Issue with Image Difference Engine

[Guest]

Hello,

I want to update my SP2-image to FP2007. I updated the configuration in TD,
tested the new image and all works fine. Then I executed IDIFF to create the
difference between my old and my new image. If I execute IDA, to apply the
changes to the old image, it works fine, if the old image is offline. But if
I boot my old image and execute IDA now I get the following errors in
IDALog.txt:

[2007/04/12-20:28:09.703] [ERROR] <idafiles::SingleRegKeyAdd>: (5) Failed
applying security (SACL)
'O:BAG:S-1-5-21-2025429265-1547161642-1801674531-513D(A;CI;KA;;;CO)(A;CI;KA;;;SY)(A;CI;KA;;;BA)(A;CI;KR;;;BU)(A;CI;CCDCLCSWRPSDRC;;;PU)' for 'HKCR' ...
[2007/04/12-20:28:09.703] [ERROR] <idafiles::RegKeyAdd>: (5) Failed
applying security attributes for registry key 'HKCR' ...
[2007/04/12-20:28:09.703] [ERROR] <idafiles::EndContext>: (5) Failed
updating registry key from 'HKCR' ...
[2007/04/12-20:28:09.703] [ERROR] <DiffXmlLoad::LoadUpdates>: (5) Failed
executing pExecNode->pEndContext for context RegistrySpecifier: ...
[2007/04/12-20:28:09.703] [ERROR] <Executor>: (16389) Failed loading
DiffXmlLoad object ...

Afterwards the changes are not applied. For me it seems so, that the tool
cannot modify the registry as needed. Is there perhaps any service, which has
to be stopped before, or any other things to do? In my case I need to work in
online-mode, because the changes have to be applied directly on the running
target at the customer. The target has no alternative OS to boot from.

Any help is very welcome,
Klaus

 

[Shayna Begun [MS]]

Klaus,

Looking at the return code 5 (Access Denied), it appears that you may not
have permission to do any modification to HKCR in registry. Can you open
the registry manually and modify the security settings on the
HKEY_CLASSES_ROOT (open regedit.exe, right-click on HKEY_CLASSES_ROOT,
select Permissions…).

If you cannot make the changes while running under that user account, you
will need to run IDA with the loglevel 3 under an account which does have
permission (usually Administrator or System) and send us the full log file
and idiffout.xml for further investigation.

Thanks,
- Shayna Begun
Customer Pre-Release Programs PM
Microsoft

 

[Guest]

Hello Shayna,

thank you for your response. My image runs with Administrator AutoLogon. So
everything I execute runs under Administrator account, also when I execute
IDA. The permissions for HKEY_CLASSES_ROOT in Regedit for Administrator shows
"Allow Full control" and "Allow Read".

Klaus

Klaus,

Looking at the return code 5 (Access Denied), it appears that you may not
have permission to do any modification to HKCR in registry. Can you open
the registry manually and modify the security settings on the
HKEY_CLASSES_ROOT (open regedit.exe, right-click on HKEY_CLASSES_ROOT,
select Permissions…).

If you cannot make the changes while running under that user account, you
will need to run IDA with the loglevel 3 under an account which does have
permission (usually Administrator or System) and send us the full log file
and idiffout.xml for further investigation.

Thanks,
- Shayna Begun
Customer Pre-Release Programs PM
Microsoft

Hello,

I want to update my SP2-image to FP2007. I updated the configuration in
TD,
tested the new image and all works fine. Then I executed IDIFF to create
the
difference between my old and my new image. If I execute IDA, to apply the
changes to the old image, it works fine, if the old image is offline. But
if
I boot my old image and execute IDA now I get the following errors in
IDALog.txt:

[2007/04/12-20:28:09.703] [ERROR] <idafiles::SingleRegKeyAdd>: (5) Failed
applying security (SACL)
'O:BAG:S-1-5-21-2025429265-1547161642-1801674531-513D(A;CI;KA;;;CO)(A;CI;KA;;;SY)(A;CI;KA;;;BA)(A;CI;KR;;;BU)(A;CI;CCDCLCSWRPSDRC;;;PU)'
for 'HKCR' ...
[2007/04/12-20:28:09.703] [ERROR] <idafiles::RegKeyAdd>: (5) Failed
applying security attributes for registry key 'HKCR' ...
[2007/04/12-20:28:09.703] [ERROR] <idafiles::EndContext>: (5) Failed
updating registry key from 'HKCR' ...
[2007/04/12-20:28:09.703] [ERROR] <DiffXmlLoad::LoadUpdates>: (5) Failed
executing pExecNode->pEndContext for context RegistrySpecifier: ...
[2007/04/12-20:28:09.703] [ERROR] <Executor>: (16389) Failed loading
DiffXmlLoad object ...

Afterwards the changes are not applied. For me it seems so, that the tool
cannot modify the registry as needed. Is there perhaps any service, which
has
to be stopped before, or any other things to do? In my case I need to work
in
online-mode, because the changes have to be applied directly on the
running
target at the customer. The target has no alternative OS to boot from.

Any help is very welcome,
Klaus

 

[Guest]

Shayna,

I've run IDA with loglevel 3 under Administrator account. The error messages
are still there. It produces a logfile about 28 MB in size. Can you please
give me an email adress, where I can send you the logfile and idiffout.xml?
Thanks,
Klaus

Klaus,

Looking at the return code 5 (Access Denied), it appears that you may not
have permission to do any modification to HKCR in registry. Can you open
the registry manually and modify the security settings on the
HKEY_CLASSES_ROOT (open regedit.exe, right-click on HKEY_CLASSES_ROOT,
select Permissions…).

If you cannot make the changes while running under that user account, you
will need to run IDA with the loglevel 3 under an account which does have
permission (usually Administrator or System) and send us the full log file
and idiffout.xml for further investigation.

Thanks,
- Shayna Begun
Customer Pre-Release Programs PM
Microsoft

Hello,

I want to update my SP2-image to FP2007. I updated the configuration in
TD,
tested the new image and all works fine. Then I executed IDIFF to create
the
difference between my old and my new image. If I execute IDA, to apply the
changes to the old image, it works fine, if the old image is offline. But
if
I boot my old image and execute IDA now I get the following errors in
IDALog.txt:

[2007/04/12-20:28:09.703] [ERROR] <idafiles::SingleRegKeyAdd>: (5) Failed
applying security (SACL)
'O:BAG:S-1-5-21-2025429265-1547161642-1801674531-513D(A;CI;KA;;;CO)(A;CI;KA;;;SY)(A;CI;KA;;;BA)(A;CI;KR;;;BU)(A;CI;CCDCLCSWRPSDRC;;;PU)'
for 'HKCR' ...
[2007/04/12-20:28:09.703] [ERROR] <idafiles::RegKeyAdd>: (5) Failed
applying security attributes for registry key 'HKCR' ...
[2007/04/12-20:28:09.703] [ERROR] <idafiles::EndContext>: (5) Failed
updating registry key from 'HKCR' ...
[2007/04/12-20:28:09.703] [ERROR] <DiffXmlLoad::LoadUpdates>: (5) Failed
executing pExecNode->pEndContext for context RegistrySpecifier: ...
[2007/04/12-20:28:09.703] [ERROR] <Executor>: (16389) Failed loading
DiffXmlLoad object ...

Afterwards the changes are not applied. For me it seems so, that the tool
cannot modify the registry as needed. Is there perhaps any service, which
has
to be stopped before, or any other things to do? In my case I need to work
in
online-mode, because the changes have to be applied directly on the
running
target at the customer. The target has no alternative OS to boot from.

Any help is very welcome,
Klaus

 

[Shayna Begun [MS]]

Klaus,

You can send the log file to "viewcust" at microsoft.com.

Thanks,
Shayna Begun
Customer Pre-Release Programs PM
Microsoft

Shayna,

I've run IDA with loglevel 3 under Administrator account. The error
messages
are still there. It produces a logfile about 28 MB in size. Can you please
give me an email adress, where I can send you the logfile and
idiffout.xml?
Thanks,
Klaus

Klaus,

Looking at the return code 5 (Access Denied), it appears that you may not
have permission to do any modification to HKCR in registry. Can you open
the registry manually and modify the security settings on the
HKEY_CLASSES_ROOT (open regedit.exe, right-click on HKEY_CLASSES_ROOT,
select Permissions…).

