

     

     

    Copy the CBS.log file created (C:\Windows\Logs\CBS\CBS.log) to your desktop (you can't manipulate it directly) and then compress the copy and upload it to your SkyDrive (http://skydrive.live.com ) and post a link to it so that I can take a look.

     

    Post a new MGADiag report with details of any error messages encountered.


    Noel Paton | Nil Carborundum Illegitemi | CrashFixPC | The Three-toed Sloth

    Monday, December 3, 2012 8:54 AM
    Moderator
  • CHKDSK C: /R - Finished, but I wasn't sitting in front of it so I'm not sure if there was any errors, anyway to find out?

    SFC /SCANNOW - Finished without any errors, said there was no integrity problems.

    CBS.log: https://skydrive.live.com/redir?resid=587B0C4447235052!125&authkey=!ANIYJixCiTDNBnQ

    Diagnostic Report (1.9.0027.0):
    -----------------------------------------
    Windows Validation Data-->

    Validation Code: 50
    Cached Online Validation Code: N/A, hr = 0xc004f012
    Windows Product Key: N/A, hr=0x80070005
    Windows Product Key Hash: N/A, hr=0x80070005
    Windows Product ID: 55041-178-8094115-84644
    Windows Product ID Type: 6
    Windows License Type: Volume MAK
    Windows OS version: 6.1.7601.2.00030110.1.0.007
    ID: {8F2D769F-822F-4493-9DCD-A7B0F7676F32}(3)
    Is Admin: Yes
    TestCab: 0x0
    LegitcheckControl ActiveX: N/A, hr = 0x80070002
    Signed By: N/A, hr = 0x80070002
    Product Name: Windows Server 2008 R2 Standard
    Architecture: 0x00000009
    Build lab: 7601.win7sp1_gdr.120830-0333
    TTS Error:
    Validation Diagnostic:
    Resolution Status: N/A

    Vista WgaER Data-->
    ThreatID(s): N/A, hr = 0x80070002
    Version: N/A, hr = 0x80070002

    Windows XP Notifications Data-->
    Cached Result: N/A, hr = 0x80070002
    File Exists: No
    Version: N/A, hr = 0x80070002
    WgaTray.exe Signed By: N/A, hr = 0x80070002
    WgaLogon.dll Signed By: N/A, hr = 0x80070002

    OGA Notifications Data-->
    Cached Result: N/A, hr = 0x80070002
    Version: N/A, hr = 0x80070002
    OGAExec.exe Signed By: N/A, hr = 0x80070002
    OGAAddin.dll Signed By: N/A, hr = 0x80070002

    OGA Data-->
    Office Status: 109 N/A
    OGA Version: N/A, 0x80070002
    Signed By: N/A, hr = 0x80070002
    Office Diagnostics: B4D0AA8B-543-80070002_025D1FF3-364-80041010_025D1FF3-229-80041010_025D1FF3-230-1_025D1FF3-517-80040154_025D1FF3-237-80040154_025D1FF3-238-2_025D1FF3-244-80070002_025D1FF3-258-3

    Browser Data-->
    Proxy settings: N/A
    User Agent: Mozilla/4.0 (compatible; MSIE 8.0; Win32)
    Default Browser: C:\Program Files (x86)\Mozilla Firefox\firefox.exe
    Download signed ActiveX controls: Disabled
    Download unsigned ActiveX controls: Disabled
    Run ActiveX controls and plug-ins: Disabled
    Initialize and script ActiveX controls not marked as safe: Disabled
    Allow scripting of Internet Explorer Webbrowser control: Disabled
    Active scripting: Disabled
    Script ActiveX controls marked as safe for scripting: Disabled

