G
Guest
After installing the Windows Installer 3.1 I recieve errors such as the
following when running MSI's:
Product: .NET Framework Enterprise Code Access Security Policy -- Error
1305. Error reading from file C:\Temp\DotNet2_Ent_Sec_Pol.msi. System error
1008. Verify that the file exists and that you can access it.
This occurs under a local admin user.
In the Security event log there are the following entries:
1)
Event Type: Failure Audit
Event Source: Security
Event Category: Object Access
Event ID: 560
Date: 27/07/2006
Time: 11:57:21
User: dev\msarg5
Computer: LONBW1595
Description:
Object Open:
Object Server: Security
Object Type: Event
Object Name: \BaseNamedObjects\crypt32LogoffEvent
Handle ID: -
Operation ID: {0,2477587}
Process ID: 2384
Image File Name: C:\WINDOWS\system32\msiexec.exe
Primary User Name: msarg5
Primary Domain: dev
Primary Logon ID: (0x0,0x15FF8D)
Client User Name: -
Client Domain: -
Client Logon ID: -
Accesses: DELETE
READ_CONTROL
WRITE_DAC
WRITE_OWNER
SYNCHRONIZE
Query event state
Modify event state
Privileges: -
Restricted Sid Count: 0
For more information, see Help and Support Center at
http://go.microsoft.com/fwlink/events.asp.
2)
Event Type: Failure Audit
Event Source: Security
Event Category: Detailed Tracking
Event ID: 595
Date: 27/07/2006
Time: 11:57:21
User: dev\msarg5
Computer: LONBW1595
Description:
Indirect access to an object has been obtained:
Object Type: Port
Object Name: \RPC Control\ntsvcs
Process ID: 3924
Primary User Name: LONBW1595$
Primary Domain: DEV
Primary Logon ID: (0x0,0x3E7)
Client User Name: msarg5
Client Domain: dev
Client Logon ID: (0x0,0x15FF8D)
Accesses: Communicate using port
For more information, see Help and Support Center at
http://go.microsoft.com/fwlink/events.asp.
3) Event Type: Failure Audit
Event Source: Security
Event Category: Detailed Tracking
Event ID: 595
Date: 27/07/2006
Time: 11:57:21
User: dev\msarg5
Computer: LONBW1595
Description:
Indirect access to an object has been obtained:
Object Type: Port
Object Name: \RPC Control\ntsvcs
Process ID: 3924
Primary User Name: LONBW1595$
Primary Domain: DEV
Primary Logon ID: (0x0,0x3E7)
Client User Name: msarg5
Client Domain: dev
Client Logon ID: (0x0,0x15FF8D)
Accesses: Communicate using port
For more information, see Help and Support Center at
http://go.microsoft.com/fwlink/events.asp.
Any Ideas?
following when running MSI's:
Product: .NET Framework Enterprise Code Access Security Policy -- Error
1305. Error reading from file C:\Temp\DotNet2_Ent_Sec_Pol.msi. System error
1008. Verify that the file exists and that you can access it.
This occurs under a local admin user.
In the Security event log there are the following entries:
1)
Event Type: Failure Audit
Event Source: Security
Event Category: Object Access
Event ID: 560
Date: 27/07/2006
Time: 11:57:21
User: dev\msarg5
Computer: LONBW1595
Description:
Object Open:
Object Server: Security
Object Type: Event
Object Name: \BaseNamedObjects\crypt32LogoffEvent
Handle ID: -
Operation ID: {0,2477587}
Process ID: 2384
Image File Name: C:\WINDOWS\system32\msiexec.exe
Primary User Name: msarg5
Primary Domain: dev
Primary Logon ID: (0x0,0x15FF8D)
Client User Name: -
Client Domain: -
Client Logon ID: -
Accesses: DELETE
READ_CONTROL
WRITE_DAC
WRITE_OWNER
SYNCHRONIZE
Query event state
Modify event state
Privileges: -
Restricted Sid Count: 0
For more information, see Help and Support Center at
http://go.microsoft.com/fwlink/events.asp.
2)
Event Type: Failure Audit
Event Source: Security
Event Category: Detailed Tracking
Event ID: 595
Date: 27/07/2006
Time: 11:57:21
User: dev\msarg5
Computer: LONBW1595
Description:
Indirect access to an object has been obtained:
Object Type: Port
Object Name: \RPC Control\ntsvcs
Process ID: 3924
Primary User Name: LONBW1595$
Primary Domain: DEV
Primary Logon ID: (0x0,0x3E7)
Client User Name: msarg5
Client Domain: dev
Client Logon ID: (0x0,0x15FF8D)
Accesses: Communicate using port
For more information, see Help and Support Center at
http://go.microsoft.com/fwlink/events.asp.
3) Event Type: Failure Audit
Event Source: Security
Event Category: Detailed Tracking
Event ID: 595
Date: 27/07/2006
Time: 11:57:21
User: dev\msarg5
Computer: LONBW1595
Description:
Indirect access to an object has been obtained:
Object Type: Port
Object Name: \RPC Control\ntsvcs
Process ID: 3924
Primary User Name: LONBW1595$
Primary Domain: DEV
Primary Logon ID: (0x0,0x3E7)
Client User Name: msarg5
Client Domain: dev
Client Logon ID: (0x0,0x15FF8D)
Accesses: Communicate using port
For more information, see Help and Support Center at
http://go.microsoft.com/fwlink/events.asp.
Any Ideas?