Hello,
Thanks for your efforts and reply!
At this time, if the winreg key has been added in the registry, on the
Windows XP SP2, please add Local Service to the
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SecurePipeServers\winreg
key with Read - Allow permissions, and then test this issue again.
If this issue still exists, please refer to the following KB article to
reset the security settings to the default, and test this issue again.
313222: How To Reset Security Settings Back to the Defaults
http://support.microsoft.com/?id=313222
In addition, I noticed you said "Also in one KB I noted that it suggested
making sure the Permissions key was listed under the winreg key we started
talking about...My machines do not have a permissions key...all of them.
Is this normal? All I have is AllowedPaths...?" I am not sure what is the
KB number? Is this a Microsoft knowledge article?
Hope the suggestions help!
Thanks & Regards,
Ken Zhao
Microsoft Online Partner Support
Get Secure! -
www.microsoft.com/security
=====================================================
When responding to posts, please "Reply to Group" via your newsreader so
that others may learn and benefit from your issue.
=====================================================
This posting is provided "AS IS" with no warranties, and confers no rights.
--------------------
| Thread-Topic: Access Denied for Event Viewer or Regedit
| thread-index: AcXwZ2EvAoQ7cZrjQneIPLoo59M5FQ==
| X-WBNR-Posting-Host: 209.217.222.70
| From: "=?Utf-8?B?U211cmZtYW4=?=" <
[email protected]>
| References: <
[email protected]>
<
[email protected]>
<
[email protected]>
<
[email protected]>
| Subject: RE: Access Denied for Event Viewer or Regedit
| Date: Wed, 23 Nov 2005 11:52:05 -0800
| Lines: 345
| Message-ID: <
[email protected]>
| MIME-Version: 1.0
| Content-Type: text/plain;
| charset="Utf-8"
| Content-Transfer-Encoding: 7bit
| X-Newsreader: Microsoft CDO for Windows 2000
| Content-Class: urn:content-classes:message
| Importance: normal
| Priority: normal
| X-MimeOLE: Produced By Microsoft MimeOLE V6.00.3790.0
| Newsgroups: microsoft.public.windowsxp.help_and_support
| NNTP-Posting-Host: TK2MSFTNGXA03.phx.gbl 10.40.2.250
| Path: TK2MSFTNGXA02.phx.gbl!TK2MSFTNGXA03.phx.gbl
| Xref: TK2MSFTNGXA02.phx.gbl
microsoft.public.windowsxp.help_and_support:601402
| X-Tomcat-NG: microsoft.public.windowsxp.help_and_support
|
| Hi Ken.
| Well, regarding the KB, I confirmed that my GPO is being applied, by
using
| the Group Policy Results.
|
| Windows Firewall: Allow remote administration exception Enabled
| Default Domain Firewall Policy
| Allow unsolicited incoming messages from: 192.168.1.204,192.168.1.207
|
| ---
|
| In the mean time here is what I performed. I took my machine did a
system
| restore back to Monday Morning when I started the W2K upgrade...to XP
Pro.
| After the reboot, I noted that SP2 was still installed even after the
system
| restore. So I performed an Uninstall, which also removed all of my
Updates
| that I had made.
|
| I then rebooted, and tried my test again, but I still get the Access
Denied
| for Event Viewer and Regedit.
|
| I am re-applying SP2 and getting the machine to be in use again.
|
| The issue must have to do with the Upgrade from Windows 2000 to Windows
XP.
|
| I am using my Windows XP Core CD as part of my Open License, and choosing
| the Upgrade option when running under Windows 2000 and starting the
install.
|
| I am not using a Windows XP Upgrade CD...I never received one and was
told I
| could use my Open CD to perform the same step. I use the CD Key from the
| particular license that has the upgrades that I have specified. For
example
| Machines 1-5 are all on a particular license where I purchased 5 upgrades
| from Windows 2000 to XP. I then went and got the CD keys from the eOpen
site
| as usual, and performed the upgrade, it takes the keys. I am mentioning
all
| of this to make sure this is not the issue I am running into...?