    File Scan Data-->

    Other data-->
    Office Details: <GenuineResults><MachineData><UGUID>{8F2D769F-822F-4493-9DCD-A7B0F7676F32}</UGUID><Version>1.9.0027.0</Version><OS>6.1.7601.2.00030110.1.0.007</OS><Architecture>x64</Architecture><PKey>*****-*****-*****-*****-BBBBB</PKey><PID>55041-178-8094115-84644</PID><PIDType>6</PIDType><SID>S-1-5-21-656286308-1268218398-2113919334</SID><SYSTEM><Manufacturer>Supermicro</Manufacturer><Model>X9SCL/X9SCM</Model></SYSTEM><BIOS><Manufacturer>American Megatrends Inc.</Manufacturer><Version>1.1a</Version><SMBIOSVersion major="2" minor="7"/><Date>20110928000000.000000+000</Date></BIOS><HWID>29030E00018400FE</HWID><UserLCID>0409</UserLCID><SystemLCID>0409</SystemLCID><TimeZone>Central European Standard Time(GMT+01:00)</TimeZone><iJoin>0</iJoin><SBID><stat>3</stat><msppid></msppid><name></name><model></model></SBID><OEM/><GANotification/></MachineData><Software><Office><Result>109</Result><Products/><Applications/></Office></Software></GenuineResults>  

    Spsys.log Content: 0x80070002

    Licensing Data-->
    C:\Windows\system32\slmgr.vbs(1333, 5) Microsoft VBScript runtime error: Permission denied

    Windows Activation Technologies-->
    HrOffline: 0x00000000
    HrOnline: 0xC004C533
    HealthStatus: 0x0000000000000000
    Event Time Stamp: 11:29:2012 00:05
    ActiveX: Registered, Version: 7.1.7600.16395
    Admin Service: Registered, Version: 7.1.7600.16395
    HealthStatus Bitmask Output:


    HWID Data-->
    HWID Hash Current: LAAAAAAABAABAAEAAAAAAAAAAQABAAEAln3KXl7NYjRK3aLN1pVAWRoOLnM=

    OEM Activation 1.0 Data-->
    N/A

    OEM Activation 2.0 Data-->
    BIOS valid for OA 2.0: yes, but no SLIC table
    Windows marker version: N/A
    OEMID and OEMTableID Consistent: N/A
    BIOS Information:
      ACPI Table Name    OEMID Value    OEMTableID Value
      APIC            SUPERM        SMCI--MB
      FACP            SUPERM        SMCI--MB
      HPET            SUPERM        SMCI--MB
      MCFG            SUPERM        SMCI--MB
      SSDT            AMICPU        PROC
      SPMI            A M I         OEMSPMI
      EINJ            AMI        AMI EINJ
      ERST            AMIER        AMI ERST
      HEST            AMI        AMI HEST
      BERT            AMI        AMI BERT

    Tuesday, December 4, 2012 9:21 PM
  • I think I'm going to have to admit defeat - unless you want to carry on?

    Either way, I'm going to see if I can get some assistance on this issue from MS, as it's one of the few regular problems which still eludes me. This could take a few days - even if I'm successful.

    Best guess solution at the moment is a repair install :(

    Download the SP1 Refresh for your language and edition from the links on these pages...

    Heidoc - Microsoft DR Download links

    The links are for downloads from the Digital River servers run for MS, so are about as safe as you can get :)

    Once you have it downloaded, you then need to burn the DVD from it - use either the Windows Disk Image Burner, or (better still) your favourite burning application at the slowest speed possible.

    Note that you do NOT 'drag and drop' the file to the disk, you must use the 'burn an image' option from your app - or you'll end up with a useless coaster :)

    Once you have the disk burnt, check that it boots the (or any other) system OK - but do NOT start the repair from there - you must start the repair from within a normal Windows boot.

    Follow the instructions in this tutorial - http://www.sevenforums.com/tutorials/3413-repair-install.html

    - and they should help you get through it (it's not as difficult as it looks!)

    Always ask questions first if you're unsure - either here, or in sevenforums.

    Good luck with it!


    Noel Paton | Nil Carborundum Illegitemi | CrashFixPC | The Three-toed Sloth

    Tuesday, December 4, 2012 11:40 PM
    Moderator
  • Actually - last gasp thought....

    Please open Regedit.

    Navigate to

    HKEY_USERS\S-1-5-20

    right-click on the key, and select Permissions.

    Please note the list of users with permissions

    One should be Network Service - which should have Full and Read permissions.

