Solving setup errors by using the SubInACL tool to repair file and registry permissions

项目
09/04/2006

A while back, I wrote a blog post about a .NET Framework 2.0 beta 2 installation problem that was caused by incorrect access control list (ACL) permissions on some registry hives. In that post, I described how to use a tool in the Windows Resource Kit named SubInACL to reset file and registry ACLs to help solve this problem.

Ever since I wrote that post, I have run into installation errors for several other products that have been solved by using the SubInACL tool. Therefore, I wanted to write a standalone set of instructions for how and when to use the SubInACL tool because the previous blog post is specific to the .NET Framework 2.0 setup and does not always appear in search results when people run into this kind of a problem and search the Internet for assistance.

How to download and run SubInACL

Here are some steps that can be used to download and run the SubInACL tool to repair file and registry permissions that are often needed to successfully install programs on Windows, particularly for MSI-based (Windows Installer) setups:

Download the SubInACL tool and install it. By default it will install to c:\Program Files\Windows Resource Kits\Tools
If you are running Windows Vista, click on the Start menu, choose All Programs, then Accessories, then right-click on the item named Command Prompt and choose Run as administrator
If you are running an OS other than Windows Vista, go to the Start menu, choose Run, type cmd and click OK
In the cmd prompt, type notepad reset.cmd and click yes to open Notepad.exe and create a new text file named reset.cmd
Copy and paste the following contents into reset.cmd (or download it from this location on my file server and rename it from reset.cmd.txt to reset.cmd):
Change the values named YOURUSERNAME to be the Windows user account that you are logged in with.

Note: The YOURUSERNAME value should match the name of your user folder at c:\Documents and Settings (or c:\users on Windows Vista and higher). You can also find the value to use for YOURUSERNAME by launching Task Manager and looking at the user name listed in the User Name column of the Processes tab.
Save and close reset.cmd.
In the cmd prompt, type reset.cmd and press enter to run the SubInACL tool. This tool will take several minutes to run, and it requires that the user account you are using has administrator privileges on the system. This is why it is necessary to run it from an elevated cmd prompt on Windows Vista. Step 2 above can be used to start an elevated cmd prompt on Windows Vista.
After reset.cmd completes, try to install the product that previously failed to install correctly on your system.

Note: There are a couple of scenarios where installing or running SubInAcl can fail. For example, some non-English versions of Windows have the name of the Administrators group translated to another language, and the command lines listed above will fail in that case. I have posted workarounds for the issues that I know of in this separate blog post.

Also note: Running the above command lines will cause SubInAcl to create a log file named %temp%\subinacl_output.txt. If you see any errors reported in the cmd prompt after running SubInAcl, you can look in this log file for more detailed information about what file(s), folder(s) or registry value(s) are causing the errors. To open this log file, you can click on the Start menu, choose Run, type notepad %temp%\subinacl_output.txt and click OK.

When looking at this log file, you may see some errors reported with error code 5. That error code means Access Denied, and it is typically caused by Windows or some other program running on your system that is holding files, folders or registry values in use so that SubInAcl is unable to update the permissions for them. Most of the time, that type of error in the SubInAcl output can be safely ignored, but you may need to try to reboot and then manually fix the permissions for these files, folders or registry keys as a workaround.

When is SubInACL useful

I have found that the SubInACL tool is most useful when a setup package fails with error code 5 or 0x5 or 0x80070005. All of these error codes mean Access Denied, and this type of error code is often caused by missing ACLs for the Administrators group or the built-in System account. The Windows Installer service runs with System account permissions in most cases. If the System account does not have sufficient permissions to access the file system or parts of the registry, an MSI-based setup package will fail with an Access Denied error.

SubInACL can also help resolve Internet Explorer script errors caused by incorrect access control permissions for specific user accounts on the system.

Example of a setup failure that was fixed by SubInACL

A customer contacted me with a problem installing Visual Studio 2005. I looked at the main Visual Studio log file located at %temp%\dd_vsinstall80.txt, and I found that Windows Installer 3.1 setup was failing. Then, I looked at the Windows Installer 3.1 setup log file located at %windir%\KB893803v2.log. It showed the following error:

30.844: DoRegistryUpdates:UpdSpInstallFromInfSection Failed for MSI.Reg.Install: 0x5
30.844: DoInstallation:DoRegistryUpdates failed
30.875: Access is denied.

I had the customer run the above steps to use the SubInACL tool to update the file and registry ACLs on their system, and then they were able to install Windows Installer 3.1 and Visual Studio 2005 with no further problems.

<update date="11/15/2006"> Updated subinacl command lines to include recursive ACL updating for folders and files under %windir% </update>

<update date="3/22/2007"> Updated the steps to make them easier to follow by moving the directory change into the batch file. </update>

<update date="9/25/2007"> Updated the notes to indicate that some Internet Explorer script errors can be resolved with this tool as well. </update>

<update date="5/30/2008"> Updated command lines based on customer feedback regarding their experiences on Windows Vista. </update>

<update date="6/16/2008"> Updated command lines to cause SubInAcl to create a log file in the %temp% directory in case it is needed for troubleshooting afterwards. </update>

<update date="6/17/2008"> Added a link to a blog post where I describe a couple of workarounds for problems that can occur while trying to install and/or run SubInAcl. </update>

<update date="6/20/2008"> Updated command line to include a backslash after %SystemDrive% in the 2nd to last command. </update>

<update date="6/24/2008"> Updated wording of link to the post for troubleshooting SubInAcl errors to try to make it more visible. </update>

<update date="7/29/2008"> Updated directory ACL command lines to not affect the Documents and Settings sub-folders. </update>

<update date="3/12/2009"> Fixed broken link to reset.cmd. </update>

<update date="4/7/2009"> Added clarification about how to determine the correct value to substitute for YOURUSERNAME in the sample SubInAcl script. </update>

<update date="5/18/2009"> Added clarification about where to run reset.cmd after creating it. </update>

Comments

Anonymous
December 02, 2006
I can't thank you enough for writing this quide. I was having installation problems which I spent a few days constantly trying to solve. I finally found information telling me to use the SubInACL tool but wasn't told how to create the file named Reset.cmd. I have now sorted my problem thanks to your EXTREMELY HELPFUL instructions. Thankyou so much!
Anonymous
January 14, 2007
Thanks for your help with this. I too had been days trying to get either dotnet 2 or dotnet 3 to install and they kept stopping on permission errors and I was admin and reset file permissions on the one file with no luck. I used the cleaner and it helped with other problems but this got dotnet 3 working finally !! Great Job...
Anonymous
February 20, 2007
Aaron, Thank you so much for this posting. On the campus I work we have encountered a host of issues. All while I kept think that the issue wasn't this "program" or this "update" or install. You excellent work here has validated what my gut has been telling me. Your solution goes to the very root a problem that may plauge more users than I'd care to think about. As an analyst in the field, THANK YOU!!
Anonymous
March 21, 2007
Add me to the ranks above lauding your efforts. I wish I had found this information at least 3 or 4 years ago. Ever since Visual studio .NET, I've had problems opening websites on my local IIS using FrontPage extensions which I recently found out is caused by registry permissions in HKCR (thanks to researching my IE7 installation problems). I hope this will either get me straightened out permanently or at least give me a quicker resolution when it happens. To give something back, I've enhanced the Cmd batch script above so it's capable of being run without going into a shell or changing directories, so it's easier to give to novice users needing help. I'm not sure the best way to post this, so I'll paste it here and perhaps Aaron can make it into a link. (By the way, I called my file ResetACLs.cmd.) If this gets munged, email me for a copy of the file. @echo off title Resetting ACLs... cd /d "%ProgramFiles%Windows Resource KitsTools" echo. echo Resetting ACLs... echo (this may take several minutes to complete) echo. echo ========================================================================== echo. echo. subinacl /subkeyreg HKEY_LOCAL_MACHINE /grant=administrators=f /grant=system=f echo. echo. subinacl /subkeyreg HKEY_CURRENT_USER /grant=administrators=f /grant=system=f echo. echo. subinacl /subkeyreg HKEY_CLASSES_ROOT /grant=administrators=f /grant=system=f echo. echo. echo System Drive... subinacl /subdirectories %SystemDrive% /grant=administrators=f /grant=system=f echo. echo. echo Windows Directory... subinacl /subdirectories %windir%. /grant=administrators=f /grant=system=f echo. echo. echo ========================================================================== echo. echo FINISHED. echo. echo Press any key to exit . . . pause >NUL
Anonymous
March 22, 2007
Hi FuzzyBS - Thank you for contributing this updated version of reset.cmd. I've updated the version on my file share to contain these contents so it will be easier to use in the future.
Anonymous
April 03, 2007
Do you have any guidance on a 64-bit version of SubInAcl? It's been over a year, but I seem to recall that it didn't work properly on x64 (at least for registry usage) because it couldn't access the 64-bit registry hive. I asked for a 64-bit version of the tool at the time, and the response was that none were planned. I thought I'd check to see if there was anyone else running into this, or thought towards an x64 version.
Anonymous
April 04, 2007
Hi Mattie - I've never tried SubInAcl on 64-bit systems, but it wouldn't surprise me if it didn't work on that processor architecture. On a 64-bit system, you might need to use one of the built-in Windows tools such as cacls to reset ACLs on your system. You can click on the Start menu, choose run, type cmd and click OK, and then run cacls /? to list usage information for this tool. Hopefully this will help in your scenario.
Anonymous
August 08, 2007
The comment has been removed
Anonymous
October 22, 2007
I'm going to go ahead and preemptively thank you for this - I've been getting this error (with installer 3.1, curiously enough) for ages now and until I found this site, no one really had any functional ideas on how to fix it. When/if this works, if I ever meetcha in real life, I'm buyin you a pizza and/or beer, whichever you prefer ;)
Anonymous
October 23, 2007
Hi D.cochran - Hopefully these steps will end up working for you. As my wife can attest - I'm always up for pizza :-)
Anonymous
November 06, 2007
There is but a single account on my Win XP Pro SP2 notebook, an Administrator account, so of course I am the Administrator. Prior to installing any new software on this notebook I like to temporarily disable all Startup programs by running MSCONFIG, un-checking "Load Startup Items" and clicking OK. I then re-boot and continue with the installation of my new software. Very recently, while this procedure seems to continue to work, it also displays an ominous message, "An Access Denied error was returned while attempting to change a service. You may need to log on using an Administrator account to make the specified changes." A Google search revealed Aaron Stebner’s Weblog for “Solving setup errors by using the SubInACL tool to repair file and registry permissions” as a possible solution to this vexing problem. The good news is that Mr. Stebner’s cmd file runs correctly, and breaks nothing. The bad news is that I continue to get that ominous message even though the change I make inside MSCONFIG seems to “take” just fine. That is, I can successfully disable and later re-enable all “Load Startup Items”.

