locked
An Unauthorized change was made to windows RRS feed

  • Question

  • I'm installing Windows 7 systems here on a number of systems (eventually over 500) and randomly (not at a predictable time after installing something, and never on demand) getting messages that "An Unauthorized change was made to windows" that will result in limited windows functionality. It tells me to use a link to find out how to fix windows, which tells me to download and run "Windows Activation Technologies", which fails during install with error "0x80071A91". I've tried "fsutil resource setautoreset true C:\" and rebooting, but the install still fails. I've attached my Diagnostic report. I noticed the 'wat' files listed as 'mismatched', but they don't even exist on my system. Where in this report is the error listed? If I had some idea of what it was unhappy about perhaps I'd have a chance at fixing it. HELP!

    Diagnostic Report (1.9.0027.0):
    -----------------------------------------
    Windows Validation Data-->

    Validation Code: 0
    Cached Online Validation Code: N/A, hr = 0xc004f012
    Windows Product Key: *****-*****-2VJC9-XBBR8-HVTHH
    Windows Product Key Hash: k/l/EMDQdwK9OvdCkPtHG1YdosE=
    Windows Product ID: 00392-918-5000002-85970
    Windows Product ID Type: 1
    Windows License Type: KMS Client
    Windows OS version: 6.1.7600.2.00010100.0.0.004
    ID: {D7D4B904-2132-49CA-8817-F5341D18406B}(1)
    Is Admin: Yes
    TestCab: 0x0
    LegitcheckControl ActiveX: N/A, hr = 0x80070002
    Signed By: N/A, hr = 0x80070002
    Product Name: Windows 7 Enterprise
    Architecture: 0x00000009
    Build lab: 7600.win7_gdr.100618-1621
    TTS Error: T:20100819151402104-
    Validation Diagnostic: 
    Resolution Status: N/A

    Vista WgaER Data-->
    ThreatID(s): N/A, hr = 0x80070002
    Version: N/A, hr = 0x80070002

    Windows XP Notifications Data-->
    Cached Result: N/A, hr = 0x80070002
    File Exists: No
    Version: N/A, hr = 0x80070002
    WgaTray.exe Signed By: N/A, hr = 0x80070002
    WgaLogon.dll Signed By: N/A, hr = 0x80070002

    OGA Notifications Data-->
    Cached Result: N/A, hr = 0x80070002
    Version: N/A, hr = 0x80070002
    OGAExec.exe Signed By: N/A, hr = 0x80070002
    OGAAddin.dll Signed By: N/A, hr = 0x80070002

    OGA Data-->
    Office Status: 109 N/A
    OGA Version: N/A, 0x80070002
    Signed By: N/A, hr = 0x80070002
    Office Diagnostics: 025D1FF3-364-80041010_025D1FF3-229-80041010_025D1FF3-230-1_025D1FF3-517-80040154_025D1FF3-237-80040154_025D1FF3-238-2_025D1FF3-244-80070002_025D1FF3-258-3

    Browser Data-->
    Proxy settings: N/A
    User Agent: Mozilla/4.0 (compatible; MSIE 8.0; Win32)
    Default Browser: C:\Program Files (x86)\Internet Explorer\iexplore.exe
    Download signed ActiveX controls: Prompt
    Download unsigned ActiveX controls: Disabled
    Run ActiveX controls and plug-ins: Allowed
    Initialize and script ActiveX controls not marked as safe: Disabled
    Allow scripting of Internet Explorer Webbrowser control: Disabled
    Active scripting: Allowed
    Script ActiveX controls marked as safe for scripting: Allowed

    File Scan Data-->
    File Mismatch: C:\Windows\system32\wat\watadminsvc.exe[Hr = 0x80070003]
    File Mismatch: C:\Windows\system32\wat\npwatweb.dll[Hr = 0x80070003]
    File Mismatch: C:\Windows\system32\wat\watux.exe[Hr = 0x80070003]
    File Mismatch: C:\Windows\system32\wat\watweb.dll[Hr = 0x80070003]