|
| --
|
| Also in one KB I noted that it suggested making sure the Permissions key
was
| listed under the winreg key we started talking about...My machines do not
| have a permissions key...all of them. Is this normal? All I have is
| AllowedPaths...?
|
| Thanks
| J
|
| "Ken Zhao [MSFT]" wrote:
|
| > Hello,
| >
| > Thanks for your reply and additional info!
| >
| > I am not sure if you have tried the other methods that described in
| > KB840634. If not, I suggest you try the other two methods.
| >
| > If the problem persists, I will suggest you make the following test:
| > Please upgrade from Windows 2000 to Windows XP and not apply the SP2 on
a
| > test machine. And then test the issue again. It will help us narrow
down if
| > the issue is related to SP2 applying.
| >
| > In addition, if the problem starts occurring recently, I also suggest
you
| > perform a System Restore to revert back to the initial status or other
| > correct state.
| >
| > Note: If you have some important documents or files which are created
after
| > the restore point, please copy them to My Document. This is a
precaution to
| > take even if you are back to the initial status, files will still
remain in
| > My Documents.
| >
| > To restore your system to a previous state, we can use the following
steps:
| >
| > 1. Before you start, please close all open files and close all open
| > programs.
| > 2. Click "Start"; Click "Programs or All Programs"; Click
"Accessories";
| > Click "System Tools"; Click "System Restore". The System Restore user
| > interface should appear.
| > 3. Select "Restore my computer to an earlier time" and click "Next".
| > 4. From the restore points available, select an appropriate restore
point
| > when your system is working correctly and click "Next".
| > 5. Click "Next" again. The restore process will run and your system
will
| > restart automatically.
| > 6. After restarting, check whether your system functions correctly now.
If
| > not, you can undo your last restoration or select another restore point
in
| > System Restore user interface.
| >
| > 306084: How to restore the operating system to a previous state in
Windows
| > XP
| >
http://support.microsoft.com/default.aspx?scid=kb;en-us;306084
| >
| > Hope that helps!
| >
| > Thanks & Regards,
| >
| > Ken Zhao
| >
| > Microsoft Online Partner Support
| > Get Secure! -
www.microsoft.com/security
| >
| > =====================================================
| > When responding to posts, please "Reply to Group" via your newsreader
so
| > that others may learn and benefit from your issue.
| > =====================================================
| > This posting is provided "AS IS" with no warranties, and confers no
rights.
| >
| >
| >
| >
| >
| > --------------------
| > | Thread-Topic: Access Denied for Event Viewer or Regedit
| > | thread-index: AcXvdtGAYfQoli7vTdCiJSZhN4qjNA==
| > | X-WBNR-Posting-Host: 209.217.222.70
| > | From: "=?Utf-8?B?U211cmZtYW4=?=" <
[email protected]>
| > | References: <
[email protected]>
| > <
[email protected]>
| > | Subject: RE: Access Denied for Event Viewer or Regedit
| > | Date: Tue, 22 Nov 2005 07:10:05 -0800
| > | Lines: 175
| > | Message-ID: <
[email protected]>
| > | MIME-Version: 1.0
| > | Content-Type: text/plain;
| > | charset="Utf-8"
| > | Content-Transfer-Encoding: 7bit
| > | X-Newsreader: Microsoft CDO for Windows 2000
| > | Content-Class: urn:content-classes:message
| > | Importance: normal
| > | Priority: normal
| > | X-MimeOLE: Produced By Microsoft MimeOLE V6.00.3790.0
| > | Newsgroups: microsoft.public.windowsxp.help_and_support
| > | NNTP-Posting-Host: TK2MSFTNGXA03.phx.gbl 10.40.2.250
| > | Path: TK2MSFTNGXA02.phx.gbl!TK2MSFTNGP08.phx.gbl!TK2MSFTNGXA03.phx.gbl
| > | Xref: TK2MSFTNGXA02.phx.gbl
| > microsoft.public.windowsxp.help_and_support:600914
| > | X-Tomcat-NG: microsoft.public.windowsxp.help_and_support
| > |
| > | ADDITIONAL INFO-
| > |
| > | I also found this article 840634 entitled
| > | "You receive an "Access denied" or "The network path was not found"
error
| > | message when you try to remotely manage a computer that is running
| > Windows XP
| > | Service Pack 2"
| > |
| > | The article describes exactly the behavior that I am getting, I
mentioned
| > | that I use a GPO to make the setting, but I also tried the command
line
| > | option 1, and received an OK message that the command had completed.