Peter Sale Santa Monica CA USA

Anonymous
November 06, 2007
Hi Psale - I'm sorry for the hassle this is causing for you. Each object in the OS has specific ACLs assigned to it, including files, registry keys, services, etc. Even if you're running as an administrator, if your administrator group doesn't have correct ACLs, you won't be able to modify an object. The SubInAcl tool adds administrator and system permissions for files and registry entries, but it doesn't modify other objects like services. It is possible that there is a service that you have to manually go and change the ACLs for in order to fix this issue. You can use a tool like Process Monitor (http://www.microsoft.com/technet/sysinternals/ProcessesAndThreads/processmonitor.mspx) to narrow down what object is causing the access denied error. From there, you should be able to use Windows Explorer or the Services control panel to right-click on the object, choose the Security tab and add the missing ACLs.
Anonymous
December 11, 2007
I encountered a similar problem during the installation of VS2008 on Vista (more exactly, it crashed during the installation of Document Explorer 2008). I fixed the problem myself, by writing a small tool that was similar to SubInACL. After spending more than one day on fixing the problem, I discovered this nice page. Argh ! Anyway, here is a way to reproduce the bug, since it appears to be a bug from Vista:

Install Vista on a computer
Create a temporary admin account
Install Visual Studio 2005 or Office with this account (I disabled UAC, but it may be possible to reproduce the problem by running the installer as Administrator).
Use another account, or simply log into a domain
Delete the temporary admin account. Now, Vista's registry is completely broken, with a ton of registries giving access denied, even if you are admin. In my case, I had 729 broken registries, and it was impossible to manually repair.

Anonymous
December 14, 2007
Beautiful article. Now to see if it will solve my problems.... I reproduced JC's scenario above inadvertently - perhaps by trying the easy way to do things - which should work. Had Vista RC1 installed and Office 2007 Beta. Office Beta expired. Needed quick edits in a web page, Installed Front Page 2003. Everything - IE 7, Search, Cntrl Panel -- working. RC1 Expired. Installed RTM Vista Ultimate. As an upgrade, which succeeded without complaint. Installed Office 2007. Left FP 2003 on there. Ran a little .reg file that turned of the completely inappropriate control over directory appearance in Explorer. Now, IE7 wouldn't start. Search from the start menu wouldn't start. Control panel would not show any entries on the so called "Control Panel Home" (but would work in classic view). Running ProcMon while starting IE7 showed an "Access Denied" followed by a thread exit and then a few thousand more events as it shut down without opening. I changed the permissions on the questionable key (had to take ownership as others have noted -as admin, not dev, knew this) and now it would start, that is the window would open. But it was absolutely dead. Nothing in the window would work. Looked at the reg again - now, a couple subkeys had appeared, and behold, they lacked the proper permissions. Same sort of thing happened when monitoring the attempted start of Search. 10 access denieds. Monitored a boot sequence: 423 access denieds. Gave up and started searching for something like this. Two days of failure - using search on MSFTs site - Live lost the search battle, because Google, not Live, found this blog the fourth entry down. Thanks for the article! Whether it works or not....:)
Anonymous
December 14, 2007
The comment has been removed
Anonymous
December 29, 2007
You Sir, are a genius. I had problems installing Quicktime - was getting a 'you don't have sufficient permissions' nonsense whenever I installed it...I tried everything but nothing worked. Apple told me to re-install Windows but that's their answer to everything when they can't figure out what to do. I followed your tips, and everything installed beautifully. Well done, sir, well done!
Anonymous
December 30, 2007
The comment has been removed
Anonymous
December 31, 2007
Hi GaryE - It sounds like something went wrong with the installation of the SubInAcl tool on your system. I'd suggest trying to do the following:

Use the steps listed at http://blogs.msdn.com/astebner/archive/2005/10/30/487096.aspx to manually remove the SubInAcl product from your system.
Re-download it and re-install it from http://www.microsoft.com/downloads/details.aspx?FamilyId=E8BA3E56-D8FE-4A91-93CF-ED6985E3927B
Try again to use the steps listed above in this blog post. Also, in general, it is not sufficient to just grant your user account permissions. Usually you have to also grant the local system account and the Administrators group access as well (which is essentially what the instructions above will achieve). Hopefully this will help.