    Other data-->
    Office Details: <GenuineResults><MachineData><UGUID>{D7D4B904-2132-49CA-8817-F5341D18406B}</UGUID><Version>1.9.0027.0</Version><OS>6.1.7600.2.00010100.0.0.004</OS><Architecture>x64</Architecture><PKey>*****-*****-*****-*****-HVTHH</PKey><PID>00392-918-5000002-85970</PID><PIDType>1</PIDType><SID>S-1-5-21-1020930582-2079127096-25508285</SID><SYSTEM><Manufacturer>Dell Inc.                </Manufacturer><Model>OptiPlex GX620               </Model></SYSTEM><BIOS><Manufacturer>Dell Inc.                </Manufacturer><Version>A11</Version><SMBIOSVersion major="2" minor="3"/><Date>20061130000000.000000+000</Date></BIOS><HWID>5ABB3607018400FC</HWID><UserLCID>0409</UserLCID><SystemLCID>0409</SystemLCID><TimeZone>Central Standard Time(GMT-06:00)</TimeZone><iJoin>1</iJoin><SBID><stat>3</stat><msppid></msppid><name></name><model></model></SBID><OEM/><GANotification/></MachineData><Software><Office><Result>109</Result><Products/><Applications/></Office></Software></GenuineResults>  

    Spsys.log Content: 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

    Licensing Data-->
    Software licensing service version: 6.1.7600.16385

    Name: Windows(R) 7, Enterprise edition
    Description: Windows Operating System - Windows(R) 7, VOLUME_KMSCLIENT channel
    Activation ID: ae2ee509-1b34-41c0-acb7-6d4650168915
    Application ID: 55c92734-d682-4d71-983e-d6ec3f16059f
    Extended PID: 00392-00170-918-500000-03-1033-7600.0000-2312010
    Installation ID: 004581116024517595655562339052890811415282971346163896
    Partial Product Key: HVTHH
    License Status: Licensed
    Volume activation expiration: 258120 minute(s) (179 day(s))
    Remaining Windows rearm count: 1
    Trusted time: 8/20/2010 9:50:04 AM

    Key Management Service client information
        Client Machine ID (CMID): 398a4bd1-2e3f-4830-94bd-c5ee8d31e3b8
        KMS machine name from DNS: kms1.ad.uwm.edu:1688
        KMS machine extended PID: 55041-00168-313-074919-03-1033-3790.0000-3032009
        Activation interval: 120 minutes
        Renewal interval: 10080 minutes
        KMS host caching is enabled

    Windows Activation Technologies-->
    HrOffline: 0x00000000
    HrOnline: N/A
    HealthStatus: 0x0000000000000000
    Event Time Stamp: N/A
    ActiveX: Not Registered - 0x80040154
    Admin Service: Not Registered - 0x80040154
    HealthStatus Bitmask Output:


    HWID Data-->
    HWID Hash Current: MgAAAAEABAABAAIAAAABAAAAAQABAAEA6GEcbPB5gv5I5Kp2ABvy8zLFqiWU5+wF7Ds=

    OEM Activation 1.0 Data-->
    N/A

    OEM Activation 2.0 Data-->
    BIOS valid for OA 2.0: yes, but no SLIC table
    Windows marker version: N/A
    OEMID and OEMTableID Consistent: N/A
    BIOS Information: 
      ACPI Table Name OEMID Value OEMTableID Value
      APIC DELL   GX620  
      FACP DELL   GX620  
      HPET DELL   GX620  
      BOOT DELL   GX620  
      SSDT DELL st_ex
      ASF! DELL   GX620  
      MCFG DELL   GX620  


    Thursday, August 26, 2010 7:52 PM

Answers

  • I think you are going to need to request help from some volume licensing people. If you are not sure who to contact then try this link, they may be able to help you or they may refer you to someone who handles volume licensing.

    http://support.microsoft.com/gp/contactwga

    All I can say is that most KMS issues I have seen discussed were related to network connectivity or firewall issues.

    Friday, August 27, 2010 2:34 AM