locked
No longer Genuine - Access Denied RRS feed

  • Question

  • Hi

    Can anyone help

    One of our users has reported that their machine suddenly says "Windows is not genuine" "This may be a counterfeit copy" etc

    This has been fine for around month (and definitely said activated). Im a little worried that machines built at the same time may get the same issue. The user in question insists no new hardware or software was added to cause the issue.

    I have tried running the WGA website however this never finished loading (Javascript error if you click on the IE warning).

    The main issue when i try and run anything i get Access Denied issues. i.e. running slmgr /ipk <Prodkey>, windows updates etc. I run them all logged in as local admin and also "Run as admin" however it complains about not having permission.

    I have checked System32 and the permissions are fine.


    I have tried:
    - reregistering the Product key from the sticker on the machine (Different to the one WGADiags shows)
    - Rang SFC /Scannow and no errors
    - Checked kb 2008385 and GPOs arent causing issues with Plug and Play service. sdcshow plugplay looks as per the kb
    - Created another admin and tested different accounts, also made sure when i ran anything it was from an elevated cmd prompt
    - Tried recreating ACLs as per http://blogs.msdn.com/b/astebner/archive/2004/08/24/219764.aspx
    - System restore is disabled by GPO
    - Tried stopping sppsvc.exe, renaming tokens file, starting sppsvc.exe (also ensured its set to auto delayed)

    - Also triedresetting security as per other threads: secedit /configure /cfg %windir%\inf\defltbase.inf /db defltbase.sdb /verbose


    Various errors in the logs i.e. Installation of the Proof of Purchase failed. 0x80070005, Genuine validation failure:
     hr = 0x80070005


    Like i say this was working and now wont let me do anything to reregister the product key. It seems the admin account isnt acting like an admin account

    Any suggestions ?


    Thankyou in advance

     

     

    Diags below:

    Diagnostic Report (1.9.0027.0):
    -----------------------------------------
    Windows Validation Data-->

    Validation Code: 50
    Cached Online Validation Code: N/A, hr = 0x80070005
    Windows Product Key: *****-*****-M3DJT-4J3WC-733WD
    Windows Product Key Hash: xo+ajVSpae7/4VoZjS7m6JL0f3A=
    Windows Product ID: 00371-OEM-8992671-00524
    Windows Product ID Type: 2
    Windows License Type: OEM SLP
    Windows OS version: 6.1.7600.2.00010100.0.0.048
    ID: {D4B70E66-976D-4981-866E-5340DDA893D9}(1)
    Is Admin: Yes
    TestCab: 0x0
    LegitcheckControl ActiveX: N/A, hr = 0x80070002
    Signed By: N/A, hr = 0x80070002
    Product Name: Windows 7 Professional
    Architecture: 0x00000000
    Build lab: 7600.win7_gdr.100618-1621
    TTS Error:
    Validation Diagnostic:
    Resolution Status: N/A

    Vista WgaER Data-->
    ThreatID(s): N/A, hr = 0x80070002
    Version: N/A, hr = 0x80070002

    Windows XP Notifications Data-->
    Cached Result: N/A, hr = 0x80070002
    File Exists: No
    Version: N/A, hr = 0x80070002
    WgaTray.exe Signed By: N/A, hr = 0x80070002
    WgaLogon.dll Signed By: N/A, hr = 0x80070002

    OGA Notifications Data-->
    Cached Result: N/A, hr = 0x80070002
    Version: N/A, hr = 0x80070002
    OGAExec.exe Signed By: N/A, hr = 0x80070002
    OGAAddin.dll Signed By: N/A, hr = 0x80070002

    OGA Data-->
    Office Status: 100 Genuine
    2007 Microsoft Office system - 100 Genuine
    OGA Version: N/A, 0x80070002
    Signed By: N/A, hr = 0x80070002
    Office Diagnostics: 025D1FF3-364-80041010_025D1FF3-229-80041010_025D1FF3-230-1_025D1FF3-517-80040154_025D1FF3-237-80040154_025D1FF3-238-2_025D1FF3-244-80070002_025D1FF3-258-3_E2AD56EA-765-d003_E2AD56EA-766-0_E2AD56EA-134-80004005_70AFE6BE-656-80070057_E2AD56EA-815-80070057

    Browser Data-->
    Proxy settings: N/A
    User Agent: Mozilla/4.0 (compatible; MSIE 8.0; Win32)
    Default Browser: C:\Program Files\Internet Explorer\iexplore.exe
    Download signed ActiveX controls: Prompt
    Download unsigned ActiveX controls: Disabled
    Run ActiveX controls and plug-ins: Allowed
    Initialize and script ActiveX controls not marked as safe: Disabled
    Allow scripting of Internet Explorer Webbrowser control: Disabled
    Active scripting: Allowed
    Script ActiveX controls marked as safe for scripting: Allowed

