Re: Windows Server 2003 SP2 Fails - 'Access is Denied' (PLEASE HE

Hey Steve,

Sorry to hear that it didn't work...

Can you do a quick check of which process that is giving the access is denied? Im asking this because explorer.exe is showing NOT FOUND instead of ACCESS DENIED.

Also, run the installer with /verbose /ER /log:%userprofile%\desktop

It will force the installer to run with verbose and will show detailed error message. Have the file Zipped and send to my email again :)

--
Jabez Gan
Microsoft MVP: Windows Server - File Storage
"SteveR" <SteveR@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote in message news:52C26417-4249-4197-9743-5DE85D5F101B@xxxxxxxxxxxxxxxx
Jabez,

Here is the latest update.

As you suggested, I downloaded the freeRegistryFix program. I ended up
purchasing the tool because the free version does not clean beyond a certain
number of errors. I ran the utility a few times to clear out all of the
irregularities in the registry. There were quite a few.

I tried running the Sp2 update again and it failed again.

I was not able to get the Process MOnitor running (it could not load the
device driver). So I loaded the RegMon tool instead. I believe it will give
the same info.

I saved the log file. Below is the "tail -14 RegMon.log" of the log file.
When the process name switches from update.exe:3908 to explorer.exe:2416,
that is when the "Access is defined" message appears.

178488 1433.25622559 update.exe:3908 OpenKey HKLM\System\CurrentControlSet\Control\ComputerName REPARSE
178489 1433.25622559 update.exe:3908 OpenKey HKLM\SYSTEM\ControlSet001\Control\ComputerName SUCCESS
178490 1433.25634766 update.exe:3908 OpenKey HKLM\SYSTEM\ControlSet001\Control\ComputerName\ActiveComputerName SUCCESS
178491 1433.25634766 update.exe:3908 QueryValue HKLM\SYSTEM\ControlSet001\Control\ComputerName\ActiveComputerName\ComputerName SUCCESS "HOMER"
178492 1433.25634766 update.exe:3908 CloseKey HKLM\SYSTEM\ControlSet001\Control\ComputerName\ActiveComputerName SUCCESS
178493 1433.25646973 update.exe:3908 CloseKey HKLM\SYSTEM\ControlSet001\Control\ComputerName SUCCESS
178494 1433.28466797 explorer.exe:2416 OpenKey HKCU\Software\Classes\Applications\update.exe NOT FOUND
178495 1433.28479004 explorer.exe:2416 OpenKey HKCR\Applications\update.exe NOT FOUND
178496 1433.28491211 explorer.exe:2416 QueryValue HKCU\Software\Microsoft\Windows\ShellNoRoam\MUICache\C:\WINNT\SoftwareDistribution\Download\997d565a9b554014a4a76b1acff3b71d\i386\update\update.exe SUCCESS "Windows
Service Pack Setup"
178497 1433.28527832 explorer.exe:2416 OpenKey HKCU\Software\Classes\Applications\update.exe NOT FOUND
178498 1433.28527832 explorer.exe:2416 OpenKey HKCR\Applications\update.exe NOT FOUND
178499 1433.28540039 explorer.exe:2416 QueryValue HKCU\Software\Microsoft\Windows\ShellNoRoam\MUICache\C:\WINNT\SoftwareDistribution\Download\997d565a9b554014a4a76b1acff3b71d\i386\update\update.exe SUCCESS "Windows
Service Pack Setup"
178500 1433.28662109 explorer.exe:2416 OpenKey HKCU\Software\Classes\Applications\update.exe NOT FOUND
178501 1433.28662109 explorer.exe:2416 OpenKey HKCR\Applications\update.exe NOT FOUND

Any thoughts?

Steve

"Jabez Gan [MVP]" wrote:

Hi Steve,

Seemed to me that one or more of your registry key do not have the
permission to be modified by your current user.

I havent try this program yet but, please backup your registry and use this
registry fix software: http://www.freeregistryfix.com/

Once done, try installign again.