Anonymous
December 31, 2007
Thanks Aaron - I deleted Windows Installer and dowloaded a newer version, the was able to install SubInAcl. I followed your instructions to the letter...but I still receive the message: "Windows cannot access the specified device, path or file. You may not have the appropriate permissions to..." A colleague here suggested it might be caused by a "worm" which has taken control of registry files..? Scans do not show any viruses or worms but he said they can be hidden, or "removed" but still cause havoc. Many thanks and Happy New Year to everyone, Gary
Anonymous
January 01, 2008
The comment has been removed
Anonymous
January 03, 2008
The comment has been removed
Anonymous
January 03, 2008
Hi BobbyL - The web site doesn't specify this, but SubInAcl will run fine on Windows XP Home just like on XP Professional. I'd suggest giving the steps a try to see if they help at all on your system. If they don't work, you may need to try the additional suggestions I posted in my most recent reply above to GaryE. Hopefully this helps!
Anonymous
January 04, 2008
Aaron, The URL you provided right in the beginning of your blog to the MS site for SubInACL tool does indeed in the System Requirements section explicity say XP Pro...no mention of XP Home. The problems that GaryE had may be traced to the fact that he is using XP Home, as he said in his very first comment above on 12.30.07. I was hoping that someone might have successfully used the SubInACL fix under XP Home. I am willing to try it if I had some confidence that I would not further hose up my system. You think I might be safe to proceed if I had a Ghost image to restore the system to if things went south? BobbyL
Anonymous
January 04, 2008
Hi BobbyL - I understand that the wording on the SubInAcl download page seems to indicate that it supports XP Pro but not XP Home, but from what I can tell and what I know about the tool, that is just an oversight in the wording on the page and not an indication that this tool won't work on XP Home. Nearly all of the operating system code for Windows XP is identical between the Home, Pro, Tablet and Media Center versions, including this type of security permissions management code that SubInAcl interacts with. As a result, I don't believe you run any risk of further damage to your system by trying it out. The issues that GaryE has run into simply mean that for some reason SubInAcl didn't help resolve the issue he was encountering. The SubInAcl steps listed in this blog post do not work for 100% of the possible cases where an access denied error can occur. These steps have been tailored to help in the majority of cases I've seen in the past though, so they tend to work most of the time. GaryE's system had some other missing permissions that these command lines didn't help fix, so additional troubleshooting steps are needed to narrow down the cause further. These issues weren't caused by trying to run SubInAcl though - they existed before the tool was even attempted on his system.
Anonymous
January 05, 2008
Aaron, I took the plunge and tried your fix...and it did the job!! No problem with running XP Home. Thanks so much for sharing your knowledge and encouragement on this...you are the man! BobbyL
Anonymous
January 05, 2008
Hi BobbyL - I'm really glad to hear that these steps helped solve this issue on your system. I'm sorry for the hassle it caused for you along the way, and I'm also sorry for the confusion caused by the documentation on the SubInAcl download page. Please let me know if you run into any additional problems on your system.
Anonymous
January 06, 2008
I found this post on Google. 2 years and no SP2 because of permission errors on my XP Home OS. I followed BobbyL's bravery and tried the SubINAcl install too. I am happy to report SP2 now is installed on my XP Home Edition with now problems. - except for the install of 61 - SP2 MS updates that took awhile to complete. :-)
Anonymous
January 07, 2008
Hi again, Sorry for the delay in getting back to you but I was down with what is known as "Abu Dhabi Flu" which is going around this time of year. I did download and install Process Monitor but to be honest, I have no idea at all what I am looking at when it is running...or what I should be looking for. I ran the codes you listed above once again and when it completed, I had the following messages (some of my spacing my not be correct as I copied it quickly): C:Program FilesWindows Resource KitsTools>subinacl /subdirectories C: /grant=administrators=f /grant=system=f Access is Denied Also another >subainacl with the following: /subdirectories C:Windows*.* /grant=administrators=f /grant=system=f Access is Denied Any thoughts about this? Kind regards, Gary
Anonymous
January 08, 2008
Hi GaryE - I'm sorry that you ended up getting sick. I've been fighting something similar to that myself :-( It can be difficult to narrow down exactly what to look for in Process Monitor. What I usually do is start by adding a filter based on the process name - typically that is the name of the setup program you are trying to install, or if the setup is an MSI then it will be msiexec.exe. Then, I run the setup and reproduce the failure, and start looking for errors listed in the output. From the errors, you can see the cause of the error in one of the columns in Process Monitor - they should be listed as access denied in this type of scenario. I've never heard of a case where running SubInAcl itself gave an access denied error though. Are you running it when logged in as an administrator on your system? You may need to go and manually try to do what each of those failing SubInAcl steps are doing. You can manually change the permissions for a folder or registry key using Windows Explorer or regedit.exe. You will want to add the Administrators group and grant that group full control and also add the SYSTEM account and give it full control. You can do this for the root of your C drive, the c:windows directory, and the roots of the HKEY_LOCAL_MACHINE, HKEY_CLASSES_ROOT and HKEY_CURRENT_USER registry hives and hopefully that will help.
Anonymous
February 02, 2008
The comment has been removed
Anonymous
February 03, 2008
Using the subinacl tool has solved this similar problem on my HP Pavillion Media Center running Vista Home Premium which I first ran into after installing Pinnacle software for use with a Pinnacle Show Center ( and this was with UAC enabled). It has recurred a few more times all related to installing other sorts of media server related software. I still cannot get beyond the Media Center receiver Service (ehRecvr.exe) form continuosly crashing and the Hauppauge tuner card can no longer be found in the MS Media Center, even though it works perfectly with WinTV. BUT these issues are not what I want to call attention to here (I just mentioned them in case other see similar problems or can suggest anything) What I really want to point out are some of the side effects of running the above script using subinacl.exe on a Vista system which has more than one user login. If you have several family members and multiple logins on your initial login screen, these logins (except for your Administrator member Accounts) will disappear after running the above script. I was completely stumped when I saw mine had vanished, but yet I could still see all of them in the Control Panel under User Accounts. I found a simple solution to bring them back by simply running 'net localgroup User /ADD username' for each. HOWEVER, I still run into all kinds of permissions issues with various applications and service, like printing, etc. which require their own varied security settings. I have added this to the script to help out on some of this, but there is still something missing for %%i in (TYPE YOUR USERNAMES HERE) DO ( echo Fix USER: %%i net localgroup Users /ADD %%i subinacl /subdirectories c:Users%%i /grant=administrators=f /grant=system=f /grant=%%i=f /grant=Users=r ) I don't know if grant=r is enough for regular Users or what other permissions need to be reinstated to get things completely back to normally. So what I'm saying here is that you may think everything is great again after running these subinalc commands, but I guarantee something will turn up somewhere, and things become a lot more complicated when you have multiple user accounts. What I really wish we had was some sort of permissions map which states what permissions should be assigned for what and whom by default on a vanilla install. Trying to figure this out by tweaking this and that (which is what I have been doing) is much too dangerous. This seems to be a half-baked permissions scheme which breaks and falls apart with little effort and there has been provided no patch to correct it. This horrible experience has caused me to discourage anyone who asks from moving to Vista. It is unreliable and I wouldn't be able to help them, if they ran into his problem, with much confidence. Ken Banks
Anonymous
February 03, 2008
MY BAD. this command is the culprit for disabling my user accoutns... secedit /configure /cfg %windir%infdefltbase.inf /db defltbase.sdb /verbose and it is not referenced in the above script of subinacl commands. However, the permissions issues that I pointed out still apply when you have multiple logins on Vista. Ken banks
Anonymous
February 04, 2008
The comment has been removed
Anonymous
February 04, 2008
Hi Allan1 - The SubInAcl commands that I list above in this blog post are not guaranteed to fix all possible access denied errors on a system. Specifically, it only changes the permissions on some files/folders and some parts of the registry. It does not make any changes to service permissions. You may need to try to manually correct any remaining permission issues on your system. One other thing I should note here - if you get an access denied error, it does not necessarily mean that the account you're logging in with is not a member of the Administrators group on your system (as its seems to be implied by the Logitech error message above). It means that whatever account you're logged in with doesn't have sufficient permissions to whatever resource the system is trying to access. Not all resources on a system are accessible even by administrators, plus permissions can be changed by other software or by the user. Also, selective startup mode does not cause the logged in user to no longer be a member of the Administrators group. I'd suggest trying to contact Logitech again to find out exactly what files, registry and/or services are being accessed when you tryt o start your software and see if they can walk you through steps to fix the permissions manually.
Anonymous
February 05, 2008
I have some good news, and some so-so news. Always starting off with good news: SubInACL works on Vista x64 (in this case, Ultimate). So-so news: I think I also discovered a bug related to depth. My HKEY_LOCAL_MACHINESOFTWAREWow6432NodeClassesCLSID branch is huge. (Well, so is Classes.) At some point, the path name printed during the progress message starts to be inaccurate; the Wow6432Node starts repeating in the display, but it does work (based on the last messages after a ^C). But eventually SubInACL crashed. I was able to specify just Classes and it eventually worked (after about 4 million updates). I manually updated the other Wow6432Node branches. I'm happy to report that this has cleared up the 80070005 and 8020(something or other) errors that I've been having with Automatic Update.
Anonymous
February 06, 2008
Okay, here's an update. First, after some trial and error (and several hours on the phone with Logitech) I was able to install Setpoint 4.00 (not the latest version, but close enough). Turns out it had nothing to do with permissions or rights. Second, a couple of us have done some trial and error and we think the message in msconfig may be related to systems that have .Net Framework 2.0 (SP1) or higher installed. Last, when all is said and done it appears that the system will indeed still boot to diagnostic mode even though that message is displayed. Thanks so much for taking the time to respond and for this superb thread and tutorial :)
Anonymous
February 06, 2008
Hi Allan1 - I'm glad you were able to get this software to work, but I'm sorry for all of the hassles you had to go through. What was the underlying issue in this scenario? One comment - I don't know of any dependencies between MsConfig and the .NET Framework. MsConfig should work fine regardless of whether or not you have any versions of the .NET Framework installed on your system.
Anonymous
February 06, 2008
There were a couple of things. First, Logitech support told me that Setpoint versions newer than 4.00 and had me download that version from their FTP site. Second, I had to rename a specific file in windowssystem32drivers (wdf01000.sys) to a non-usable name (ie, .bak) and then plug in the dongle for the new mouse (XP would not install the HW if that file existed). I still got a "could not complete HW install) at this point, but upon reboot XP did report finishing the hw installation(it recognized the new mouse and installed the new wdf01000.sys driver file - same version as the old one). Then I installed the setpoint sw and it did recognize both the new mouse and my old keyboard. Logitech acknowledges the problem I had (no tabs after upgrading to Setpoint 4.x) is not uncommon and they can generally get it to install with some known work-arounds, but they say my problem was a little more sever than most. They did make note of the steps I had to take to get it to work and entered the "fix" in the DB. As for .Net Framework and msconfig I agree - there should be no issue. But we've found the problem exists on those systems where we have ver.2 (sp1) installed and does not appear on other systems. Could be coincidence I suppose.
Anonymous
February 08, 2008
I followed the instructions to setup and run SubInACL but I am unsure that what I am seeing is success. When I run it, and the window is open there is a red bar across the top showing "Done:, Modified and Failed. It seems that the same number that were modified also failed. Is this what I should be seeing or did I do something wrong?
Anonymous
February 08, 2008
Hi Firecop1 - I haven't heard of SubInAcl displaying this type of information in the past. Would it be possible for you to post a screen shot of what you're seeing? Also, did you try to run SubInAcl because you received an "access denied" error while trying to install a product on your system? If so, did you try to re-run that product setup after running SubInAcl to see if it helped?
Anonymous
February 18, 2008
Hey Aaron, i had the same type of display that firecop1 talks about, but out of all of the registry entries shown, it only threw up 3 errors. I believe you may get this "red bar" screen when it is actually modifying registry entries, as i had a lot of those. Anyway, I do have a screenshot of what it looks like, but don't know how to post it here, but I'll gladly send it if you'd like. SubInACL did fix my problem, which was a failing Windows Update for KB885836 that has stumped me for the last 6 months. I noticed a lot of other folks have this same type of problem with other Windows Updates, so I downloaded and tried to manually install KB885836 which is when it gave me the registry permission denied error code 5, that led me to your awesome article/application! Thanks a bunch, my machine is fully patched again.
Anonymous
March 01, 2008
kevin@greatriverdesign.com... thank you so much for that comment! The original reset.cmd in the blog post totally killed my Vista install. Not even System Restore would work. Thankfully I took an image of my entire drive using a 3rd party tool before running it! After restoring my drive, I ran your version of the script and everything works brilliantly now! No more access denied registry warnings when trying to install and run certain software. Thanks!!
Anonymous
March 11, 2008
re: Solving setup errors by using the SubInACL tool to repair file and registry permissions I have some good news, and some so-so news. Always starting off with good news: SubInACL works on Vista x64 (in this case, Ultimate). So-so news: I think I also discovered a bug related to depth. My HKEY_LOCAL_MACHINESOFTWAREWow6432NodeClassesCLSID branch is huge. (Well, so is Classes.) At some point, the path name printed during the progress message starts to be inaccurate; the Wow6432Node starts repeating in the display, but it does work (based on the last messages after a ^C). But eventually SubInACL crashed. I was able to specify just Classes and it eventually worked (after about 4 million updates). I manually updated the other Wow6432Node branches. I'm happy to report that this has cleared up the 80070005 and 8020(something or other) errors that I've been having with Automatic Update. I am running Vista Ultimatex64 & I am having the same issues. Could someone please tell me how to "specify" Just Classes & Manually Update all the Other Now6432Node Branches??? Regards Grzyb
Anonymous
March 12, 2008
Hi Grzyb - When you install the SubInAcl tool, it also installs a readme file to the location C:Program FilesWindows Resource KitsToolssubinacl.htm. That readme provides detailed usage information, including how you can specify exact sub-keys to update. Hopefully this will help in your scenario.
Anonymous
March 13, 2008
The comment has been removed
Anonymous
March 13, 2008
Hi Thomas1981 - You need to make sure to run subinacl.exe from an elevated cmd prompt on Windows Vista. To open an elevated cmd prompt, you can click on the Start menu, choose All Programs, then Accessories, then right-click on the item named Command Prompt and choose Run as administrator. I'm not sure that will solve this error though - I haven't heard of this exact issue while running subinacl before. You may want to review the readme at C:Program FilesWindows Resource KitsToolssubinacl.htm to see if you can figure out possible causes of this error. You may also want to review the other comments on this blog - there are some specific notes posted by others who have tried running subinacl on Vista and run into issues, and they have posted other suggested workarounds that may be useful to you as well.
Anonymous
March 13, 2008
I've solved the problem, i deleted the /grant=administrators=f argument and it works fine. Vista Update is working too! Thanks alot
Anonymous
March 23, 2008
The comment has been removed
Anonymous
March 24, 2008
Hi Olamoree - The steps listed in this blog post use SubInAcl to add full control permissions to the Administrators group and the local system account to the following parts of your system:

The HKEY_LOCAL_MACHINE registry key and any sub-keys.
The HKEY_CLASSES_ROOT registry key and any sub-keys.
The HKEY_CURRENT_USER registry key and any sub-keys.
The %windir% folder and any sub-folders and files.
The %systemdrive% folder and any sub-folders and files. Most installers for applications and OS hotfixes require this type of permission to be able to install successfully. You shouldn't need to reverse any of these things later on. Thanks for the compliment on my blog. Please let me know if you run into any issues in the future.

Anonymous
April 01, 2008
The comment has been removed
Anonymous
April 02, 2008
The comment has been removed
Anonymous
April 03, 2008
Hi Staura - It sounds like you have a permission problem for this registry key, which is typically something that SubInAcl will allow you to solve. However, before running the tool, you could attempt to manually fix the permissions for just this one registry key and see if it helps resolve your iTunes installation issue. To do that, you can launch regedit.exe, then find this registry key, right-click on it and choose Permissions. From there, you can add the SYSTEM account and the Administrators group, and grant them Full Control permissions. Hopefully this helps!
Anonymous
April 04, 2008
Hi Aaron Thanks for the feed back, I have just tried and the key says "ProxyStudClsid32 cannot be opened. An eror is preventing this key from being opened. Details: Access is denied" It then allows me access to the Permissions but I can't save any chages or add any admistration groups. I think I will try your SubInACL soloution and if it doesn't work, I will restore the factory settings and start again! To be honest we are having so many problems with Vista anyway; recyling files is now taking a good minute regardless of size (Microsoft have been no help on this), Windows media player won't work either despite installing all kinds of codecs to resolve the issue (we are now running classic version as it is the only one that will work), I think a complete system restart really could only improve the situation. Thanks for you help, its really appreciated
Anonymous
May 05, 2008
Aaron: Thank you. Thank you. Thank you.
Anonymous
May 18, 2008
Hi, I've been having problems with Office 2003 updates since I upgraded to XP SP3. When I start MS Expression Web, Windows Installer would start and try to reinstall Office 2003 and then it would fail due to a registry key permission issue (which I tried to fix manually in the registry, but it didn't help). Also, I couldn't install Office updates I received from Windows Automatic Updates. I found reference to your blog on the Windows XP Microsoft Discussion board. I followed your directions above using the SublnACL tool and it worked! I no longer get the Window Installer popping up all the time and I was able to install the Office 2003 automatic updates. Thank you for posting these instructions! I will amend my post to the discussion board where I sought help for this issue, and state that I found the answer here on your blog. Thanks again! Great job!
Anonymous
May 28, 2008
ok, blackberry works now... but now all my sound is not working and the network monitor and updates are disabled. Ummm, not like I knew what I was doing running this but I was desperate last night. How now to re-enable those other devices. Thanks
Anonymous
May 29, 2008
Hi Ex19 - I'm sorry for the hassles this is causing for you. I'm not sure what to suggest to fix your sound and network monitor. What kind of specific errors do you get for those things? It might help to try to update drivers for your sound card to fix your sound issue.
Anonymous
May 29, 2008
The comment has been removed
Anonymous
May 29, 2008
Thanks for answering. Well here's the deal. Audio Service is not running, connection status unknown not enough storage is available to complete this operation, windows installer service could not be accessed, security center can not change your automatic updating settings (tried manual, failed) Like EVERYTHING in the system is pretty much flipping out. I ran the blackberry no media after this subinacl and everything from then on was all downhill. I have no idea what I'm doing but it seems that lots of stuff in my computer has fried. Tried to reinstall the drivers for audio, no help. Now I'm going to try running vista update to hope it will go through and figure out what is wrong and fix it. Prob. wishful thinking. I'm not sure but I have a feeling it's acutally the blackberry software, but now I can't uninstall it. I'll keep you up to date, but if you see some theme in here I'd really appreciate a hand.:)
Anonymous
May 30, 2008
The comment has been removed
Anonymous
May 30, 2008
Hi Ex19 - I'm not sure how to explain these additional errors that you're seeing. Since you mentioned that you're running Windows Vista, you may be running into some of the complications that other folks who have posted comments on this blog post have mentioned. Specifically, I'd suggest looking at the comment at http://blogs.msdn.com/astebner/archive/2006/09/04/solving-setup-errors-by-using-the-subinacl-tool-to-repair-file-and-registry-permissions.aspx#7394609 to see if these modified steps help at all.
Anonymous
May 30, 2008
Yes Aaron, the above comment absolutely solved my issue! It was scary, I have to say, but in the end it completely restored all those things that were not working under Vista. Thanks so much for your help.
Anonymous
May 30, 2008
Hi Ex19 - I'm glad to hear that this fixed things for you. I've gone back and updated the list of commands to run in the main blog post and in the cmd file linked in this blog so that others will hopefully not run into this type of error in the future.
Anonymous
June 10, 2008
Dear Aaron, I am trying to solve issues with updating windows SP3 and a many other updates that I cannot get ever since May 14. (My case is similar to GaryE) and I am a mere and humble pc home user. I am getting additional error messages when i dowloand & install subinacl.exe even if i tried to ignore and kept going - Internal error 2350. Then I followed the thread of issues with subInAcl (739820) and now I am getting - unexpected error 1605 () - at the cmd [prompt. I am feeling desperate and I do not know what to do. Can anybody guide me please? Grb1
Anonymous
June 10, 2008
Hi Grb1 - I'm not sure I understand the exact problem you're currently facing. Are you seeing errors while trying to install SubInAcl.msi, or while trying to run the command lines listed in this blog post to update permissions? Can you please list the exact steps you have tried and the exact error messages that you received while doing so?
Anonymous
June 13, 2008
I've been using Vista Ultimate with all current updates for over a year without any installation issues, but for the past month I've been having problems with program updates not installing due to access being denied. Specifically: Error 1310. Error writing to file: c:Config.Msi... .rfb. Verify that you have access to that directory. Also encountered similar problems with QuickBooks and iTunes+QuickTime updates. I started having problems with searching in Outlook 2007 last week and tried a repair. That's when I narrowed down what was going on (or not). I've remedied that by reindexing, but now get an error about Custom UI Runtime Error in MS Access Outlook Add-in for Data Collection and Publishing ... An error occurred while calling the callback: "Ribbon_GetDCVisible." I've consulted with a Dell tech and another Vista-savvy tech. I've tried logging on as Administrator (which I am also), creating a new administrator profile, Aaron Stebner's SubInACL recommendation: http://blogs.msdn.com/astebner/archive/2006/09/04/739820.aspx . After this I was able to install the QuickBooks update, but not iTunes, nor can I accomplish a repair to MSO 2007 Pro. I've installed the latest versions of Windows Installer and .NET Framework. UAC is disabled. Does anyone have any suggestions for further action? And information on why this started happening? Thanks, Cathy
Anonymous
June 13, 2008
Hi Cathy C - I'm not sure how to explain all of these errors. Do you have any idea what specific changes were made to your system immediately before these errors started happening? If you could narrow it down to a specific Windows Update or something like that, it could be really helpful. Also, if you haven't already, I'd suggest trying to install Windows Vista SP1 on this system to see if that resets any of the permissions on your system and helps fix any of these errors.
Anonymous
June 17, 2008
A while back, I posted some instructions for using a tool from the Windows Resource Kit named SubInAcl
Anonymous
June 20, 2008