If you cannot make the changes while running under that user account, you
will need to run IDA with the loglevel 3 under an account which does have
permission (usually Administrator or System) and send us the full log
file
and idiffout.xml for further investigation.

Thanks,
- Shayna Begun
Customer Pre-Release Programs PM
Microsoft

Hello,

I want to update my SP2-image to FP2007. I updated the configuration in
TD,
tested the new image and all works fine. Then I executed IDIFF to
create
the
difference between my old and my new image. If I execute IDA, to apply
the
changes to the old image, it works fine, if the old image is offline.
But
if
I boot my old image and execute IDA now I get the following errors in
IDALog.txt:

[2007/04/12-20:28:09.703] [ERROR] <idafiles::SingleRegKeyAdd>: (5)
Failed
applying security (SACL)
'O:BAG:S-1-5-21-2025429265-1547161642-1801674531-513D(A;CI;KA;;;CO)(A;CI;KA;;;SY)(A;CI;KA;;;BA)(A;CI;KR;;;BU)(A;CI;CCDCLCSWRPSDRC;;;PU)'
for 'HKCR' ...
[2007/04/12-20:28:09.703] [ERROR] <idafiles::RegKeyAdd>: (5) Failed
applying security attributes for registry key 'HKCR' ...
[2007/04/12-20:28:09.703] [ERROR] <idafiles::EndContext>: (5) Failed
updating registry key from 'HKCR' ...
[2007/04/12-20:28:09.703] [ERROR] <DiffXmlLoad::LoadUpdates>: (5)
Failed
executing pExecNode->pEndContext for context RegistrySpecifier: ...
[2007/04/12-20:28:09.703] [ERROR] <Executor>: (16389) Failed loading
DiffXmlLoad object ...

Afterwards the changes are not applied. For me it seems so, that the
tool
cannot modify the registry as needed. Is there perhaps any service,
which
has
to be stopped before, or any other things to do? In my case I need to
work
in
online-mode, because the changes have to be applied directly on the
running
target at the customer. The target has no alternative OS to boot from.

Any help is very welcome,
Klaus

 

[Shayna Begun [MS]]

Klaus,

It seems that IDIFF tool identified an HKCR ownership change between for
HKCR. Then IDA is trying to change the ownership of HKCR root but it is
failing with an access denied error code. We are continuing to investigate
this, but for now, the work-around would be to manually delete the following
node from the Update section of Idiffout.xml and re-run the IDA:

<RegistrySpecifier Type="Key" Key="HKCR"
SDDL="O:BAG:S-1-5-21-2025429265-1547161642-1801674531-513D(A;CI;KA;;;CO)(A;CI;KA;;;SY)(A;CI;KA;;;BA)(A;CI;KR;;;BU)(A;CI;CCDCLCSWRPSDRC;;;PU)"
/>

Thanks,
Shayna Begun
Customer Pre-Release Programs PM
Microsoft

Shayna,

I've run IDA with loglevel 3 under Administrator account. The error
messages
are still there. It produces a logfile about 28 MB in size. Can you please
give me an email adress, where I can send you the logfile and
idiffout.xml?
Thanks,
Klaus

Klaus,

Looking at the return code 5 (Access Denied), it appears that you may not
have permission to do any modification to HKCR in registry. Can you open
the registry manually and modify the security settings on the
HKEY_CLASSES_ROOT (open regedit.exe, right-click on HKEY_CLASSES_ROOT,
select Permissions…).

If you cannot make the changes while running under that user account, you
will need to run IDA with the loglevel 3 under an account which does have
permission (usually Administrator or System) and send us the full log
file
and idiffout.xml for further investigation.