Since verbose logging has been reported that it doesn't work on Sp2, you
might need to use a registry monitoring tool: Process monitor. Whle the
setup is running, please run Process monitorto catch all registry read/write
access. Filter out the process to only show update.exe (if you are running
this file to isntall).

Process monitor can be found at:
http://www.microsoft.com/technet/sysinternals/utilities/processmonitor.mspx

For secedit, it is used to compare security templates. You can try that but
it might not work - if the registry is corrupted and not caused by the any
group policy security template.

:)

--
Jabez Gan
Microsoft MVP: Windows Server - File Storage
"SteveR" <SteveR@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote in message
news:79413BBE-AE99-419D-929E-387CF42C5FEC@xxxxxxxxxxxxxxxx
> Jabez.
>
> No problem. Which files do you want me to include?
>
> Thanks.
>
> Steve
>
>
> "Jabez Gan [MVP]" wrote:
>
>> Please zip the log file and email to me at mingteikg [ at ] mvps. org
>>
>> It could take some time before I respond back through email, so please >> be
>> patient ;)
>>
>> -- >> Jabez Gan
>> Microsoft MVP: Windows Server - File Storage
>> "SteveR" <SteveR@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote in message
>> news:66B2B0AC-2E2A-4242-AABE-6A4A99AC727E@xxxxxxxxxxxxxxxx
>> > Jabez,
>> >
>> > I rebooted in SAFE Mode so that I could rename the >> > SoftwareDistribution
>> > folder. After renaming the folder, I rebooted my server in standard
>> > mode.
>> > I
>> > then went to Windows Update, had the service check for the latest
>> > updates,
>> > it
>> > detected Windows Server 2003 SP2. I downloaded it (i wanted to get >> > a
>> > fresh
>> > copy). Then I went through the update process and it Failed again. >> > :-(
>> > Bummer...
>> >
>> > Is there some type of security audit I can run that reset registry
>> > settings
>> > to the defaults (e.g., secedit)
>> >
>> > I tried including the log files but there is a little to the size of >> > an
>> > email you can post. Is it possible I can email you the files? my
>> > email
>> > is
>> > steve.romankiw@xxxxxxxxxx
>> >
>> > Thanks.
>> >
>> > Steve
>> >
>> > PS. I appreciate the time and effort
>> >
>> >
>> >
>> > "Jabez Gan [MVP]" wrote:
>> >
>> >> Hey Steve,
>> >>
>> >> Please stop the service Automatic update and rename the
>> >> SoftwareDistribution
>> >> folder, and re-start the Automatic Update service.
>> >>
>> >> If it still fails, try rebootign to safe mode and see if you can do
>> >> the
>> >> installation there... If it fails, post the latest 2 log files ;)
>> >>
>> >> -- >> >> Jabez Gan
>> >> Microsoft MVP: Windows Server - File Storage
>> >> "SteveR" <SteveR@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote in message
>> >> news:112A1681-E668-4C99-8C00-16998EA8ADB3@xxxxxxxxxxxxxxxx
>> >> > Jabez,
>> >> >
>> >> > i am running the sp2 update as a member of the local >> >> > adminstrators
>> >> > group.
>> >> > I
>> >> > have even tried to run under the administrator username but this >> >> > did
>> >> > not
>> >> > work
>> >> > either.
>> >> >
>> >> > I tried your suggestion of renaming SoftwareDistibution.
>> >> > Unforatunately,
>> >> > something had a lock on this folder. I checked permissions and
>> >> > administrators had full-access. So, I renamed each of the
>> >> > sub-folders
>> >> > within
>> >> > SD. For example, DataStore became DataStore_.
>> >> >
>> >> > This update still failed.
>> >> >
>> >> > This time I have a different error message.
>> >> >
>> >> > 1186.062: Starting process: C:\WINNT\system32\rundll32.exe
>> >> > C:\WINNT\system32\sysdm.cpl,EnableExecuteProtectionSupport
>> >> > 1188.172: Return Code = 0
>> >> > 1188.172: Num Ticks for Copying files : 491203
>> >> > 1188.172: Starting process: C:\WINNT\uddisp.exe install
>> >> > "c:\22bc4df21616c092ee65fc\i386\\"
>> >> > 1189.172: Return Code = 0
>> >> > 1189.422: DoRegistryUpdates:UpdSpInstallFromInfSection Failed for
>> >> > ProductInstall.GlobalRegistryChanges.Install error: 0x5
>> >> > 1189.422: INF_REGISTRY Failed
>> >> > 1189.422: DoInstallation:DoRegistryUpdates failed
>> >> > 1211.406: Unregistration of sprecovr successful
>> >> > 1211.656: Access is denied.
>> >> > 1321.281: Message displayed to the user: Access is denied.
>> >> > 1321.281: User Input: OK
>> >> > 1321.312: Service Pack 2 installation did not complete.
>> >> >
>> >> > Select 'OK' to undo the changes that have been made.
>> >> > 1326.703: Message displayed to the user: Service Pack 2 >> >> > installation
>> >> > did
>> >> > not
>> >> > complete.
>> >> >
