Registry access denied to NT AUTHORITY\SYSTEM

[Teo Lachev [MVP]]

We run an application on a Windows 2000 Server (SP4 applied) box and we
experience a strange issue with WMI. Upon some digging with RegMon we
discovered that access to the following registry key is denied

12477 33.38408661 WinMgmt.exe:1580 OpenKey
HKLM\SOFTWARE\Microsoft\ASP.NET\2.0.50727.0 ACCESS DENIED
Access: 0x20219 NT_AUTHORITY\SYSTEM

We used regedt32 to grant full access to Everyone to that key. In addition,
we used the WMI Control Properties (Security tab) in the Computer Management
Console to grant access to everyone to aspnet. Nothing helps.

Does anyone know what we could possibly do to grant WMI access to that key.

[Willy Denoyette [MVP]]

SYSTEM should have full control to that key, did you check this?

Willy.

"Teo Lachev [MVP]" <***@ns.prologika.com> wrote in message news:***@TK2MSFTNGP04.phx.gbl...
| We run an application on a Windows 2000 Server (SP4 applied) box and we
| experience a strange issue with WMI. Upon some digging with RegMon we
| discovered that access to the following registry key is denied
|
| 12477 33.38408661 WinMgmt.exe:1580 OpenKey
| HKLM\SOFTWARE\Microsoft\ASP.NET\2.0.50727.0 ACCESS DENIED
| Access: 0x20219 NT_AUTHORITY\SYSTEM
|
| We used regedt32 to grant full access to Everyone to that key. In
addition,
| we used the WMI Control Properties (Security tab) in the Computer
Management
| Console to grant access to everyone to aspnet. Nothing helps.
|
| Does anyone know what we could possibly do to grant WMI access to that
key.
|
|

[Teo Lachev [MVP]]

Hi, Willy,

Yes, I re-checked hundred times. I also granted Everyone read access to no
avail. There is something spooky with WMI on Windows 2000.

Post by Willy Denoyette [MVP]
SYSTEM should have full control to that key, did you check this?
Willy.
| We run an application on a Windows 2000 Server (SP4 applied) box and we
| experience a strange issue with WMI. Upon some digging with RegMon we
| discovered that access to the following registry key is denied
|
| 12477 33.38408661 WinMgmt.exe:1580 OpenKey
| HKLM\SOFTWARE\Microsoft\ASP.NET\2.0.50727.0 ACCESS DENIED
| Access: 0x20219 NT_AUTHORITY\SYSTEM
|
| We used regedt32 to grant full access to Everyone to that key. In
addition,
| we used the WMI Control Properties (Security tab) in the Computer
Management
| Console to grant access to everyone to aspnet. Nothing helps.
|
| Does anyone know what we could possibly do to grant WMI access to that
key.
|
|

[Willy Denoyette [MVP]]

Well, the message is clear, and has nothing to do with WMI. It's the
security system in windows who says - 'user'(here NT_AUTHORITY\SYSTEM) has
no access privileges to open this registry key, , windows security is based
on user 'identity' not program's identity (here WinMgmt.exe), any program
running as SYSTEM would incur the same access privilege exception.
Just a question though, besides what you see in regmon, what is the real
problem, who's trying to access this key, WMI is just a service executing
requests from clients.
Note also that granting Everyone access won't solve this either, SYSTEM is a
"pseudo account" and not considered as Everyone :-)
I wouldn't use regmon to investigate this further, just turn-on object
auditing for this key and watch the security log to see who's the account
failing the request.

Willy.

"Teo Lachev [MVP]" <***@ns.prologika.com> wrote in message news:%***@TK2MSFTNGP02.phx.gbl...
| Hi, Willy,
|
| Yes, I re-checked hundred times. I also granted Everyone read access to
no
| avail. There is something spooky with WMI on Windows 2000.
|
|
| "Willy Denoyette [MVP]" <***@telenet.be> wrote in message
| news:***@TK2MSFTNGP04.phx.gbl...
| > SYSTEM should have full control to that key, did you check this?
| >
| > Willy.
| >
| > "Teo Lachev [MVP]" <***@ns.prologika.com> wrote in message
| > news:***@TK2MSFTNGP04.phx.gbl...
| > | We run an application on a Windows 2000 Server (SP4 applied) box and
we
| > | experience a strange issue with WMI. Upon some digging with RegMon we
| > | discovered that access to the following registry key is denied
| > |
| > | 12477 33.38408661 WinMgmt.exe:1580 OpenKey
| > | HKLM\SOFTWARE\Microsoft\ASP.NET\2.0.50727.0 ACCESS DENIED
| > | Access: 0x20219 NT_AUTHORITY\SYSTEM
| > |
| > | We used regedt32 to grant full access to Everyone to that key. In
| > addition,
| > | we used the WMI Control Properties (Security tab) in the Computer
| > Management
| > | Console to grant access to everyone to aspnet. Nothing helps.
| > |
| > | Does anyone know what we could possibly do to grant WMI access to that
| > key.
| > |
| > |
| >
| >
|
|