Thanks,
- Shayna Begun
Customer Pre-Release Programs PM
Microsoft

Hello,

I want to update my SP2-image to FP2007. I updated the configuration in
TD,
tested the new image and all works fine. Then I executed IDIFF to
create
the
difference between my old and my new image. If I execute IDA, to apply
the
changes to the old image, it works fine, if the old image is offline.
But
if
I boot my old image and execute IDA now I get the following errors in
IDALog.txt:

[2007/04/12-20:28:09.703] [ERROR] <idafiles::SingleRegKeyAdd>: (5)
Failed
applying security (SACL)
'O:BAG:S-1-5-21-2025429265-1547161642-1801674531-513D(A;CI;KA;;;CO)(A;CI;KA;;;SY)(A;CI;KA;;;BA)(A;CI;KR;;;BU)(A;CI;CCDCLCSWRPSDRC;;;PU)'
for 'HKCR' ...
[2007/04/12-20:28:09.703] [ERROR] <idafiles::RegKeyAdd>: (5) Failed
applying security attributes for registry key 'HKCR' ...
[2007/04/12-20:28:09.703] [ERROR] <idafiles::EndContext>: (5) Failed
updating registry key from 'HKCR' ...
[2007/04/12-20:28:09.703] [ERROR] <DiffXmlLoad::LoadUpdates>: (5)
Failed
executing pExecNode->pEndContext for context RegistrySpecifier: ...
[2007/04/12-20:28:09.703] [ERROR] <Executor>: (16389) Failed loading
DiffXmlLoad object ...

Afterwards the changes are not applied. For me it seems so, that the
tool
cannot modify the registry as needed. Is there perhaps any service,
which
has
to be stopped before, or any other things to do? In my case I need to
work
in
online-mode, because the changes have to be applied directly on the
running
target at the customer. The target has no alternative OS to boot from.

Any help is very welcome,
Klaus

 

[Guest]

Shayna,

I've deleted the entry in idiffout.xml und then run IDA again. Now it works
although there are some new error messages:

[ERROR] <idafiles::InnerDirectoryDelete>: (145) Failed deleting empty
directory 'C:\Program Files\Adobe\Acrobat 5.0\Reader\ActiveX' ...
[ERROR] <idafiles::InnerDirectoryDelete>: (145) Failed deleting directory
'C:\Program Files\Adobe\Acrobat 5.0\Reader\ActiveX' ...
[ERROR] <idafiles::InnerDirectoryDelete>: (145) Failed deleting directory
'C:\Program Files\Adobe\Acrobat 5.0\Reader' ...
[ERROR] <idafiles::InnerDirectoryDelete>: (145) Failed deleting directory
'C:\Program Files\Adobe\Acrobat 5.0' ...
[ERROR] <idafiles::InnerDirectoryDelete>: (145) Failed deleting empty
directory 'C:\Program Files\Adobe\Acrobat 5.0\Reader\ActiveX' ...
[ERROR] <idafiles::InnerDirectoryDelete>: (145) Failed deleting directory
'C:\Program Files\Adobe\Acrobat 5.0\Reader\ActiveX' ...
[ERROR] <idafiles::InnerDirectoryDelete>: (145) Failed deleting directory
'C:\Program Files\Adobe\Acrobat 5.0\Reader' ...
[ERROR] <idafiles::InnerDirectoryDelete>: (145) Failed deleting directory
'C:\Program Files\Adobe\Acrobat 5.0' ...
[ERROR] <idafiles::InnerDirectoryDelete>: (145) Failed deleting empty
directory 'C:\Program Files\Adobe\Acrobat 5.0\Reader\ActiveX' ...
[ERROR] <idafiles::InnerDirectoryDelete>: (145) Failed deleting directory
'C:\Program Files\Adobe\Acrobat 5.0\Reader\ActiveX' ...
[ERROR] <idafiles::InnerDirectoryDelete>: (145) Failed deleting directory
'C:\Program Files\Adobe\Acrobat 5.0\Reader' ...
[ERROR] <idafiles::InnerDirectoryDelete>: (145) Failed deleting directory
'C:\Program Files\Adobe\Acrobat 5.0' ...
[ERROR] <idafiles:irectoryDelete>: (145) Failed deleting directory
'C:\Program Files\Adobe' ...
[ERROR] <idafiles::EndContext>: (145) Failed deleting folder 'C:\Program
Files\Adobe' ...
[ERROR] <DiffXmlLoad::LoadUpdates>: (145) Failed executing
pExecNode->pEndContext for context FileSpecifier: ...
[ERROR] <Executor>: (16389) Failed loading DiffXmlLoad object ...