>> >> > Select 'OK' to undo the changes that have been made.
>> >> > 1326.703: User Input: OK
>> >> > 1326.719: Starting process:
>> >> > C:\WINNT\$NtServicePackUninstall$\spuninst\spuninst.exe /~ -u -z
>> >> > 1873.047: Software Update Rollback has completed with return code
>> >> > 0xbc2.
>> >> > This rollback requires a reboot.
>> >> > 1873.047: Service Pack 2 installation did not complete.
>> >> >
>> >> >
>> >> > What can I do to get more information? I have read on the web >> >> > that
>> >> > by
>> >> > setting the LogLevel to xFFFF you can get more detail >> >> > information.
>> >> > All
>> >> > these
>> >> > tips referred to XP. This does not seem to work for WS 2003.
>> >> >
>> >> > Thanks again for your help.
>> >> >
>> >> > Steve
>> >> >
>> >> > "Jabez Gan [MVP]" wrote:
>> >> >
>> >> >> Hey Steve,
>> >> >>
>> >> >> Hmm... What permission does the user account has? Have you tried
>> >> >> using
>> >> >> the
>> >> >> built in Administrator account to do the installation?
>> >> >>
>> >> >> Also try renaming the softwaredistribution folder to
>> >> >> softwaredistribution_
>> >> >> and re-run the installer...
>> >> >>
>> >> >> -- >> >> >> Jabez Gan
>> >> >> Microsoft MVP: Windows Server - File Storage
>> >> >> "SteveR" <SteveR@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote in message
>> >> >> news:CC597F90-EC11-47CC-B7F1-974FC077C656@xxxxxxxxxxxxxxxx
>> >> >> > Dear Community,
>> >> >> >
>> >> >> > I have search high and low for any anwswer to my Windows >> >> >> > Server
>> >> >> > 2003
>> >> >> > SP2
>> >> >> > upgrade, but I have not been able to find an answer.
>> >> >> >
>> >> >> > I am trying to upgrade my server from RTM to SP2. Each time I
>> >> >> > try
>> >> >> > to
>> >> >> > apply
>> >> >> > SP2 it fails with 'Access is Denied'. Then the system rolls >> >> >> > back
>> >> >> > its
>> >> >> > changes.
>> >> >> >
>> >> >> > I have reviewed the svcpack.log file. Here is a copy of the >> >> >> > tail
>> >> >> > end
>> >> >> > of
>> >> >> > the
>> >> >> > file.
>> >> >> >
>> >> >> > 1030.390: Starting process: C:\WINNT\system32\rundll32.exe
>> >> >> > C:\WINNT\system32\sysdm.cpl,EnableExecuteProtectionSupport
>> >> >> > 1031.937: Return Code = 0
>> >> >> > 1031.937: Num Ticks for Copying files : 417797
>> >> >> > 1031.937: Starting process: C:\WINNT\uddisp.exe install
>> >> >> > "c:\winnt\softwaredistribution\download\997d565a9b554014a4a76b1acff3b71d\i386\\"
>> >> >> > 1032.609: Return Code = 0
>> >> >> > 1032.953: DoRegistryUpdates:UpdSpInstallFromInfSection Failed >> >> >> > for
>> >> >> > ProductInstall.GlobalRegistryChanges.Install error: 0x5
>> >> >> > 1032.953: INF_REGISTRY Failed
>> >> >> > 1032.953: DoInstallation:DoRegistryUpdates failed
>> >> >> > 1053.125: Unregistration of sprecovr successful
>> >> >> > 1053.359: Access is denied.
>> >> >> > 31416.718: Message displayed to the user: Access is denied.
>> >> >> > 31416.718: User Input: OK
>> >> >> > 31416.734: Service Pack 2 installation did not complete.
>> >> >> >
>> >> >> > Select 'OK' to undo the changes that have been made.
>> >> >> > 31417.390: Message displayed to the user: Service Pack 2
>> >> >> > installation
>> >> >> > did
>> >> >> > not complete.
>> >> >> >
>> >> >> > Select 'OK' to undo the changes that have been made.
>> >> >> > 31417.390: User Input: OK
>> >> >> > 31417.390: Starting process:
>> >> >> > C:\WINNT\$NtServicePackUninstall$\spuninst\spuninst.exe >> >> >> > /~ -u -z
>> >> >> > 31919.500: Software Update Rollback has completed with return
>> >> >> > code
>> >> >> > 0xbc2.
>> >> >> > This rollback requires a reboot.
>> >> >> > 31919.515: Service Pack 2 installation did not complete.
>> >> >> >
>> >> >> >
>> >> >> > As you can see, it is not very helpful.
>> >> >> >
>> >> >> > I then tried modifying the
>> >> >> > HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Setup\LogLevel
>> >> >> > entry.
>> >> >> > I
>> >> >> > tried
>> >> >> > changing this value to xFFFF in order to get more versbose
>> >> >> > information
>> >> >> > in
>> >> >> > the
>> >> >> > setupapi.log file, but nothing help appeared in this file. In
>> >> >> > fact,
>> >> >> > prior
>> >> >> > to
>> >> >> > starting the SP2 upgrade, the value of LogLevel was xFFFF. >> >> >> > After
>> >> >> > starting
>> >> >> > the SP2 upgrade, LogLevel was changed to x200000000. This
>> >> >> > overrides
>> >> >> > my
>> >> >> > xFFFF.
>> >> >> >
>> >> >> > I am at a loss, any help would be appreciated.
>> >> >> >
>> >> >> > Thanks.
>> >> >> >
>> >> >> > Steve
>> >> >> >
>> >> >> >
>> >> >> >
>> >> >>
>> >> >>
>> >>
>> >>
>>
>>