I think you have a type-o in the script missing a backslash after %SystemDrive%. Somehow my Windows XP Home Ed. got its permissions on "C:Program Files" corrupted and this script skipped over it. Running this command got my file system perms fixed up... subinacl /subdirectories c: /grant=administrators=f /grant=system=f What a relief....
Anonymous
June 20, 2008
Hi Bm55b - Thanks for letting me know about this missing back-slash. I'm going to update the main blog post text and the downloadable script to address this.
Anonymous
July 13, 2008
I had vista x64 and was trying to get SubInACL to work. For some reason I was defaulting the install to C:Program FilesWindows Resource Kits. Anytime i tried to run subinACL it would give me an error about not being recognized. I removed the program, reinstalled and made sure to allow it to default to C:Program Files (x86)Windows Resource Kits Once complete I was then able to run SubInACL and fix my registry issue quickly. Not sure if this has been posted, but I saw people having issues with Vista Ultimate X64 and would like to say that it does indeed work in vista x64 Thanks for the help!
Anonymous
July 18, 2008
The comment has been removed
Anonymous
July 21, 2008
The comment has been removed
Anonymous
July 25, 2008
Hi, I was desperate as i got a access denied message when trying to update my 2 windows 2003 x64 domain controllers to sp2 from r2. So I thought the problems were related to permissions either in the registry or on the filesystem. After running your reset.cmd, I only have blank desktops, no taskbar, some services are not running, for example IIS, i am lost, what can I do??
Anonymous
July 25, 2008
Hi Toby77jo - I'm sorry for the hassles that this issue is causing for you. I haven't heard of the SubInAcl command lines listed above causing this kind of trouble on the system, so I'm not sure how to explain why this is happening. The commands listed above should only be adding permissions to the registry and file system on your computer - they shouldn't be removing anything that existed previously. I'd suggest using a system restore point to roll back to a point before you ran SubInAcl if possible, and then you can try to manually update permissions to try to fix the access denied errors you are encountering. For files/folders, you can update permissions by right-clicking on them in Windows Explorer. For the registry, you can update permissions by opening regedit and right-clicking on keys.
Anonymous
July 25, 2008
Hi, but windows 2003 does not have system restore by default, am i wrong? I will try a full system restore from an image, hope it will work. All this might not be the reset.cmd fault but also due to the failed sp2 installation...
Anonymous
July 26, 2008
Hi Toby77jo - Yes, I think you will need to do a restore from an image in this case. It is possible that the failed SP2 install caused these issues, but I'm not sure. I'm not sure how the SubInAcl commands would cause services that previously worked to stop working though.
Anonymous
July 29, 2008
Did you even know what are you doing??? This command grant access to every folder for every user: subinacl /subdirectories %SystemDrive% /grant=administrators=f /grant=system=f /grant=users=e >> %temp%subinacl_output.txt How could you explain this???
Anonymous
July 29, 2008
The comment has been removed
Anonymous
July 29, 2008
Of course not! You grant access to folder c:documents and settings too, and every subfolders like "my documents" every profile settings all stored passwords for outlook and so on... and it will be transparent to everyone. If you dont know what are you doing at least not recommend this to others.
Anonymous
July 29, 2008
The comment has been removed
Anonymous
July 29, 2008
Hi people, I have a little problem over here when trying to use SubInACL to solve my problem. I've tried everything I've found on the web but no matters what I do I just can't find out a solution. I get this when I type reset.cmd on my command prompt: D:WINDOWS>reset.cmd Determine whether we are on an 32 or 64 bit machine Resetting ACLs... (this may take several minutes to complete) ========================================================================== Elapsed Time: 00 00:00:00 Done: 0, Modified 0, Failed 0, Syntax errors 1 Last Syntax Error:WARNING : /grant=administrators=f : Error when checking argume nts - HKEY_CURRENT_USER Elapsed Time: 00 00:00:00 Done: 0, Modified 0, Failed 0, Syntax errors 1 Last Syntax Error:WARNING : /grant=administrators=f : Error when checking argume nts - HKEY_CURRENT_USER Elapsed Time: 00 00:00:00 Done: 0, Modified 0, Failed 0, Syntax errors 1 Last Syntax Error:WARNING : /grant=administrators=f : Error when checking argume nts - HKEY_LOCAL_MACHINE Elapsed Time: 00 00:00:00 Done: 0, Modified 0, Failed 0, Syntax errors 1 Last Syntax Error:WARNING : /grant=administrators=f : Error when checking argume nts - HKEY_LOCAL_MACHINE Elapsed Time: 00 00:00:00 Done: 0, Modified 0, Failed 0, Syntax errors 1 Last Syntax Error:WARNING : /grant=administrators=f : Error when checking argume nts - HKEY_CLASSES_ROOT Elapsed Time: 00 00:00:00 Done: 0, Modified 0, Failed 0, Syntax errors 1 Last Syntax Error:WARNING : /grant=administrators=f : Error when checking argume nts - HKEY_CLASSES_ROOT System Drive... Elapsed Time: 00 00:00:00 Done: 0, Modified 0, Failed 0, Syntax errors 1 Last Syntax Error:WARNING : /grant=administrators=f : Error when checking argume nts - D:Archivos Windows Directory... Elapsed Time: 00 00:00:00 Done: 0, Modified 0, Failed 0, Syntax errors 1 Last Syntax Error:WARNING : /grant=administrators=f : Error when checking argume nts - D:WINDOWS ========================================================================== FINISHED. Press any key to exit . . . By the way here is some extra information you may need to help, I'm using XP SP2 as OS, and my windows installation is in the drive D:,... the language of my OS is spanish - that is the reason for which I have a bad quality of english, I am an argentinean :P- I've already try lots of things such as running as administrator or use a different reset.cmd.txt I've found on google. The problem that I've by which I've to SubInACL is that when I try to install Natural Color Pro I get an error saying: Self-Registration Error The following files din not self-register or unregister:

D:WINDOWSsystem32Flash.ocx Error al tener acceso al Registro OLE So I can't isntall it because of that problem with accessing OLE registry. Any suggestions would be greatly appreciated. Thx for reading all this ;D

Anonymous
July 30, 2008
The comment has been removed
Anonymous
August 02, 2008
The comment has been removed
Anonymous
August 03, 2008
The comment has been removed
Anonymous
August 05, 2008
Hi CeltC - One thing I forgot to mention here - if you are using a non-English version of Windows and any of the user or group names are translated on your system, then you will need to adjust these SubInAcl command lines to use the translated names. This is described in more detail in issue #1 in the blog post at http://blogs.msdn.com/astebner/archive/2008/06/17/8613982.aspx.
Anonymous
August 20, 2008
In the file "reset.cmd" you are supposed to replace "username' with your name. Assuming your name is "John Doe", would you replace with: John Doe or "John Doe" With thanks
Anonymous
August 20, 2008
Hi DaddySam - That is correct - there is a step listed above that says "Change the values named YOURUSERNAME to be the Windows user account that you are logged in with." However, it is easy to miss that, so I'll add a comment to the copy of reset.cmd on my file server as well to hopefully help people find that in the future.
Anonymous
August 20, 2008
Windows Update for SP3 gave me the following error message: Service Pack 3 setup could not backup Registry Key HKLMSoftwareMicrosoftWindowsCurrentVersionUninstallKB873339 to file C:Windows$NtServicePackUninstall$reg02315. 5: Access denied Should I run the SubInACL tool or would there be a simpler solution to that problem ? This is the first time that I am encountering an installation problem With thanks
Anonymous
August 20, 2008
Hi DaddySam - The SubInAcl command lines listed above will update the permissions for several locations on your file system and in your registry. For this particular error, it lists an exact location that it is having trouble accessing. It might be possible to just go in and manually update the permissions for that specific folder location and see if that solves this error. You can update permissions manually by doing the following:

Opening Windows Explorer
Right-click on the folder and choose Properties
Click on the Security tab
Add the necessary permissions (typically, you need to make sure that the SYSTEM account and the Administrators group both are listed there and have Full Control permissions granted to them Hopefully this helps.

