locked
Help diagnosing a WGA problem... RRS feed

  • Question

  • A little over a week ago, I upgraded my GF's company from an ancient NT server to SBS 2003 R2. Because there are only 9 desktops at this location (and because they have huge profiles), I opted not to use USMT or some other tool, nor did I manually copy their profiles over to the new domain. Instead I did the following procedure:

    1) Login as local admin, change the domain membership to the new SBS domain, reboot.
    2) Login as the "new" domain user and immediately log out (to create a new profile).
    3) Login as domain admin; give "new" user full control over "old" users profile folder.
    4) Load Regedit; change the path of the profile folder of the "new" user to the "old" user.
    5) Loaded the "old" user's NTUSER.DAT hive into Regedit; gave "new" user full control over hive.
    6) Create "new" user as administrator on local machine.
    7) Install updates and other software; reboot; login as "new" user, change user from admin to user.
    8) Logoff.

    When I logged on to these machines as a user, I received the dreaded "you might be a victim of software counterfeiting" message. WGA validation would fail, and the primary reason given was that the user didn't have the rights to run the WGA tool. When I logged in as myself (an admin), or changed their status to local administrator, the WGA messages went away.

    Am I right in thinking that the WGA tool will only run under an Administrator account? Because if so, that simply won't work. I love my GF's co-workers to death, but these people are the very reason limited user accounts and UAC were invented in the first place. Or is there something about the way I migrated the user accounts that triggers WGA notifications?

    These desktops are all late 2005 Dell Optiplex and Dimension boxes with SP2 and all available updates applied. I ordered these computers from Dell myself, moved all of them from the shipping dock to their respective desks, unpacked them, etc. etc. etc. They are 100% genuine - unless Dell's up to something. As you might guess, they all have OEM installs of XP SP2 Pro.

    FWIW, I won't have access to these machines again for a day or two. I just thought I'd post here in advance so I'd have something to try when I get there (as opposed to posting when I get there and having to wait several hours for a response).

    Thank you,

    Jim
    (TheNuttyAdmin)

     

    Tuesday, February 27, 2007 6:31 AM

Answers

  • Sorry about the font... for some reason when I select "Normal", the type is teeny-tiny. ?!?
    Tuesday, February 27, 2007 6:35 AM
  • Jim:

     

    Can you run the diagnostics tool provided in this post (http://forums.microsoft.com/Genuine/ShowPost.aspx?PostID=1255325&SiteID=25 - near the bottom) on BOTH the administrator and the non-admin (when the problem occurs) accounts?

     

    The WGA Notifications tool must initially be installed and run as an administrator. After that, administrator access is not required.

     

    -phil

    Tuesday, February 27, 2007 7:49 PM
  • Here's a copy of the report when run as an administrator:

    Diagnostic Report (1.7.0012.0):
    -----------------------------------------
    WGA Data-->
    Validation Status: Genuine
    Detailed Status: N/A
    Windows Product Key: *****-*****-*****-*****-*****
    Windows Product Key Hash: 3g4CZGFEDgbKmn/oB4pa2FZsssU=
    Windows Product ID: 76487-OEM-2211906-00102
    Windows Product ID Type: 2
    Windows License Type: OEM SLP
    Windows OS version: 5.1.2600.2.00010100.2.0.pro
    ID: 72e15587-ea59-4e7c-997f-46a4956dc7f4
    Is Admin: No
    AutoDial:
    Registry: 0x0
    WGA Version: Registered, 1.5.540.0
    Signed By: Microsoft
    Product Name: N/A
    Architecture: N/A
    Build lab: N/A
    TTS Error: N/A
    Validation Diagnostic:
    Resolution Status: N/A

    Notifications Data-->
    Cached Result: 0
    File Exists: Yes
    Version: 1.5.540.0
    WgaTray.exe Signed By: Microsoft
    WgaLogon.dll Signed By: Microsoft

    OGA Data-->
    Office Status: 100 Genuine
    OGA Version: Failed to retrieve file version. - 0x80070002
    Signed By: N/A, hr = 0x80070002
    Office Diagnostics: FCEE394C-3178-80070002_B4D0AA8B-530-645

    Browser Data-->
    Proxy settings: N/A
    User Agent: Mozilla/4.0 (compatible; MSIE 7.0; Win32)
    Default Browser: C:\Program Files\Internet Explorer\IEXPLORE.exe
    Download signed ActiveX controls: Prompt
    Download unsigned ActiveX controls: Disabled
    Run ActiveX controls and plug-ins: Allowed
    Initialize and script ActiveX controls not marked as safe: Disabled
    Allow scripting of Internet Explorer Webbrowser control: Disabled
    Active scripting: Allowed
    Script ActiveX controls marked as safe for scripting: Allowed