.

Relevant Pages

  • Re: Weird registry behavior when writing to custom event log
    ... that is the name I would have to use in the registry. ... > by the security policy. ... > 7.01502752 aspnet_wp.exe:4512 OpenKey ...
    (microsoft.public.dotnet.security)
  • Re: WMI Win32_PerfFormattedData hosed - how to fix?
    ... I have tried the items mentioned below with no success. ... net stop winmgmt and net start winmgmt ... wbemperf.dll or wmicookr.dll are in the registry. ... I had a whole huge list of keys. ...
    (microsoft.public.win32.programmer.wmi)
  • Re: JAVA JRE 1.6 läuft nur im Administratormodus
    ... NT\CurrentVersion\Image File Execution Options\java.exe NOT FOUND ... 3447 28.35712814 java.exe:3116 OpenKey ... HKLM\System\CurrentControlSet\Control\Terminal Server SUCCESS Access: ... Access: 0x1 ...
    (de.comp.lang.java)
  • Weird registry behavior when writing to custom event log
    ... I created a custom event log named "MyCustomLog" and created a source within ... Security Exception ... HKLM\SYSTEM\CurrentControlSet\Services\EventLog SUCCESS ... aspnet_wp.exe:4512 OpenKey ...
    (microsoft.public.dotnet.security)
  • Re: GetStringValue silently fails
    ... I have only seen this problem with some registry values of type REG_SZ ... \NONREDIST SUCCESS Access: 0x1 ... Dim strValue ... Function ToHex(strLine) ...
    (microsoft.public.scripting.vbscript)