    Does it?

    What other users have what permissions?


    Noel Paton | Nil Carborundum Illegitemi | CrashFixPC | The Three-toed Sloth

    Wednesday, December 5, 2012 12:04 AM
    Moderator
  • I might just ignore it, its not like their is a count down on its usage or anything like that. Updates also install without problems, it was just an annoyance. I still believe it has to do with the 3TB+ Unlock. Its to high of a coincidence for this issue to happen after installing it. Also the fact that several others have reported this is also suspicious. Which means if I go through the trouble of going through a reinstall & install 3TB unlock again I will be right back where I started.

    As for HKEY_USERS\S-1-5-20 Network Service has Full control. Restricted has Read, System has full control, Administrators have Full Control as well.

    Wednesday, December 5, 2012 12:34 AM
  • Those settings are normal.

    Don't forget that you won't get anything except Security updates while the system is flagged as non-genuine - so you will miss out on compatibility and performance enhancements as and if they appear.

    A repair install isn't all that difficullt, with the proper preparation.


    Noel Paton | Nil Carborundum Illegitemi | CrashFixPC | The Three-toed Sloth

    Wednesday, December 5, 2012 12:57 AM
    Moderator
  • This is actually a remote server, so without being physically in front of it, it can be hard to do anything involving discs.

    I guess I'll eventually make time and do a reinstall. If anything else comes to mind about this problem please let me know.

    Wednesday, December 5, 2012 5:42 PM
  • You can do a lot, remotely, with the proper preparation - including a clean install of the OS.

    I have to admit to zero knowledge of such situations, so perhaps you'd be better to ask in the ITPro forums for assistance....

    http://social.technet.microsoft.com/Forums/en-US/w7itproinstall/threads


    Noel Paton | Nil Carborundum Illegitemi | CrashFixPC | The Three-toed Sloth

    Wednesday, December 5, 2012 8:47 PM
    Moderator
  • Any progress? (or alternative solutions?)


    Noel Paton | Nil Carborundum Illegitemi | CrashFixPC | The Three-toed Sloth

    Saturday, December 8, 2012 8:39 AM
    Moderator
  • Nope, just give up on it for now.
    Monday, December 10, 2012 9:57 PM
  • Alright I think I have a work-around solution, as I just dealt with the issue myself. Several days ago I installed and ran the Gigabyte 3TB+ utility (v. B12.1102.01). I created the 3TB partition on an internal storage drive, and moved files onto it. I then noticed that I could no longer eject USB HD's (could still eject thumb drives) and was receiving the 0x80070005 error when trying to reactivate Windows. I tried to reactivate the activation store, with no luck. I then uninstalled the 3TB utility, and used system restore to go back before the 3TB utility. What do you know, Windows activates perfectly, I can eject my USB drives again, and the 3TB partition still works. I don't know what the utility does, but it sure screwed something up in Windows. I also don't know if my results can be duplicated, but hopefully it will help others out. Here are my specs:

    Gigabyte GA-970a-UD3 v1.1 BIOS F7

    AMD 955 BE 4.0GHz

    8GB G.Skill DDR 1600

    AMD Radeon 6950 1GB

    Antec NEO ECO 520C power supply

    OCZ Solid 3 128 GB SSD, Seagate ST3000DM001 3TB HDD

    Windows 7 x86_64 SP1

    Sunday, January 6, 2013 10:46 PM
  • Yes - I've heard that tale of woe (once) elsewhere - thanks for posting it here and confirming it.

    Have you checked on Gigabyte's forums for any word of the problem there?


    Noel Paton | Nil Carborundum Illegitemi | CrashFixPC | The Three-toed Sloth

    Sunday, January 6, 2013 10:57 PM
    Moderator
  • They don't seem to have any USA based forums, I personally need to use the remaining space on the 3TB drive.  So I'm sticking with the not genuine error, I also see windows update does more then just security updates, it does the same updates other windows 2008 R2 servers have. So on a personal late I just ignore it as it hasn't effected anything, obviously features of windows are still working.
    Monday, January 7, 2013 9:01 PM