    File Scan Data-->

    Other data-->
    Office Details: <GenuineResults><MachineData><UGUID>72e15587-ea59-4e7c-997f-46a4956dc7f4</UGUID><Version>1.7.0012.0</Version><OS>5.1.2600.2.00010100.2.0.pro</OS><PKey>*****-*****-*****-*****-YD4YT</PKey><PID>76487-OEM-2211906-00102</PID><PIDType>2</PIDType><SID>S-1-5-21-3901818768-507121455-3475426183</SID><SYSTEM><Manufacturer>Dell Inc.                </Manufacturer><Model>Dell DV051                   </Model></SYSTEM><BIOS><Manufacturer>Dell Inc.                </Manufacturer><Version>A03</Version><SMBIOSVersion major="2" minor="3"/><Date>20051008000000.000000+000</Date><SLPBIOS>Dell System,Dell Computer,Dell System,Dell System</SLPBIOS></BIOS><HWID>EA8B38470184EE5D</HWID><UserLCID>0409</UserLCID><SystemLCID>0409</SystemLCID><TimeZone>Eastern Standard Time(GMT-05:00)</TimeZone><iJoin>1</iJoin><SBID><stat>2</stat><msppid></msppid><name>Dell Dimension DV051</name><model></model></SBID><OEM/></MachineData>   <Software><Office><Result>100</Result><Products><Product GUID="{90110409-6000-11D3-8CFE-0150048383C9}"><LegitResult>100</LegitResult><Name>Microsoft Office Professional Edition 2003</Name><Ver>11</Ver><Val>6B73C07E2B70500</Val><Hash>obXTRCzn9N3obDtvWyhvVdyLGD0=</Hash><Pid>73931-640-4028412-57245</Pid><PidType>14</PidType></Product></Products></Office></Software></GenuineResults> 

    Unfortunately (or not!) I am a consultant for this company and will not be onsite there for a few days. I'd do it remotely via RDP, but you must be an admin to log on to a box remotely, right? Even if I give a standard user login rights on the My Computer > Remote tab, I still cannot log in to these machines remotely, so I *have* to run this as an Administrator at the moment.

    Tomorrow I'll see if my missus is willing to let me use her box as a guinea pig via VNC, and if so I'll post the results then.

    But my next question is: what does one do if they try to run the WGA Notifications Tool as a user? Is the machine permanently blinkered, or can one login as an admin, run the tool to validate Windows, then kick the user's rights back down to a standard user? I thought I tried doing just this, but it was around 3AM when this all started, so my memory might be a bit fuzzy!

    Thanks,

    Jim

    Wednesday, February 28, 2007 5:54 AM
  • Heya Jim:

     

    It looks like the computer is running perfectly fine under Admin. You aren't having any non-genuine Notifications. Can you clarify the issue you're having on your user accounts you've created?

     

    There are 3 types of Notifications:

    1 - Login interrupt - the dialogue box interrupts you for 5 seconds during login.

    2 - login splash background - you should see a non-genuine message in the background during login.

    3 - system tray notifications - you should see the WGA Star and messages from your system tray.

     

    Which one(s) are you seeing under your user accounts?

     

    The WGA Notifications installer (run under user) will simply not install - it works alot like Automatic Updates - where the user must have admin privileges in order to update the machine, otherwise the user will get nagged to download and update the machine :).

     

    -phil

    Wednesday, February 28, 2007 8:17 PM

All replies

  • Sorry about the font... for some reason when I select "Normal", the type is teeny-tiny. ?!?
    Tuesday, February 27, 2007 6:35 AM
  • Jim:

     

    Can you run the diagnostics tool provided in this post (http://forums.microsoft.com/Genuine/ShowPost.aspx?PostID=1255325&SiteID=25 - near the bottom) on BOTH the administrator and the non-admin (when the problem occurs) accounts?

     

    The WGA Notifications tool must initially be installed and run as an administrator. After that, administrator access is not required.

     

    -phil

    Tuesday, February 27, 2007 7:49 PM
  • Here's a copy of the report when run as an administrator:

    Diagnostic Report (1.7.0012.0):
    -----------------------------------------
    WGA Data-->
    Validation Status: Genuine
    Detailed Status: N/A
    Windows Product Key: *****-*****-*****-*****-*****
    Windows Product Key Hash: 3g4CZGFEDgbKmn/oB4pa2FZsssU=
    Windows Product ID: 76487-OEM-2211906-00102
    Windows Product ID Type: 2
    Windows License Type: OEM SLP
    Windows OS version: 5.1.2600.2.00010100.2.0.pro
    ID: 72e15587-ea59-4e7c-997f-46a4956dc7f4
    Is Admin: No
    AutoDial:
    Registry: 0x0
    WGA Version: Registered, 1.5.540.0
    Signed By: Microsoft
    Product Name: N/A
    Architecture: N/A
    Build lab: N/A
    TTS Error: N/A
    Validation Diagnostic:
    Resolution Status: N/A