Acrobat was installed in the old image but isn't present in the new image,
so IDA correctly tried to delete the hole folder but failed with errors.
Perhaps it has something todo with the ActiveX Control which possibly was
still registered. But that doesn't matter very much. After rebooting the
device, I could manually delete the folder. I checked some new features of
the new image like MUI Language and others and it all works. So far the
workaround was successful. Can I allways delete this node in idiffout.xml
also, when I create new images with other components and configurations?
Thank you so far,
Klaus

Klaus,

It seems that IDIFF tool identified an HKCR ownership change between for
HKCR. Then IDA is trying to change the ownership of HKCR root but it is
failing with an access denied error code. We are continuing to investigate
this, but for now, the work-around would be to manually delete the following
node from the Update section of Idiffout.xml and re-run the IDA:

<RegistrySpecifier Type="Key" Key="HKCR"
SDDL="O:BAG:S-1-5-21-2025429265-1547161642-1801674531-513D(A;CI;KA;;;CO)(A;CI;KA;;;SY)(A;CI;KA;;;BA)(A;CI;KR;;;BU)(A;CI;CCDCLCSWRPSDRC;;;PU)"
/>

Thanks,
Shayna Begun
Customer Pre-Release Programs PM
Microsoft

Shayna,

I've run IDA with loglevel 3 under Administrator account. The error
messages
are still there. It produces a logfile about 28 MB in size. Can you please
give me an email adress, where I can send you the logfile and
idiffout.xml?
Thanks,
Klaus

Klaus,

Looking at the return code 5 (Access Denied), it appears that you may not
have permission to do any modification to HKCR in registry. Can you open
the registry manually and modify the security settings on the
HKEY_CLASSES_ROOT (open regedit.exe, right-click on HKEY_CLASSES_ROOT,
select Permissions…).

If you cannot make the changes while running under that user account, you
will need to run IDA with the loglevel 3 under an account which does have
permission (usually Administrator or System) and send us the full log
file
and idiffout.xml for further investigation.

Thanks,
- Shayna Begun
Customer Pre-Release Programs PM
Microsoft

Hello,

I want to update my SP2-image to FP2007. I updated the configuration in
TD,
tested the new image and all works fine. Then I executed IDIFF to
create
the
difference between my old and my new image. If I execute IDA, to apply
the
changes to the old image, it works fine, if the old image is offline.
But
if
I boot my old image and execute IDA now I get the following errors in
IDALog.txt:

[2007/04/12-20:28:09.703] [ERROR] <idafiles::SingleRegKeyAdd>: (5)
Failed
applying security (SACL)
'O:BAG:S-1-5-21-2025429265-1547161642-1801674531-513D(A;CI;KA;;;CO)(A;CI;KA;;;SY)(A;CI;KA;;;BA)(A;CI;KR;;;BU)(A;CI;CCDCLCSWRPSDRC;;;PU)'
for 'HKCR' ...
[2007/04/12-20:28:09.703] [ERROR] <idafiles::RegKeyAdd>: (5) Failed
applying security attributes for registry key 'HKCR' ...
[2007/04/12-20:28:09.703] [ERROR] <idafiles::EndContext>: (5) Failed
updating registry key from 'HKCR' ...
[2007/04/12-20:28:09.703] [ERROR] <DiffXmlLoad::LoadUpdates>: (5)
Failed
executing pExecNode->pEndContext for context RegistrySpecifier: ...
[2007/04/12-20:28:09.703] [ERROR] <Executor>: (16389) Failed loading
DiffXmlLoad object ...

