locked
Windows 7 SP1 Gold results in Fatal Error C0000022 on multiple machines RRS feed

  • Question

  • This is from my like thread at the MS Answers Forums , I neglected to post here instead of there by mistake since this forum is more focused on these types of issues.

    *******************

     

    I downloaded the SP1 from the MSDN website yesterday to start evaluating it before moving to a larger internal testbed.  I've now isntalled it on 4 W7 desktops and 2 2008R2 servers.  So far the servers have had no issues but 3 of the 4 desktops have resulted in the fatal errors.

     

    Installation within windows completes successfully and begins the first reboot.  After passing the BIOS and collecting $200 it then proceeds to start moving files and then registry settings.  The screen first shows Error C0000022 then it appears to try several times finally ending at Fatal error C0000022 and all activity stops.  Two of the machines were W7 64bit and one was W7 32bit.  The two 64 bi machines are identical HP 6005 Pro systems but the 32 bit machine is an older Motion PC 1300.

     

    W7 64 bit error message;

    Fatal error C0000022 applying update operation 97206 of 99701 (\Reg...)

     

    W7 32 bit error message;

    Fatal error C0000022 applying update operation 76747 of 78477 (\Reg...)

     

    On the two 64 bit machines shutting down, hitting F8 at bootup, and loading safe mode is what fixed this issue.  It would The auto repair and last known good options both resulted in the same Fatal Error C0000022.  The 32 bit machine is having issues getting to the F8 menu so I am unsure if it will fix it or not yet.

     

    I finally got the 32 bit machine to go into the F8 menu (finicky keyboard) and loaded safe mode.  This fixed the issue as well for this machine as it is now booted into W7 SP1 successfully.

     

    Of note this is Windows 7 Enterprise.  The machines had a mix of encrypted drives and some with no encrypted drives.  All machines have all Windows updates applied and their latest firmware.  All machines use McAfee Virus Scan Enterprise (VSE) 8.8i and I did a mix of some machines had it disabled and other had it enabled.  It as well is fully patched and updated.  Machines as well have McAfee Host Intrusion Prevention (HIPS) 8.0 installed and as well is fully patched and updated.  The machines are all on a domain and activated via KMS keys.

    Friday, February 18, 2011 2:55 PM

All replies

  • //
    // MessageId: STATUS_ACCESS_DENIED
    //
    // MessageText:
    //
    // {Access Denied}
    // A process has requested access to an object, but has not been granted those access rights.
    //
    #define STATUS_ACCESS_DENIED             ((NTSTATUS)0xC0000022 L)


    Have you modified the registry permissions? Also share all files from the C:\Windows\logs\CBS folder and the setupapi log files and the file "C:\Windows\winsxs\poqexec.log"


    "A programmer is just a tool which converts caffeine into code" CLIP- Stellvertreter http://www.winvistaside.de/
    Friday, February 18, 2011 4:03 PM
  • There have been no modifications to registry permissions on any of these machines.  They're all only used by me so I know no one else has touched them.

     

    C:\Windows\winsxs\poqexec.log - this looks useful, there's an entry similar to this on the 32 bit machine as well.

     