    File Scan Data-->

    Other data-->
    Office Details: <GenuineResults><MachineData><UGUID>{D4B70E66-976D-4981-866E-5340DDA893D9}</UGUID><Version>1.9.0027.0</Version><OS>6.1.7600.2.00010100.0.0.048</OS><Architecture>x32</Architecture><PKey>*****-*****-*****-*****-733WD</PKey><PID>00371-OEM-8992671-00524</PID><PIDType>2</PIDType><SID>S-1-5-21-1970875023-2656869005-4171774320</SID><SYSTEM><Manufacturer>Dell Inc.</Manufacturer><Model>OptiPlex 980                 </Model></SYSTEM><BIOS><Manufacturer>Dell Inc.</Manufacturer><Version>A05</Version><SMBIOSVersion major="2" minor="6"/><Date>20101103000000.000000+000</Date></BIOS><HWID>83BB3607018400FE</HWID><UserLCID>0809</UserLCID><SystemLCID>0409</SystemLCID><TimeZone>GMT Standard Time(GMT+00:00)</TimeZone><iJoin>1</iJoin><SBID><stat>3</stat><msppid></msppid><name></name><model></model></SBID><OEM><OEMID>DELL  </OEMID><OEMTableID>B11K   </OEMTableID></OEM><GANotification/></MachineData><Software><Office><Result>100</Result><Products><Product GUID="{91120000-0031-0000-0000-0000000FF1CE}"><LegitResult>100</LegitResult><Name>2007 Microsoft Office system</Name><Ver>12</Ver><Val>55860A449BBADAE</Val><Hash>afWWS+P1FZSGnF2XAttE/cfvTYE=</Hash><Pid>89451-OEM-6672725-34641</Pid><PidType>4</PidType></Product></Products><Applications><App Id="15" Version="12" Result="100"/><App Id="16" Version="12" Result="100"/><App Id="18" Version="12" Result="100"/><App Id="19" Version="12" Result="100"/><App Id="1A" Version="12" Result="100"/><App Id="1B" Version="12" Result="100"/></Applications></Office></Software></GenuineResults> 

    Spsys.log Content: 0x80070002

    Licensing Data-->
    On a computer running Microsoft Windows non-core edition, run 'slui.exe 0x2a 0x46' to display the error text.
    Error: 0x46

    Windows Activation Technologies-->
    HrOffline: 0x00000000
    HrOnline: 0x00000000
    HealthStatus: 0x0000000000000000
    Event Time Stamp: 2:2:2011 14:52
    ActiveX: Registered, Version: 7.1.7600.16395
    Admin Service: Registered, Version: 7.1.7600.16395
    HealthStatus Bitmask Output:


    HWID Data-->
    HWID Hash Current: LgAAAAEAAgABAAEAAQABAAAAAQABAAEAeqhOpsS0pH5idZbipszSjUTbVg52Vg==

    OEM Activation 1.0 Data-->
    N/A

    OEM Activation 2.0 Data-->
    BIOS valid for OA 2.0: yes
    Windows marker version: 0x20001
    OEMID and OEMTableID Consistent: yes
    BIOS Information:
      ACPI Table Name OEMID Value OEMTableID Value
      APIC   DELL    B11K  
      FACP   DELL    B11K  
      HPET   DELL    B11K  
      BOOT   DELL    B11K  
      MCFG   DELL    B11K  
      SSDT   DELL  st_ex
      ASF!   DELL    B11K  
      TCPA   DELL    B11K  
      ____   DELL    B11K  
      SLIC   DELL    B11K  
      SSDT   DELL  st_ex

     

     

    Monday, February 28, 2011 2:21 PM

Answers

  • I guess this can be closed now. I couldnt get anywhere trying to get through on the phone, i was just bounced around for half hour

    I would have liked to have known what caused this however it meant someone being left without a machine. My colleague has run the "Upgrade" / Repairt option from media and this has fixed it. It has also took the key and activated, win Updates all reran and are happy so there is no sign of what caused the issue - though it appears its nothing to do with the key as its took that happily now.

    Hopefully its nothing to do with our sysprep image, as all the PCs in that department may start falling over with the same issue

    Thanks

     

     

    • Marked as answer by CegJD Tuesday, March 1, 2011 9:55 AM
    Tuesday, March 1, 2011 9:55 AM

All replies

  • Hi

    Can anyone help

    One of our users has reported that their machine suddenly says "Windows is not genuine" "This may be a counterfeit copy" etc

    This has been fine for around month (and definitely said activated). Im a little worried that machines built at the same time may get the same issue. The user in question insists no new hardware or software was added to cause the issue.

    I have tried running the WGA website however this never finished loading (Javascript error if you click on the IE warning).