| > |
| > | The event log shows nothing when I attempt to connect to the
workstation
| > and
| > | get the "access denied"
| > |
| > | THanks
| > | J
| > |
| > | "Ken Zhao [MSFT]" wrote:
| > |
| > | > Hello,
| > | >
| > | > Thank you for using newsgroup!
| > | >
| > | > From your post, it seems that you have two issues as below:
| > | > 1. You are encountering the same symptom which described in
KB892192.
| > | > However, you are not able to find the registry key winreg in
| > | >
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SecurePipeServers
| > to
| > | > set.
| > | > 2. Remote Desktop works just fine, but Help and Support does not,
it
| > just
| > | > prompts me to log into the workstation after detecting the user,
but
| > wants
| > | > to log off the user if you attempt to log on.
| > | >
| > | > You are using two different features in Windows XP. It seems that
these
| > two
| > | > questions are unrelated. Please understand that our newsgroup is an
| > issue
| > | > based service, meaning we usually respond to one question/issue per
| > post.
| > | > This will lessen the confusion for both of us, as well as ensure
that
| > our
| > | > results are accurate and not a result of a test for a different
| > question.
| > | > Therefore, I will work with you on the first question in this post.
| > | > Regarding the additional question, please open a new post so that
the
| > | > dedicated MS engineer can help you on it in a more efficient manner.
| > | >
| > | > For the first issue, please help me confirm the following
information
| > first:
| > | > 1. Does the issue (lack of registry key) only occur on the machines
| > with
| > | > OEM Windows XP Pro?
| > | > 2. Does the issue only occur on the specific registry key? What
about
| > other
| > | > registry keys?
| > | >
| > | > If the problem only occurs on the machines with OEM Windows XP Pro,
I
| > | > suspect this issue should be related to OEM. Since original
equipment
| > | > manufacturers (OEM) that preload Microsoft software on the
computers
| > and/or
| > | > peripherals they sell provides all support for those Microsoft
| > products.
| > | > Since OEM has customizes the Microsoft software for your specific
| > computer
| > | > system and is, therefore, I suggest you first contact the OEM
| > manufacturer
| > | > to see whether they are able to provide some help on this.
| > | >
| > | > At this moment, I also suggest you manually create the following
| > registry
| > | > keys in the problematic machines to see if it can help:
| > | >
| > | > Key Name:
| > | >
| >
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SecurePipeServers\winreg
| > | > Class Name: <NO CLASS>
| > | > Last Write Time: 2004-12-6 - 16:53
| > | > Value 0
| > | > Name: Description
| > | > Type: REG_SZ
| > | > Data: Registry Server
| > | >
| > | > Key Name:
| > | >
| >
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SecurePipeServers\winreg
| > | > \AllowedPaths
| > | > Class Name: <NO CLASS>
| > | > Last Write Time: 2004-12-6 - 16:53
| > | > Value 0
| > | > Name: Machine
| > | > Type: REG_MULTI_SZ
| > | > Data: System\CurrentControlSet\Control\ProductOptions
| > | > System\CurrentControlSet\Control\Print\Printers
| > | > System\CurrentControlSet\Control\Server
Applications
| > | > System\CurrentControlSet\Services\Eventlog
| > | > Software\Microsoft\OLAP Server
| > | > Software\Microsoft\Windows NT\CurrentVersion
| > | > System\CurrentControlSet\Control\ContentIndex
| > | > System\CurrentControlSet\Control\Terminal Server
| > | > System\CurrentControlSet\Control\Terminal
| > | > Server\UserConfig
| > | > System\CurrentControlSet\Control\Terminal
| > | > Server\DefaultUserConfiguration
| > | >
| > | > Hope the information helps!