    1cb671ebbe33361: 0, 0, 0, 0, StartTime ;
    1cb671ebcd39e5c: 0, 0, 0, 0, EndTime ;
    1cb68496ba5a4d8: 0, 0, 0, 0, StartTime ;
    1cb68496ba5a4d8: 74c, c0000043, 10c, 0, MoveFile ;\SystemRoot\WinSxS\Temp\PendingRenames\b4fc4af24868cb01710200008c0e980f.WatAdminSvc.exe, \??\C:\Windows\System32\Wat\WatAdminSvc.exe
    1cb69462d9016d1: 0, 0, 0, 0, EndTime ;
    1cb694650f121b3: 0, 0, 0, 0, StartTime ;
    1cb6946597cb24d: 0, 0, 0, 0, EndTime ;
    1cb6949c45c1ca6: 0, 0, 0, 0, StartTime ;
    1cb6949c5267384: 0, 0, 0, 0, EndTime ;
    1cb6a3971250bc1: 0, 0, 0, 0, StartTime ;
    1cb6a39835e8b19: 0, 0, 0, 0, EndTime ;
    1cb6a4d7d82bf06: 0, 0, 0, 0, StartTime ;
    1cb6a4d8a769a66: 0, 0, 0, 0, EndTime ;
    1cb85bdb1ac66ea: 0, 0, 0, 0, StartTime ;
    1cb85bdbd12bcaa: 0, 0, 0, 0, EndTime ;
    1cb9bd2fc91c52a: 0, 0, 0, 0, StartTime ;
    1cb9bd30779f20a: 0, 0, 0, 0, EndTime ;
    1cbb33982731d6a: 0, 0, 0, 0, StartTime ;
    1cbb3398615d891: 0, 0, 0, 0, EndTime ;
    1cbc7cb03fab6bd: 0, 0, 0, 0, StartTime ;
    1cbc7cb0b109d5f: 0, 0, 0, 0, EndTime ;
    1cbcd2cfb423674: 0, 0, 0, 0, StartTime ;
    1cbcd2d075d74b4: 0, 0, 0, 0, EndTime ;
    1cbcecb1ac1e964: 0, 0, 0, 0, StartTime ;
    1cbcecb1e7c73e6: 0, 0, 0, 0, CriticalPOQComplete ;
    1cbcecb1ac1e964: 74c, c0000022, de, 1, CreateKey ;\Registry\Machine\SYSTEM\CURRENTCONTROLSET\SERVICES\RdpVideoMiniport\Security
    1cbcecb6096ba50: 0, 0, 0, 0, EndTime ;
    1cbcecb8d731851: 0, 0, 0, 0, StartTime ;
    1cbcecc47c0b2b8: 0, 0, 0, 0, StartTime ;
    1cbced249c8b8b1: 0, 0, 0, 0, StartTime ;
    1cbced2d47fa752: 0, 0, 0, 0, StartTime ;
    1cbced315f0bc0c: 0, 0, 0, 0, EndTime ;
    
    

     

    I've created a password protected zip of the file just to keep bots out of it.  The password is the error code C000.....

     

    Requested Files

     

     


    Senior Systems Engineer - University of Central Florida
    Friday, February 18, 2011 5:50 PM
  • Going to that key listed;

    \Registry\Machine\SYSTEM\CURRENTCONTROLSET\SERVICES\RdpVideoMiniport\Security)

    The permissions for the key are as follows;

    • CREATOR OWNER
    • SYSTEM
    • Administrators
    • Users
    There is a reg_binary value inside of it called Security.
    Senior Systems Engineer - University of Central Florida
    Friday, February 18, 2011 6:08 PM
  • do SYSTEM/administrators have full permissions? Have you removed McAfee Host Intrusion Prevention before installing the Sp1?

    "A programmer is just a tool which converts caffeine into code" CLIP- Stellvertreter http://www.winvistaside.de/
    Friday, February 18, 2011 9:16 PM
  • do SYSTEM/administrators have full permissions? Have you removed McAfee Host Intrusion Prevention before installing the Sp1?

    "A programmer is just a tool which converts caffeine into code" CLIP- Stellvertreter http://www.winvistaside.de/


    Yes it does have full to that key.

     

    On those machines they were upgraded from HIPS 7 to HIPS 8 about 2 months ago for evaluation prior to deployment.  They still have HIPS 8 on them though.  The test machines that installed successfully do not have HIPS 7 or 8 on them.  I have a machine I'm setting up now that has HIPS 7 on it since we have not decided to roll out HIPS 8 so I can see how that one works.


    Senior Systems Engineer - University of Central Florida
    Friday, February 18, 2011 10:02 PM
  • ok, test it please with and without HIPS.
    "A programmer is just a tool which converts caffeine into code" CLIP- Stellvertreter http://www.winvistaside.de/
    Friday, February 18, 2011 10:04 PM
  • Just a status update.

    • Without HIPS - SP1 Success
    • With HIPS 7 - SP1 Success
    • With HIPS 8 - testing
    • With HIPS 7 upgraded to HIPS 8 - broke 2 machines so far, testing others

     

     


    Senior Systems Engineer - University of Central Florida
    Monday, February 21, 2011 9:44 PM
  • ok, tell us the other results, too after doing the testing.

    "A programmer is just a tool which converts caffeine into code" CLIP- Stellvertreter http://www.winvistaside.de/
    Tuesday, February 22, 2011 1:43 PM
  • I'm finding none of the other machines I'm configuring have the registry key listed in the error details for the machines SP1 failed on.  I also asked a couple of the other IT staff that I've used ePO to upgrade their HIPS7 to HIPS8 on for testing and none of them have the keys either.

    HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\RdpVideoMiniport\Security

     

    I'm wondering if it's part of the components from the W7 RSAT 64bit I have installed.


    Senior Systems Engineer - University of Central Florida
    Tuesday, February 22, 2011 6:39 PM