    Notifications Data-->
    Cached Result: 0
    File Exists: Yes
    Version: 1.5.540.0
    WgaTray.exe Signed By: Microsoft
    WgaLogon.dll Signed By: Microsoft

    OGA Data-->
    Office Status: 100 Genuine
    OGA Version: Failed to retrieve file version. - 0x80070002
    Signed By: N/A, hr = 0x80070002
    Office Diagnostics: FCEE394C-3178-80070002_B4D0AA8B-530-645

    Browser Data-->
    Proxy settings: N/A
    User Agent: Mozilla/4.0 (compatible; MSIE 7.0; Win32)
    Default Browser: C:\Program Files\Internet Explorer\IEXPLORE.exe
    Download signed ActiveX controls: Prompt
    Download unsigned ActiveX controls: Disabled
    Run ActiveX controls and plug-ins: Allowed
    Initialize and script ActiveX controls not marked as safe: Disabled
    Allow scripting of Internet Explorer Webbrowser control: Disabled
    Active scripting: Allowed
    Script ActiveX controls marked as safe for scripting: Allowed

    File Scan Data-->

    Other data-->
    Office Details: <GenuineResults><MachineData><UGUID>72e15587-ea59-4e7c-997f-46a4956dc7f4</UGUID><Version>1.7.0012.0</Version><OS>5.1.2600.2.00010100.2.0.pro</OS><PKey>*****-*****-*****-*****-YD4YT</PKey><PID>76487-OEM-2211906-00102</PID><PIDType>2</PIDType><SID>S-1-5-21-3901818768-507121455-3475426183</SID><SYSTEM><Manufacturer>Dell Inc.                </Manufacturer><Model>Dell DV051                   </Model></SYSTEM><BIOS><Manufacturer>Dell Inc.                </Manufacturer><Version>A03</Version><SMBIOSVersion major="2" minor="3"/><Date>20051008000000.000000+000</Date><SLPBIOS>Dell System,Dell Computer,Dell System,Dell System</SLPBIOS></BIOS><HWID>EA8B38470184EE5D</HWID><UserLCID>0409</UserLCID><SystemLCID>0409</SystemLCID><TimeZone>Eastern Standard Time(GMT-05:00)</TimeZone><iJoin>1</iJoin><SBID><stat>2</stat><msppid></msppid><name>Dell Dimension DV051</name><model></model></SBID><OEM/></MachineData>   <Software><Office><Result>100</Result><Products><Product GUID="{90110409-6000-11D3-8CFE-0150048383C9}"><LegitResult>100</LegitResult><Name>Microsoft Office Professional Edition 2003</Name><Ver>11</Ver><Val>6B73C07E2B70500</Val><Hash>obXTRCzn9N3obDtvWyhvVdyLGD0=</Hash><Pid>73931-640-4028412-57245</Pid><PidType>14</PidType></Product></Products></Office></Software></GenuineResults> 

    Unfortunately (or not!) I am a consultant for this company and will not be onsite there for a few days. I'd do it remotely via RDP, but you must be an admin to log on to a box remotely, right? Even if I give a standard user login rights on the My Computer > Remote tab, I still cannot log in to these machines remotely, so I *have* to run this as an Administrator at the moment.

    Tomorrow I'll see if my missus is willing to let me use her box as a guinea pig via VNC, and if so I'll post the results then.

    But my next question is: what does one do if they try to run the WGA Notifications Tool as a user? Is the machine permanently blinkered, or can one login as an admin, run the tool to validate Windows, then kick the user's rights back down to a standard user? I thought I tried doing just this, but it was around 3AM when this all started, so my memory might be a bit fuzzy!

    Thanks,

    Jim

    Wednesday, February 28, 2007 5:54 AM
  • Heya Jim:

     

    It looks like the computer is running perfectly fine under Admin. You aren't having any non-genuine Notifications. Can you clarify the issue you're having on your user accounts you've created?

     

    There are 3 types of Notifications:

    1 - Login interrupt - the dialogue box interrupts you for 5 seconds during login.

    2 - login splash background - you should see a non-genuine message in the background during login.

    3 - system tray notifications - you should see the WGA Star and messages from your system tray.

     

    Which one(s) are you seeing under your user accounts?

     

    The WGA Notifications installer (run under user) will simply not install - it works alot like Automatic Updates - where the user must have admin privileges in order to update the machine, otherwise the user will get nagged to download and update the machine :).

     

    -phil

    Wednesday, February 28, 2007 8:17 PM