| > | >
| > | > Thanks & Regards,
| > | >
| > | > Ken Zhao
| > | >
| > | > Microsoft Online Partner Support
| > | > Get Secure! -
www.microsoft.com/security
| > | >
| > | > =====================================================
| > | > When responding to posts, please "Reply to Group" via your
newsreader
| > so
| > | > that others may learn and benefit from your issue.
| > | > =====================================================
| > | > This posting is provided "AS IS" with no warranties, and confers no
| > rights.
| > | >
| > | >
| > | >
| > | >
| > | > --------------------
| > | > | Thread-Topic: Access Denied for Event Viewer or Regedit
| > | > | thread-index: AcXu51iP68TKX985Tqi5u6/vswFOpA==
| > | > | X-WBNR-Posting-Host: 209.217.222.70
| > | > | From: "=?Utf-8?B?U211cmZtYW4=?=" <
[email protected]>
| > | > | Subject: Access Denied for Event Viewer or Regedit
| > | > | Date: Mon, 21 Nov 2005 14:03:04 -0800
| > | > | Lines: 32
| > | > | Message-ID: <
[email protected]>
| > | > | MIME-Version: 1.0
| > | > | Content-Type: text/plain;
| > | > | charset="Utf-8"
| > | > | Content-Transfer-Encoding: 7bit
| > | > | X-Newsreader: Microsoft CDO for Windows 2000
| > | > | Content-Class: urn:content-classes:message
| > | > | Importance: normal
| > | > | Priority: normal
| > | > | X-MimeOLE: Produced By Microsoft MimeOLE V6.00.3790.0
| > | > | Newsgroups: microsoft.public.windowsxp.help_and_support
| > | > | NNTP-Posting-Host: TK2MSFTNGXA03.phx.gbl 10.40.2.250
| > | > | Path:
TK2MSFTNGXA02.phx.gbl!TK2MSFTNGP08.phx.gbl!TK2MSFTNGXA03.phx.gbl
| > | > | Xref: TK2MSFTNGXA02.phx.gbl
| > | > microsoft.public.windowsxp.help_and_support:600687
| > | > | X-Tomcat-NG: microsoft.public.windowsxp.help_and_support
| > | > |
| > | > | After upgrading several Windows 2000 Pro machines to Windows XP
Pro
| > and
| > | > | installing SP2, and all of the updates as of 11/21/2005, I am
| > noticing
| > | > some
| > | > | strange behavior.
| > | > |
| > | > | One is that when I attempt to connect to the Event Viewer or the
| > Registry
| > | > of
| > | > | another machine, I receive and access is denied error message.
When
| > I go
| > | > to
| > | > | the machine and look at the event log, I am not seeing anything
in
| > | > particular
| > | > | that points to such a problem.
| > | > |
| > | > | I looked at KB 892192 which was related to XP pro and W2K3, it
fits
| > the
| > | > | error to a "T", but when I traverse to the
| > | > | HKLM\SYSTEM\CurrentControlSet\Control\SecurePipeServers and look
for
| > | > | Permissions under the winreg setting, it does not exist...
| > | > |
| > | > | The second part to this is that Remote Desktop works just fine,
but
| > Help
| > | > and
| > | > | Support does not, it just prompts me to log into the workstation
| > after
| > | > | detecting the user, but wants to log off the user if I attempt to
log
| > on.
| > | > I
| > | > | am not sure if this is related or if this is another issue.
| > | > |
| > | > | The machine is part of a domain, and takes a Domain Firewall
Policy,
| > | > | machines that are OEM for XP Pro behave just fine, and everything
| > works
| > | > just
| > | > | fine.
| > | > |
| > | > | I am connecting from an XP Pro SP2 machine to the same, and each
| > machine
| > | > | that has been upgraded, behave the same way.
| > | > |
| > | > | Also, the HLKM... that I talked about above, does not exist on
any
| > other
| > | > XP
| > | > | OEM or otherwise machine. And GPEdit reports that the settings
are
| > in
| > | > fact
| > | > | alking place as expected for these machines as well.
| > | > |
| > | > | Thanks
| > | > | J
| > | > |
| > | >
| > | >
| > |
| >
| >
|
(A;CI;GA;;;BA)(A;;GR;;;BO)"