Re: Cannot install new printer drivers

Paul,

Thanks (not). Between what cleanspl could accomplish and what Bruce
Sanderson told me to do (including some things he said I shouldn't have let
cleanspl do) I have no printers at all, no BJ Language monitor, no standard
TCP/IP port, no fax, and I still get access denied from the Add Printer
Wizard.

I stopped a couple of processes that were putting irrelevant stuff in the
Process Monitor. This time, and the time before, Process Monitor showed only
one ACCESS DENIED event, and that was for a file creation, not a registry
value. There are no ACCESS DENIED events from the registry. As I remember,
the registry access that was denied before was for a desired access of
something like Length: 144, for a value that had previously been reported
with length 30.

I have no access problems in the registry as an administrator. I
successfully created and deleted a test subkey and a test value in the
registry key you named.

The whole Process Monitor output, saved in CSV format for the 35 seconds it
took to run the Add Printer Wizard, is nearly 5MB. I don't think you want
that posted here. A short segment, from the creation of the ...3\New folder
to ACCESS DENIED for a file creation in that folder, is posted below. I
stopped capturing events as soon as I could after I saw the failure message
from the wizard, and the log ended at 9:16:23.5789621 AM, about 0.6 seconds
after the ACCESS DENIED, so if there's any smoking gun, that would be it.

Let me know if you have any other ideas. If not, I hope System Restore and
my full registry export can bring back the printers I had.

"Sequence","Time of Day","Process
Name","PID","Operation","Path","Result","Detail"
"45412","9:16:22.9890210
AM","spoolsv.exe","1516","CreateFile","C:\WINDOWS\system32\spool\drivers\w32x86\3\New","NAME
NOT FOUND","Desired Access: Read Attributes, Disposition: Open, Options: Open
Reparse Point, Attributes: n/a, ShareMode: Read, Write, Delete,
AllocationSize: n/a, Impersonating: MARTIN\Martin"
"45413","9:16:22.9904913
AM","spoolsv.exe","1516","CreateFile","C:\WINDOWS\system32\spool\drivers\w32x86\3\New","SUCCESS","Desired
Access: Read Data/List Directory, Synchronize, Disposition: Create, Options:
Directory, Synchronous IO Non-Alert, Attributes: N, ShareMode: Read, Write,
AllocationSize: 0, OpenResult: Created"
"45414","9:16:22.9923549
AM","spoolsv.exe","1516","CloseFile","C:\WINDOWS\system32\spool\drivers\w32x86\3\New","SUCCESS",""
"45416","9:16:22.9937308
AM","spoolsv.exe","1516","CreateFile","C:\WINDOWS\system32\spool\drivers\w32x86\4282640","SUCCESS","Desired
Access: Read Data/List Directory, Synchronize, Disposition: Open, Options:
Directory, Synchronous IO Non-Alert, Attributes: n/a, ShareMode: Read, Write,
AllocationSize: n/a, Impersonating: MARTIN\Martin, OpenResult: Opened"
"45417","9:16:22.9947868
AM","spoolsv.exe","1516","QueryDirectory","C:\WINDOWS\system32\spool\drivers\w32x86\4282640\UNIDRV.DLL","SUCCESS","Filter: UNIDRV.DLL, 1: UNIDRV.DLL"
"45418","9:16:22.9958308
AM","spoolsv.exe","1516","CloseFile","C:\WINDOWS\system32\spool\drivers\w32x86\4282640","SUCCESS",""
"45420","9:16:22.9970586
AM","spoolsv.exe","1516","CreateFile","C:\WINDOWS\system32\spool\drivers\w32x86\3","SUCCESS","Desired
Access: Read Data/List Directory, Synchronize, Disposition: Open, Options:
Directory, Synchronous IO Non-Alert, Attributes: n/a, ShareMode: Read, Write,
AllocationSize: n/a, Impersonating: MARTIN\Martin, OpenResult: Opened"
"45421","9:16:22.9981098
AM","spoolsv.exe","1516","QueryDirectory","C:\WINDOWS\system32\spool\drivers\w32x86\3\UNIDRV.DLL","NO SUCH FILE","Filter: UNIDRV.DLL"
"45422","9:16:22.9991385
AM","spoolsv.exe","1516","CloseFile","C:\WINDOWS\system32\spool\drivers\w32x86\3","SUCCESS",""
"45424","9:16:23.0007049
AM","spoolsv.exe","1516","CreateFile","C:\WINDOWS\system32\spool\drivers\w32x86\3\New\UNIDRV.DLL","ACCESS
DENIED","Desired Access: Generic Write, Read Attributes, Disposition:
OverwriteIf, Options: Sequential Access, Synchronous IO Non-Alert,
Non-Directory File, Attributes: A, ShareMode: None, AllocationSize: 0,
Impersonating: MARTIN\Martin"

"Paul Baker [MVP, Windows - SDK]" wrote:

Martin,

I was actually looking for Bruce Sanderson's page and couldn't find it. Yes,
I would follow his instructions. It may resolve your problem.

What is the registry key that Process Monitor reported ACCESS DENIED for? If
access was granted shortly before and after on the same key, perhaps
different access was requested. The access requested should be logged. Can
you please email me the Print Monitor log so I can examine that?

The Process Monitor and Cleanspl results both suggest a registry permissions
problem.

Administrators should have Full Control to HKEY_LOCAL_MACHINE\SYSTEM and
that should be inherited by this key:
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Print\Environments\Windows
NT x86\Drivers\Version-3

You can also test permissions by creating a test subkey and test values.

Paul

"Martin Brilliant" <MartinBrilliant@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote in
message news:6B38CAE0-F923-40B6-B302-90071F2648BE@xxxxxxxxxxxxxxxx
.

Relevant Pages

  • Re: Cannot install new printer drivers
    ... What is the registry key that Process Monitor reported ACCESS DENIED for? ... The only ACCESS DENIED message I saw that had anything to do with the ...
    (microsoft.public.windowsxp.print_fax)
  • Re: hijack this startup - can someone tell me the hack i am experienci
    ... | *Registry key not found* ... | *Registry value not found* ... | Autorun entries from Registry: ... | Intel82801 Audio Driver Install Service: ...
    (microsoft.public.windowsxp.security_admin)
  • Help with Outlook profile script
    ... I would like to have a script that checks if the correct Outlook profile is configured in the users profile. ... Outlook profiles are configured in the following registry key: ...
    (microsoft.public.scripting.vbscript)
  • Re: Cannot install new printer drivers
    ... which files and folders do you have? ... This time, and the time before, Process Monitor showed ... There are no ACCESS DENIED events from the registry. ... Access: Read Data/List Directory, Synchronize, Disposition: Create, ...
    (microsoft.public.windowsxp.print_fax)
  • Re: Cannot Delete Registry Key
    ... > to the permissions on the bad key, ... >> [[Incorrectly editing the registry may severely damage your system. ... >> take ownership of the registry key by the current owner. ... >> MS-MVP Windows Shell/User ...
    (microsoft.public.windowsxp.security_admin)