Anonymous
September 06, 2008
Running the script at the top of this page on a Vista 32 machine I get several 'Failed' and a 1.8Gb subinacl_output.txt file generated. Is this normal? I have tried running in normal windows mode as well as safe mode with similar results. Should I be able to get to a point where there are no failures or should there always be a few? Thanks for any help. The summary output from running the script is: Determine whether we are on an 32 or 64 bit machine Resetting ACLs... (this may take several minutes to complete) IMPORTANT NOTE: For this script to run correctly, you must change the values named bob to be the Windows user account that you are logged in with. ========================================================================== Elapsed Time: 00 00:00:23 Done: 19122, Modified 19122, Failed 0, Syntax errors 0 Last Done : HKEY_CURRENT_USERVolatile Environment1 Elapsed Time: 00 00:00:00 Done: 1, Modified 1, Failed 0, Syntax errors 0 Last Done : HKEY_CURRENT_USER Elapsed Time: 00 00:10:31 Done: 377633, Modified 377618, Failed 15, Syntax errors 0 Last Done : HKEY_LOCAL_MACHINESYSTEMCurrentControlSetServicesa9hqrxfrParam etersPnpInterface Last Failed: HKEY_LOCAL_MACHINESYSTEMCurrentControlSetServicessptdCfg : 5 A ccess is denied. Elapsed Time: 00 00:00:00 Done: 1, Modified 1, Failed 0, Syntax errors 0 Last Done : HKEY_LOCAL_MACHINE Elapsed Time: 00 00:08:49 Done: 128238, Modified 128226, Failed 12, Syntax errors 0 Last Done : HKEY_CLASSES_ROOT{FEDC2E25-975DFD53-6981D376} Last Failed: HKEY_CLASSES_ROOTCLSID{FEE45DE2-A467-4bf9-BF2D-1411304BCD84}Inpr ocServer32 : 2 The system cannot find the file specified. Elapsed Time: 00 00:00:00 Done: 1, Modified 1, Failed 0, Syntax errors 0 Last Done : HKEY_CLASSES_ROOT System Drive... Elapsed Time: 00 00:12:26 Done: 0, Modified 0, Failed 0, Syntax errors 0 Windows Directory... Elapsed Time: 00 00:04:20 Done: 92977, Modified 92972, Failed 5, Syntax errors 0 Last Done : C:Windowswinsxsx86_xrxscan.inf.resources_31bf3856ad364e35_6.0.60 00.16386_en-us_ed393488b2a7196cxrxscan.inf_loc Last Failed: C:WindowsSystem32LogFilesWMIRtBackupEtwRTEventLog-System.etl

CreateFile Error : 5 Access is denied. ========================================================================== FINISHED.

Anonymous
September 08, 2008
Hi FredJones - In my past experience using SubInAcl, I found that there are typically always some registry values held in use by the OS that can cause errors/warnings when trying to update the permissions. It is usually OK to ignore that type of error/warning unless it is causing some specific error while trying to install or use a specific application on your system.
Anonymous
September 27, 2008
Thanks a lot for this routine. I'm running XP, and tried to install DeLorme Topo USA 7.0. Tried about ten other things before I found your blog. Ran the reset.cmd from here and it worked like a champ. http://astebner.sts.winisp.net/Tools/reset.cmd.txt Again. Thanks a million!!!
Anonymous
September 27, 2008
The comment has been removed
Anonymous
October 04, 2008
Is this an ignorant question? I'm installing SP1 on VISTA and it goes into a loop on stage 3 - no matter if it's SAFE mode or not. The solution is to do a restore. I've tried restore from WinRE, and the original DVD and I get 0x80070005 - access denied. Since I don't have a system - only WinRE (a basic DOS) system can SubInACL run in that environment? I just want to do a restore and somehow get by the 'access denied' problem. Thanks ... Michael
Anonymous
October 05, 2008
Hi MHalladay - I don't know for sure if SubInAcl can be run from this type of environment. For this type of Vista SP1 install error, I'd suggest trying one of the free Vista SP1 support options listed at http://support.microsoft.com/oas/default.aspx?ln=en-us&prid=11274.
Anonymous
October 05, 2008
I started with notes to Microsoft last Tuesday - took 72 hours for the 1st 24hr (advertised) response. The 2nd response was within the 24 hours. They asked me to do a CHKDSK /R (which anyone knows takes about 12 hours - needless to say a brush off) I told them I'd aready done that it was clean) Took another 24 hours for them to ask me to do a RESTORE. Since I'd already told them in my 1st note that I'd tried that - it was another brush off. Anyway it's been about 6 days and so far nothing in the last 36 hours. I suspect they'll either tell me to re-install VISTA (Clean of course) or to do another CHKDSK. Needless to say MS is a write-off which is why I'm looking everywhere else for an answer. You'd think my original question to them - I'm in a loop on stage 3 installing SP1 and restore gives me a 0x80070005 - access denied - would be for them a simple look in their database for an answer and tell me what it is. Instead it's the same old run around. Luckily only one of my systems is VISTA, but it's an important system. I'm still looking for answers.
Anonymous
October 22, 2008
Dear Aaron, I have a Lenovo laptop which has Vista O/s in it. It's a Pre-Installed Version. Recently i noticed that i'm facing a strange problem, that i'm unable to delete/move files inside a folder in D Drive. I have two folders in D Drive.

Program Files
Others I'm able to create/delete/move/copy files or folders into "Others" folder. Were as i don't have permission to delete/move/add new file or folders to the "Program Files" folder in D Drive. I found your blog discussing about similar issue(s). I tried even installing "SubInACL tool" but that hasn't helped me. Is there any specific method/way to get rid of this problem. I'm facing this for more than 2 months. Thanks for any help. Regards, Rajan.SP

Anonymous
October 22, 2008
Hi Rajan SP - The SubInAcl command lines listed in this blog post only change permissions on the system drive (the drive letter that you have Windows installed to). If you don't have Windows installed to your D drive, then those command lines will not help. You can try one of the following to see if they help in this scenario:

Update the command lines listed above to cause SubInAcl to modify permissions on your D drive instead of %programfiles% and %windir%
Manually change the permissions for the folder that you're having trouble with by right-clicking on the folder and choosing Properties, then Security, then clicking the Edit button and adding the users/groups that you want to have permission to this folder

Anonymous
October 22, 2008
The comment has been removed
Anonymous
October 22, 2008
The comment has been removed
Anonymous
October 26, 2008
Hi Aron, I'm facing the same problem of update error 80070005 (I'm using vista ultimate). I've tried as per above instruction. First downloaded the Subinacl, then installed in c:Program FilesWindows Resource KitsTools then copied the commands as reset.cmd then i run this file as adminiatrator. An dos window prompted and started resetting the ACL. This has started y'day evening 8pm still it's going on, nearly 45 million registries have been modified and aroung 36 registries failed. I want to know how long it'll take to complete the resetting and regarding failed registries what i've to do. Kinldly advice. Thanks/Balaji
Anonymous
October 27, 2008
Hi Balaji7u - The time it takes to run the SubInAcl tool depends on how many files, folders and registry values it needs to process (which is specified by the command lines you pass in when you run it). If you are getting that many errors, it doesn't sound like it is running correctly though. I'd suggest trying to run it from an elevated cmd prompt instead of right-clicking and trying to run it as administrator that way. Step 2 in this blog post will allow you to launch an elevated cmd prompt. Also, if your issue is happening while installing OS updates on Windows Vista, there are a couple of other things I'd suggest trying before resorting to using SubInAcl:

Try to install Windows Vista SP1 if you haven't already. It contains many fixes for the OS update installation engine on Vista, but it may not install correctly either if you're already having trouble installing OS updates.
Try the System Update Readiness Tool described at http://support.microsoft.com/kb/947821.

Anonymous
October 27, 2008
The comment has been removed
Anonymous
October 27, 2008
Hi Balaji7u - If SubInAcl crashed, it probably did not complete the actions in the command lines that you ran. There are a couple of things I'd suggest trying next:

Manually update the permissions for the files/registry that are currently giving you the 0x80070005 error messages. Usually, there will be log file entries or event log entries that specify exactly what files/registry you are getting access denied from.
Try the Windows Vista SP1 support site for more in-depth troubleshooting assistance. You can find contact information for this at http://support.microsoft.com/oas/default.aspx?ln=en-us&prid=11274.

