Error 0x8007005 Access Is Denied

I had a problem today when I was trying to schedule a Windows Backup on Windows XP. The user had no password, so when I entered the credentials to run the scheduled task under, I got a 0x8007005 Access Is Denied error.

After some searching I found the solution at

  • Open regedit (click start, run, type regedit, press enter or click OK), in the left pane tree navigate to HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Lsa
  • Click on that key in the left pane to show its contents in the right pane.
  • See if there is a value called limitblankpassworduse
  • If it exists, make sure its data is 0 (if not right cdick on it, click modify and set it to 0)
  • If it does not exist, right click in the right pane, click new, DWord value, name it limitblankpassworduse
    and set its data to 0.
  • Close regedit.

After that I was able to schedule the task with no problems, and it ran fine.

Posted in Errors Windows Windows XP by Scott Schrantz. No Comments

No DVD Drive Listed in Windows 8

I’ve been installing and playing with Windows 8 lately, including setting it up to be my main daily use computer. Everything has gone fairly smooth except for my DVD drives. The drives did not show up after a clean install; they weren’t in Windows Explorer, they weren’t in Disk Management, they weren’t in Device Manager. Not even showing up as an Unknown Device without any drivers. They were just nowhere.

I finally found the solution, in a registry entry. I don’t know if this is a bug in Windows, or just a glitch in my installation. But I put this entry into the registry, and my DVD drives started working immediately. I think I had to rescan Device Manager, but I didn’t have to reboot.

Windows Registry Editor Version 5.00


I set the value to 2 because I have 2 drives. If you only have one drive you can just enter 1.

Posted in Windows 8 by Scott Schrantz. No Comments

Boot From VHD: Change the target VHD

There is a whole tutorial that could be written about booting from a VHD in Windows 7 and Windows 2008 R2. This is not that tutorial, and I am probably not the one to write it. But I did want to make a note of this because I know that I’ll forget it the next time I need it.

To change the VHD that you’re booting from, you just have to make a couple of changes to the BCD. Boot from a Windows PE disc or a Windows 7 disc in System Recovery, and get to a command prompt. Then you enter these two commands. Notice that they’re almost exactly the same.

bcdedit /set {default} device vhd=[C:]\myvhd.vhd
bcdedit /set {default} osdevice vhd=[C:]\myvhd.vhd

Obviously you’ll replace myvhd.vhd with the VHD you want to boot from.

Posted in Windows 2008 Windows 7 by Scott Schrantz. No Comments

Group Policy Preferences

Group Policy preferences is something new in Windows Server 2008. It used to be that adding group policies for things like mapped drives, printers, and Control Panel settings was a pain, and you had to drill down several nested layers all over the place to change anything. But with Group Policy preferences, all these common settings are now lumped together in one place, easy to change. It’s a really handy way to easily do what used to be a lot harder.

The problem is, these settings only get applied in Windows 7. Anything older, even Vista, will just ignore them unless you install the Group Policy Preferences Client Side Extensions.  To install them you can look for them in Windows Update or just download them and install them manually. CGross at MSMVPs even has advice on how to use Group Policy to install the Client Side Extensions.

Posted in Windows 2008 Windows Server by Scott Schrantz. No Comments

Event ID 27

I was getting Event ID 27 on a server. The error read:

Time Provider NtpClient: The response received from domain controller <host dns name> is missing the signature. The response may have been tampered with and will be ignored.

This sounds likes a scary message, with warnings that the response has been tampered with, but like many messages it just means that there was some glitch and the servers aren’t syncing correctly anymore. I found the solution at, and it’s pretty simple. Just open a command prompt and run this command:

w32tm /resync /rediscover

After that the time synced correctly. Others have said that unregistering and reregistering the time service works as well.

w32tm /unregister
w32tm /register

Time syncing isn’t a vitally important issue, but computers do slip out of sync sometimes, and especially in a domain there can be consequences for getting too far ahead or behind. Good to make sure that the time service is always working correctly.

Posted in Errors Windows Windows 2003 Windows Server by Scott Schrantz. Comments Off on Event ID 27

Security Center Could Not Change Your Automatic Updates Settings

After removing a virus from a Windows XP computer, I got this message when I tried to turn on Automatic Updates: “Security Center could not change your Automatic Updates settings.” Viruses usually leave their little hooks behind after you uninstall them, disabling the tools that you need to fight them. So thanks to this page and this page, I found out how to turn Automatic Updates back on after the computer was clean of any more viruses. It’s all about registering some DLLs that got unregistered.

Click Start, select Run and type:

regsvr32 wuapi.dll
regsvr32 wuaueng.dll
regsvr32 atl.dll
regsvr32 wucltui.dll
regsvr32 wups.dll

Press Enter after each one and wait for the success message

This worked to get my Automatic Updates turned back on, and my Windows Updates working again.