Afterwards the changes are not applied. For me it seems so, that the
tool
cannot modify the registry as needed. Is there perhaps any service,
which
has
to be stopped before, or any other things to do? In my case I need to
work
in
online-mode, because the changes have to be applied directly on the
running
target at the customer. The target has no alternative OS to boot from.

Any help is very welcome,
Klaus

 

[Shayna Begun [MS]]

Klaus,

Our team is still looking into why the IDIFF tool creates that node, but for
now you should be fine deleting it.

Thank you,
Shayna Begun
Customer Pre-Release Programs PM
Microsoft

Shayna,

I've deleted the entry in idiffout.xml und then run IDA again. Now it
works
although there are some new error messages:

[ERROR] <idafiles::InnerDirectoryDelete>: (145) Failed deleting empty
directory 'C:\Program Files\Adobe\Acrobat 5.0\Reader\ActiveX' ...
[ERROR] <idafiles::InnerDirectoryDelete>: (145) Failed deleting directory
'C:\Program Files\Adobe\Acrobat 5.0\Reader\ActiveX' ...
[ERROR] <idafiles::InnerDirectoryDelete>: (145) Failed deleting directory
'C:\Program Files\Adobe\Acrobat 5.0\Reader' ...
[ERROR] <idafiles::InnerDirectoryDelete>: (145) Failed deleting directory
'C:\Program Files\Adobe\Acrobat 5.0' ...
[ERROR] <idafiles::InnerDirectoryDelete>: (145) Failed deleting empty
directory 'C:\Program Files\Adobe\Acrobat 5.0\Reader\ActiveX' ...
[ERROR] <idafiles::InnerDirectoryDelete>: (145) Failed deleting directory
'C:\Program Files\Adobe\Acrobat 5.0\Reader\ActiveX' ...
[ERROR] <idafiles::InnerDirectoryDelete>: (145) Failed deleting directory
'C:\Program Files\Adobe\Acrobat 5.0\Reader' ...
[ERROR] <idafiles::InnerDirectoryDelete>: (145) Failed deleting directory
'C:\Program Files\Adobe\Acrobat 5.0' ...
[ERROR] <idafiles::InnerDirectoryDelete>: (145) Failed deleting empty
directory 'C:\Program Files\Adobe\Acrobat 5.0\Reader\ActiveX' ...
[ERROR] <idafiles::InnerDirectoryDelete>: (145) Failed deleting directory
'C:\Program Files\Adobe\Acrobat 5.0\Reader\ActiveX' ...
[ERROR] <idafiles::InnerDirectoryDelete>: (145) Failed deleting directory
'C:\Program Files\Adobe\Acrobat 5.0\Reader' ...
[ERROR] <idafiles::InnerDirectoryDelete>: (145) Failed deleting directory
'C:\Program Files\Adobe\Acrobat 5.0' ...
[ERROR] <idafiles:irectoryDelete>: (145) Failed deleting directory
'C:\Program Files\Adobe' ...
[ERROR] <idafiles::EndContext>: (145) Failed deleting folder 'C:\Program
Files\Adobe' ...
[ERROR] <DiffXmlLoad::LoadUpdates>: (145) Failed executing
pExecNode->pEndContext for context FileSpecifier: ...
[ERROR] <Executor>: (16389) Failed loading DiffXmlLoad object ...

Acrobat was installed in the old image but isn't present in the new image,
so IDA correctly tried to delete the hole folder but failed with errors.
Perhaps it has something todo with the ActiveX Control which possibly was
still registered. But that doesn't matter very much. After rebooting the
device, I could manually delete the folder. I checked some new features of
the new image like MUI Language and others and it all works. So far the
workaround was successful. Can I allways delete this node in idiffout.xml
also, when I create new images with other components and configurations?
Thank you so far,
Klaus

Klaus,

It seems that IDIFF tool identified an HKCR ownership change between for
HKCR. Then IDA is trying to change the ownership of HKCR root but it is
failing with an access denied error code. We are continuing to
investigate
this, but for now, the work-around would be to manually delete the
following
node from the Update section of Idiffout.xml and re-run the IDA:

<RegistrySpecifier Type="Key" Key="HKCR"
SDDL="O:BAG:S-1-5-21-2025429265-1547161642-1801674531-513D(A;CI;KA;;;CO)(A;CI;KA;;;SY)(A;CI;KA;;;BA)(A;CI;KR;;;BU)(A;CI;CCDCLCSWRPSDRC;;;PU)"
/>

Thanks,
Shayna Begun
Customer Pre-Release Programs PM
Microsoft

Shayna,

I've run IDA with loglevel 3 under Administrator account. The error
messages
are still there. It produces a logfile about 28 MB in size. Can you
please
give me an email adress, where I can send you the logfile and
idiffout.xml?
Thanks,
Klaus


:

Klaus,

Looking at the return code 5 (Access Denied), it appears that you may
not
have permission to do any modification to HKCR in registry. Can you
open
the registry manually and modify the security settings on the
HKEY_CLASSES_ROOT (open regedit.exe, right-click on HKEY_CLASSES_ROOT,
select Permissions…).

If you cannot make the changes while running under that user account,
you
will need to run IDA with the loglevel 3 under an account which does
have
permission (usually Administrator or System) and send us the full log
file
and idiffout.xml for further investigation.

Thanks,
- Shayna Begun
Customer Pre-Release Programs PM
Microsoft

Hello,

I want to update my SP2-image to FP2007. I updated the configuration
in
TD,
tested the new image and all works fine. Then I executed IDIFF to
create
the
difference between my old and my new image. If I execute IDA, to
apply
the
changes to the old image, it works fine, if the old image is
offline.
But
if
I boot my old image and execute IDA now I get the following errors
in
IDALog.txt:

[2007/04/12-20:28:09.703] [ERROR] <idafiles::SingleRegKeyAdd>: (5)
Failed
applying security (SACL)
'O:BAG:S-1-5-21-2025429265-1547161642-1801674531-513D(A;CI;KA;;;CO)(A;CI;KA;;;SY)(A;CI;KA;;;BA)(A;CI;KR;;;BU)(A;CI;CCDCLCSWRPSDRC;;;PU)'
for 'HKCR' ...
[2007/04/12-20:28:09.703] [ERROR] <idafiles::RegKeyAdd>: (5) Failed
applying security attributes for registry key 'HKCR' ...
[2007/04/12-20:28:09.703] [ERROR] <idafiles::EndContext>: (5)
Failed
updating registry key from 'HKCR' ...
[2007/04/12-20:28:09.703] [ERROR] <DiffXmlLoad::LoadUpdates>: (5)
Failed
executing pExecNode->pEndContext for context RegistrySpecifier: ...
[2007/04/12-20:28:09.703] [ERROR] <Executor>: (16389) Failed
loading
DiffXmlLoad object ...

Afterwards the changes are not applied. For me it seems so, that the
tool
cannot modify the registry as needed. Is there perhaps any service,
which
has
to be stopped before, or any other things to do? In my case I need
to
work
in
online-mode, because the changes have to be applied directly on the
running
target at the customer. The target has no alternative OS to boot
from.

Any help is very welcome,
Klaus

 

[Guest]

Hello

as the same I want to update my old SP1 image to SP2, but I have problems
applying IDA, it says my idiffout.xml is invalid.

When I launch the ida.exe passing just the source (the xml file created
within the diff folder after
the execution of idiff.exe, it prompts me this message:

[2007/04/26-11:13:24.175] [INFO] *****Start XP Embedded Image Diff
Applier*****
[2007/04/26-11:13:24.175] [INFO] <Executor>: version 1.0.7.13

[2007/04/26-11:13:24.237] [ERROR] <DiffXmlLoad::Load>: Invalid xml
file '../diff/idiffout.xml'
...
[2007/04/26-11:13:24.237] [ERROR] <Executor>: (60971) Failed loading
DiffXmlLoad object ...

[2007/04/26-11:13:24.253] [INFO] *****End XP Embedded Image Diff
Applier*****

I don't know if I did something wrong or I have the wrong version of the
applications (I downloaded the file X13-59881.img, from
Windows XP ECE), or maybe I give wrong parameters... please some help!


Yves