Anonymous
December 01, 2008
Hi, I've bought a new laptop last year and haven't been able to download itunes because I get the following error- The installer has insufficient privileges to modify this file: C:programFilesItunesItunes.Resourceszh_TW.lprojYahooLicense.rtf. I was using the Itunes message boards for help and was directed to your tool. I tried to run it but I got the following message- subinacl' is not recognized as an internal or external command, operable program or batch file Would this tool help fix my problem? If so, could you help me use your tool correctly? Thanks
Anonymous
December 02, 2008
Hi Aaron, Sorry if this is the wrong place for this, but it seemed related. I was having problems getting a program running on 64 bit Vista due to an issue that I've seen where the registry has no users listed as having access to the registry. (The issue is described here: http://www.brianpeek.com/blog/archive/2007/11/29/weird-vista-registry-issue.aspx) I know someone else who had this same issue and was told by a Microsoft rep to install subinacl to c:WindowssysWow64 and to save the batch file to the same location. This was the content of the file: @echo off subinacl /subkeyreg HKEY_LOCAL_MACHINE /grant=administrators=f subinacl /subkeyreg HKEY_CURRENT_USER /grant=administrators=f subinacl /subkeyreg HKEY_CLASSES_ROOT /grant=administrators=f subinacl /subdirectories %SystemDrive% /grant=administrators=f subinacl /subkeyreg HKEY_LOCAL_MACHINE /grant=system=f subinacl /subkeyreg HKEY_CURRENT_USER /grant=system=f subinacl /subkeyreg HKEY_CLASSES_ROOT /grant=system=f subinacl /subdirectories %SystemDrive% /grant=system=f @Echo ========================= @Echo Finished. @Echo ========================= @pause When ran it, it started to work correctly, until I got an error stating that "subinacl.exe has stopped working", then the command prompt closed. Now, after rebooting, the program will start up fine, but the system audio, GoToMeeting, and Windows Mobile Device Center do not work. Also, Windows Explorer does not see the workgroup machines. I checked system restore, but it says that "System restore is not functioning correctly on this system" Sorry for the long post. I'd appreciate any help.
Anonymous
December 02, 2008
Hi Andreboy - SubInAcl might be able to help for this type of installation error. To run SubInAcl, you first have to download and install it, then you need to follow the exact steps listed in this blog post. I've tried to make those steps as simple to follow as possible, and I'm not sure how else to explain them. Can you describe exactly what you tried when you ran it and got this error? From the error, it sounds like either you didn't yet install the tool, or it did not install to the expected location of c:Program FilesWindows Resource KitsTools.
Anonymous
December 02, 2008
Hi Lrios80 - If you're having the same issue as described at http://www.brianpeek.com/blog/archive/2007/11/29/weird-vista-registry-issue.aspx, then I'd suggest using the SubInAcl command lines listed in that blog post instead of the set that you listed. If you had no users listed for permissions in these registry keys, then the commands you list will only grant the system account and Administrators group access to those keys, but they will not grant your user account access. That can end up causing a lot of problems getting software to run correctly unless you run it as an administrator. The command lines in that other blog post include steps to grant your user account permissions as well. Hopefully this will help in your scenario.
Anonymous
December 13, 2008
I tired using the SubInACl and all it did was restart my computer and cause all my files have the share icon on them, did I do something wrong? And how can get rid of all the share icon on all my folders?
Anonymous
December 16, 2008
Hi Herolegendmyth - I've never heard of SubInAcl causing your system to reboot on its own. I'm also not sure what you mean by a share icon. You may want to try to restore back to an earlier system restore checkpoint to revert any changes that SubInAcl made to your system.
Anonymous
December 20, 2008
Hi Aaron, Not sure if a non-techie should give this fix a whirl, but I'm pretty desperate. (Background - I'm working from the VISTA O/S - I am the administrator, but my kids also have accounts). I followed your instructions, (I had to download the zipped version). After creating the reset command file, I get this when I type reset.cmd on my command prompt: C:Windowssystem32>reset.cmd C:Windowssystem32>cd /d "C:Program FilesWindows Resource KitsTools"subinacl /subkeyreg HKEY_CURRENT_USER /grant=administrators=f /grant=system=f /grant=res tricted=r /grant=Cindy=f /setowner=administrators /keyreg HKEY_CURRENT_USER /gr ant=administrators=f /grant=system=f /grant=restricted=r /grant=Cindy=f /setowne r=administrators /subkeyreg HKEY_LOCAL_MACHINE /grant=administrators=f /grant=s ystem=f /grant=users=r /grant=everyone=r /grant=restricted=r /setowner=administr ators /keyreg HKEY_LOCAL_MACHINE /grant=administrators=f /grant=system=f /grant =users=r /grant=everyone=r /grant=restricted=r /setowner=administrators /subkey reg HKEY_CLASSES_ROOT /grant=administrators=f /grant=system=f /grant=users=r /se towner=administrators /keyreg HKEY_CLASSES_ROOT /grant=administrators=f /grant= system=f /grant=users=r /setowner=administrators 1>>C:UsersCindyAppDataLoca lTempsubinacl_output.txt The filename or extension is too long. C:Windowssystem32>subinacl /subdirectories C:Program Files /grant=administra tors=f /grant=system=f /grant=users=e 1>>C:UsersCindyAppDataLocalTempsubi nacl_output.txt 'subinacl' is not recognized as an internal or external command, operable program or batch file. C:Windowssystem32>subinacl /subdirectories C:Windows /grant=administrators=f /grant=system=f /grant=users=e 1>>C:UsersCindyAppDataLocalTempsubinacl_o utput.txt 'subinacl' is not recognized as an internal or external command, operable program or batch file. C:Windowssystem32> I'ver read through this blog and didn't see anyone else post this kind of problem (although it's a pretty long blog). If you can offer any suggestions, I'd really appreciate it. I'm sorry if I'm wasting your time with this... Cindy
Anonymous
December 20, 2008
The comment has been removed
Anonymous
December 29, 2008
Just wanted to pop in and say thanks for the great fix. My parents (and my resulting sanity at not hearing "Come over and fix our computer!") thank you!
Anonymous
February 28, 2009
Thank you so much for this SubInACL fix. I have a MS Vista Home Premium operating system and I was getting the 80070005 error and the automatic updates just stopped. I downloaded the SubInACL and followed the directions explicitly, retried updates and it worked perfectly. It feels risky entering code without understanding, but I'll just add that to the list of everything else I just have to trust! I've bookmarked your blog and am going to pass it on to my kids who will be thrilled that I didn't call them to solve my problem. Thank you Aaron.
Anonymous
March 08, 2009
OS XP Pro SP2 DotNet VersionCheck Utility confirms that no version of .NET Framework is installed. Attempting to install any version of .NET including .NET 1.0 fails always for basically the same reason. Failure to access a registry key in HKEY_LOCAL_MACHINESOFTWAREMicrosoftActive SetupInstalledComponents. Logged in as Administrator, permissions have been given full control as Admin and even as Everyone fo that specific tree starting from HKEY_LOCAL_MACHINESOFTWAREMicrosoft. Running the Subinacl cmd as mentioned in this blog unfortunately fails to solve the issue. Attempting to install .NET 1.0 after have set Full Control returns the following error: Error 1402. Could not write value Locale to key SOFTWAREMicrosoftActive SetupInstalledComponents{78705f0d-e8db-4b2d-8193-982bdda15ecd}. Verfiy that you have sufficient access to that key Attempting to install .NET 1.1 after have set Full Control returns the following error: Error 1406. Could not write value Locale to key SOFTWAREMicrosoftActive SetupInstalledComponents{CB2F7EDD-9D1F-43C1-90FC-4F52EAE17A1}. Verfiy that you have sufficient access to that key, or contact your support personnel The mentioned keys do not exsist and I assume are being created during the installation process. All installed security programs that have been closed or disabled prior to installation of .NET. ESET NOD32 Antivirus Greatis RegRun Comodo Firewall Comodo BOClean installed security programs active but not disabled: Spybot Spyware Blaster Malwarebytes Anti-Malware I don't know if attempting to install .NET 1.0 in Safe mode would solve the problem, but would like to get some feedback on that process before proceeding. Any other ideas would be most welcome. TIA
Anonymous
March 09, 2009
Hi AbZu - When Windows Installer creates registry values, it is running with the permissions of the local system account. It is not enough to just add the Administrators group to the permissions list for this registry key to solve this 1402 or 1406 error. I would suggest adding both the Administrators group and the local system account, granting them full control, and making sure to allow these permissions to be inherited by sub-keys to see if that will solve this issue. Some of the command lines for SubInAcl listed above in this blog post will accomplish that for you if you'd prefer to use that tool instead of trying to set these permissions manually.
Anonymous
March 12, 2009
Many thanks. "How to download and run SubInACL" worked for me with an installation error message. The msconfig startup suggestion did not work. Your mitzvah for the day. M.
Anonymous
June 12, 2009
The comment has been removed
Anonymous
June 15, 2009
Hi Dharamg - The reset.cmd script currently doesn't work on 64-bit operating systems. I can post a fix later, but in the meantime, all you need to do is change the item that says %ProgramFiles% to say %ProgramFiles(x86)% instead and then it should run correctly. The error you see about "subinacl is not recognized..." means that the full path listed for subinacl.exe in reset.cmd doesn't match the location that it is actually installed on your system. Please note that the error you are getting about a service not existing is probably not going to be solved by running SubInAcl though. I found a blog post at http://whatsonmypc.wordpress.com/2009/06/09/vistasp2-2/ that has several good troubleshooting options for Vista service pack install issues. I'd suggest trying out the support links listed in there to see if any of those are helpful to you.