Posted in Errors Windows XP by Scott Schrantz. No Comments

AVG Install/Uninstall Error

Over the past year I’ve been uninstalling AVG and replacing it with Microsoft Security Essentials. Free antivirus is always a shifting topic; it seems like they all stop the same viruses, and they all let the same ones get through (hello, FakeAntivirus scam program, is there anyone who can stop you from installing)? But I’ve settled for now on MSE; I like that it’s lightweight and the interface doesn’t get in your face or try to get you to upgrade.

As I’ve been uninstalling AVG, though, I’ve been running into the bug where an error pops up during the uninstall. It’s just a generic error message saying the program couldn’t be uninstalled, but when you go into View Details you see this:

Error: Connecting to item registry root HKCU (username) failed. Access is denied

I found the solution for this one in a few places, but the simplest writeup seems to be over at Basically, you need to go into the C:\Documents and Settings folder (this is on Windows XP obviously) and delete all the loose files in there. There are some .LOG files in there, one for each user, and the problem is caused by something that is cached in one of those files. Deleting the file clears out the problem, and then you can uninstall AVG.

Tags: , ,
Posted in Errors Windows Windows XP by Scott Schrantz. No Comments

Fatal Error C0000034 in Windows 7

This week Windows 7 Service Park 1 started being pushed out on Automatic Updates. On one hand, I think this is a good thing, because it forces people to update who otherwise never might. On the other hand, I’ve been getting a lot of call from folks this week who are inconvenienced by the update, just because it takes so long to install it. There’s the initial install, then you reboot, and then it goes through a whole secondary install that can take 15 minutes or half an hour. And these are people who have come into the office in the morning and are ready to get some work done, but they can’t do anything because they’re waiting on their computer.

But anyway, that’s just an inconvenience, pushing back the start of work 20 minutes or so. I’ve also been running into a far more serious problem with this service pack, one that’s an actual showstopper that has needed my intervention. The first time I saw it I was freaked out, because I had no idea how to fix it, but thankfully I found step-by-step instructions on how to make it go away. It’s still a 10 minute operation, and I still have to physically go to the computer to make it happen, so this is bad news no matter how you look at it, but at least it’s fixable.

The problem is that during the reboot, where the service pack is supposed to be finalizing the installation, the screen will suddenly say

Fatal Error C0000034 applying update operation 282 of 117624

And the computer locks up at that point. If you reboot, the same error keeps coming back. You’re stuck in update hell with a dead computer.

I’ve found a few solutions for this problem, but most of them seem to be hit and miss. There is one, though, that I came across that has worked for me twice so far, so I’m going to mark it down and pass it along. It is found at this link, in the TechNet forums. It involves booting to Startup Repair and going to the command line, then opening Notepad and editing a text file. It seems complicated, but it’s actually pretty simple if you follow the directions closely. Here are the steps, reproduced.

01. Reboot your computer while it’s starting up.

02. When your computer starts up again, choose the option “Launch Startup Repair”

03. When the Startup repair starts, click cancel.

04. After you click cancel it will show a box. Click “Don’t Send”

05. Click the link “View advanced options for recovery and support”

06. In the new window click Command Prompt at the bottom.

07. In Command Prompt type this and press enter: %windir%\system32\notepad.exe

08. Notepad will open. In notepad go to File–>Open.

09. Change the type of files notepad views from .txt to All Files10. Now in Notepad, go to C:\Windows\winsxs\ (or whichever drive Windows is installed on)

11. In that folder, find pending.xml and make a copy of it

12. Now open the original pending.xml (it will load really slow because the file is huge)

13. Press CNTRL+F and search for the following exactly: 0000000000000000.cdf-ms

14. Delete the following text (yours will be a little different):
<DeleteFile path=”\SystemRoot\WinSxS\FileMaps\_0000000000000000.cdf-ms”/>
<MoveFile source=”\SystemRoot\WinSxS\Temp\PendingRenames\e56db1db48d4cb0199440000b01de419._0000000000000000.cdf-ms” destination=”\SystemRoot\WinSxS\FileMaps\_0000000000000000.cdf-ms”/>

Your PC might not have all 3 sections of code (<Checkpoint>, <DeleteFile>, <MoveFile>). Just make sure you delete section “Checkpoint” and whatever other sections have “000000000000000.cdf-ms”. They will be right next to eachother.

15. Save the file, close notepad, close command prompt, restart your computer.

Thanks to thiswoot for discovering this! It really saved my hide and got my users back to work. So far this has only happened on 64-bit machines, so I’m not sure if it’s a 64-bit specific error, or if it’s just a big coincidence. I just hope it doesn’t happen to anyone else!


Tags: , ,
Posted in Errors Windows Windows 7 by Scott Schrantz. No Comments