    The main issue when i try and run anything i get Access Denied issues. i.e. running slmgr /ipk <Prodkey>, windows updates etc. I run them all logged in as local admin and also "Run as admin" however it complains about not having permission.

    I have checked System32 and the permissions are fine.


    I have tried:
    - reregistering the Product key from the sticker on the machine (Different to the one WGADiags shows)
    - Rang SFC /Scannow and no errors
    - Checked kb 2008385 and GPOs arent causing issues with Plug and Play service. sdcshow plugplay looks as per the kb
    - Created another admin and tested different accounts, also made sure when i ran anything it was from an elevated cmd prompt
    - Tried recreating ACLs as per http://blogs.msdn.com/b/astebner/archive/2004/08/24/219764.aspx
    - System restore is disabled by GPO
    - Tried stopping sppsvc.exe, renaming tokens file, starting sppsvc.exe (also ensured its set to auto delayed)

    - Also triedresetting security as per other threads: secedit /configure /cfg %windir%\inf\defltbase.inf /db defltbase.sdb /verbose


    Various errors in the logs i.e. Installation of the Proof of Purchase failed. 0x80070005, Genuine validation failure:
     hr = 0x80070005


    Like i say this was working and now wont let me do anything to reregister the product key. It seems the admin account isnt acting like an admin account

    Any suggestions ?


    Thankyou in advance

     

     

    Diags below:

    Diagnostic Report (1.9.0027.0):
    -----------------------------------------
    Windows Validation Data-->

    Validation Code: 50
    Cached Online Validation Code: N/A, hr = 0x80070005
    Windows Product Key: *****-*****-M3DJT-4J3WC-733WD
    Windows Product Key Hash: xo+ajVSpae7/4VoZjS7m6JL0f3A=
    Windows Product ID: 00371-OEM-8992671-00524
    Windows Product ID Type: 2
    Windows License Type: OEM SLP
    Windows OS version: 6.1.7600.2.00010100.0.0.048

    Licensing Data-->
    On a computer running Microsoft Windows non-core edition, run 'slui.exe 0x2a 0x46' to display the error text.
    Error: 0x46

     

    Unfortunately, your error message (highlighted) is one we've not seen very often in the forums, and when we have seen it, we've not been able to solve it -  or at least, the posters never returned to tell us that they had.
    Your best bet is to contact WGA support (it should be free - make sure that you choose options for Activation/Validation/WGA in the dropdowns)
     
    North America: http://support.microsoft.com/contactus/cu_sc_genadv_master?ws=support&ws=support#tab4
     
    Outside North America:
    http://support.microsoft.com/contactus/?ws=support#tab0
     
    If you do manage to solve it, please come back to let us know how?
     


     
     

    --


    Noel Paton | Nil Carborundum Illegitemi | CrashFixPC | The Three-toed Sloth
    Monday, February 28, 2011 10:47 PM
    Moderator
  • Thanks for the response, as the software comes preloaded with new Dell machines i presume they wont be able to assists, i will try them anyway though - when i figure out the number !
    Tuesday, March 1, 2011 8:45 AM
  • I guess this can be closed now. I couldnt get anywhere trying to get through on the phone, i was just bounced around for half hour

    I would have liked to have known what caused this however it meant someone being left without a machine. My colleague has run the "Upgrade" / Repairt option from media and this has fixed it. It has also took the key and activated, win Updates all reran and are happy so there is no sign of what caused the issue - though it appears its nothing to do with the key as its took that happily now.

    Hopefully its nothing to do with our sysprep image, as all the PCs in that department may start falling over with the same issue

    Thanks

     

     

    • Marked as answer by CegJD Tuesday, March 1, 2011 9:55 AM
    Tuesday, March 1, 2011 9:55 AM
  • I guess this can be closed now. I couldnt get anywhere trying to get through on the phone, i was just bounced around for half hour

    I would have liked to have known what caused this however it meant someone being left without a machine. My colleague has run the "Upgrade" / Repairt option from media and this has fixed it. It has also took the key and activated, win Updates all reran and are happy so there is no sign of what caused the issue - though it appears its nothing to do with the key as its took that happily now.

    Hopefully its nothing to do with our sysprep image, as all the PCs in that department may start falling over with the same issue

    Thanks

     

     


    If it were a SysPrep issue, I would have expected it to appear immediately after install, rather than some time later - you could always run MGADiag on one of the unaffected machines to test.
    I'd dearly have loved to know the cause/solution as well!
     
    At least your machine is now functional - and thanks for the feedback that a reinstall fixed it.
     
    Good luck!
     

    --


    Noel Paton | Nil Carborundum Illegitemi | CrashFixPC | The Three-toed Sloth
    Tuesday, March 1, 2011 10:31 AM
    Moderator