Anonymous
December 10, 2009
The comment has been removed
Anonymous
January 16, 2010
After running the reset.cmd script, my problem with Windows update was resolced. However, I started having issues with my audio: red cross in the notification area and a "no audio device is installed" message whenever I was trying to open the volume mixer. I checked that the drivers were OK and reinstalled the latest versions, and all the usual fixes recommended on the net for this issue, when I finally stumbled upon this: http://blogs.msdn.com/larryosterman/archive/2009/01/06/fixing-a-customer-problem-no-audio-device-is-installed-when-launching-sndvol-on-windows-vista.aspx Matter of fact, I also did not have Audiosrv and AudioEndpointBuilder listed in the permissions of my MMDevices registry keys. I never managed to add them back, but I gave full permission to Everyone on these keys and that fixed the problem. Was this possibly caused by the reset.cmd script?
Anonymous
January 16, 2010
Hi Daviddemarneffe - It is possible that SubInAcl indirectly caused this type of problem. I have heard of some sporadic cases where on Vista, somehow some parts of the registry end up with entirely blank permissions (which is the equivalent of everyone having unlimited access). This is described in a bit more detail at http://www.brianpeek.com/blog/archive/2007/11/29/weird-vista-registry-issue.aspx. If that happened on your system and then you ran SubInAcl using the commands in reset.cmd, it would have added permissions for the SYSTEM account, the Users group and the Administrators group, and by virtue of adding those permissions to a key that previously had blank permissions, it would have removed permissions that might have inadvertantly been there previously. The SubInAcl commands listed in this blog post do not do anything with those 2 audio service items listed in Larry Osterman's blog post. The SubInAcl commands here don't specifically remove an ACLs that are already set, but if you ended up in that weird state with blank permissions, it could seem like it removed permissions.
Anonymous
April 28, 2010
The comment has been removed
Anonymous
April 30, 2010
Installed the Subinacl and followed directions. Maybe I am copying tooo much of the reset contents that you provided? I removed the YOURUSERNAME in two locations and created a new .cmd file. Still, the results are; file too long not recognize internal or external. Where am I going wrong? Thank you
Anonymous
May 01, 2010
The comment has been removed
Anonymous
May 01, 2010
The comment has been removed
Anonymous
May 04, 2010
thankyou soooooo much. I have been having stupid script problems and was unable to access user control settings and a few other things. I tried this after trying heaps of other fixes and wow it worked. thankyou. I came across your site from here... http://forums.techarena.in/windows-xp-support/956284.htm
Anonymous
June 12, 2010
The comment has been removed
Anonymous
June 18, 2010
This is AWESOME. I hope others who have this problem finds this page. Microsoft needs to take a look at this.
Anonymous
June 19, 2010
Hey! Thank you so much .. you can be proud of yourself ...you just helped a psychologist to solve an IT problem :D
Anonymous
June 23, 2010
WELL done !.. Thanks, after a week of struggle. all is working :D (on a windows 7 machine non the less)
Anonymous
June 27, 2010
The comment has been removed
Anonymous
June 28, 2010
Hi there, can anyone tell me the correct translation for "restricted" into german? I tried different translations, but nothing works ... I'm running a german Windows-Version, so I need to translate the command lines. Thanks alot
Anonymous
July 02, 2010
Hi Jim - I'm not sure how to explain those errors that are referring to "james 1337" in your output. I'd suggest trying to use the version of the script that Mjölnir @ PCPerspective.com posted a few weeks ago in one of the comments on this thread and see if it helps correctly resolve your user name. Hi Nico - I don't know what the correct translation is for the RESTRICTED account in the German version of Windows. You may be able to find it by looking at some of the existing permissions in the registry and file system on your computer in regedit.exe or Windows Explorer though.
Anonymous
July 14, 2010
I was really scared to try this but I had something wrong with my computer and I had to open Windows Media Player using "run as administrator" and I couldn't upgrade and numerous other problems. I wanted to download audio books from OverDrive but WMP gave me errors when I tried the security update. I followed your instructions carefully and it took about 1/2 hour of the program to run. When it finished, I tried all the programs that were giving me problems and they worked! I was able to get the security update and download my audio books. It's so fantastic!! Thank you so much! I was going to burn all my stuff to DVDs and reformat my computer because I didn't know what else to do to fix it. It has saved me multiple hours (probably days) of work! :-)
Anonymous
July 19, 2010
thank you fixed my "Could not open key: HKEY_LOCAL_MACHINESoftwareClassesInterface{Whole bunch of numbers}ProxyStubClsid" when trying to update itunes
Anonymous
August 02, 2010
We were trying to install a renewal update of McAfee and Windows showed that it was installing "Microsoft Office Professional Hybrid" -- we stopped the install, but now Office won't work. Will SubACL work for this? We're running Vista SP1.
Anonymous
August 02, 2010
Hi Toneweaver - I don't know if SubInAcl will work for this type of issue. What exact errors do you see when you try to run Office? Does it help to try to repair Office using the entry in the Programs and Features control panel?
Anonymous
August 09, 2010
I am having problems with my registry. I am using Windows Vista Home Premium 32bit I'll explain: Trying to install somes plugins for an Audio software, I changed in "Regedit" the permission of "HKEY_LOCAL_MACHINESOFTWAREClasses" After changing that my computer became very strange. For example: I can't see anything in the regular Control Panel of Vista, I have to select Classic Mode. Many programs that appear when I right clicked on a file are missing. The icons of the Hard Drive had changed and the DVD Drives now says "CD" I can't copy anything into one of my external Hard Disk My Messenger is not working. The Windows Update is not working either. It seems that when I changed the permission, it all became a mess. I dont have a back up registry file nor a restore in time. This process you describe will help me to solve my problem? Please I ask for help for a solution to my problem. I am desperate.
Anonymous
August 10, 2010
Hi Kinnikuchu - This type of issue is an example of why it is very important to make a backup of your registry before making this type of change. The information under HKLMSoftwareClasses is used by many places in Windows and by many applications, so changing permissions to that can be particularly damaging. Normally, the Administrators group and the local system account have full control over that sub-key and all of its children, and the Users group has read permissions. Some of the example SubInAcl command lines in this blog post will set those permissions for this key, so these steps might help solve some of these issues on your computer. You could also try to manually update the permissions that you previously changed while trying to install those audio plug-ins.
Anonymous
August 11, 2010
Hi, Im just writing this message to thank you for posting this magnificent solution. I was able to solve all of the issues I had. Now my computer is working as good as new. Now I have learned the lesson to never mess with the registry or with regedit.exe To always have a registry backup and a point in the Windows Restore. Many thanks for this post! BTW; I was capable of backing up all my files to my external hard drive before doing this process. I was doing it wrong at first but then I figure out how to do it right :) Thanks you///
Anonymous
September 19, 2010
My problem started from me not being able to access "User Accounts" from the Control Panel. It would give me a internet explorer error, (with the error name and location being all blank" asking me if I wanted to proceed. Clicking "yes" or "no" was futile, nothing would get me past that error screen. So I tried to update IE from 7 to IE 8 hoping that would solve the problem. But I get getting "installation failed" errors. Finally upon coming to this page and following the thorough instructions..... IT WORKS !!!!!! THANK YOU !!
Anonymous
September 25, 2010
Hey! Great advice! I have a slight problem however. I get to step 7 and it comes up with an error saying that I don't have permission to save in that location and to contact my administrator to obtain permission. I have tried everything from turning off my UAC to changing the security preferences on my C drive to give me all permissions. Someone please help asap!
Anonymous
September 26, 2010
Hi Joel45 - What is the exact location you are trying to save the file to in step 7? Does it help to download the copy of that file from my file server instead (using the link in step 5)?
Anonymous
September 27, 2010
hi.. i've some trouble with Installing IIS on Windows Server 2008 Standart Edition/Enterprise Edition 32bit/64bit, thats to say all.. i tried three different hardware but each time a got the same result, the computer freezes.. i waited in once about 4hours but nothing gonna happened.. i thought it could be for the same reason which was meintoned on this blog. could it be? Besides, i cannot uninstall Microsoft Office 2010 Professional x64, and tried to steps meintoned above but nothing gonna happens.. it fails, img214.imageshack.us/.../aclfix.png
Anonymous
September 30, 2010
Hi Kursat - Without more details about the exact errors that you're seeing, it is hard to say whether or not it is a file/registry permission problem causing the errors that you're seeing. Do you have any more detailed error messages in your application event logs from these scenarios, or any log files from the failing installations that you can share? Also, the screenshot you provided shows zero errors, so I'm not sure I understand what is failing in that scenario.
Anonymous
October 17, 2010
I tried this on my Windows 7 system to see if it would resolve my install issues with Quicken Home & Business 2020 (Error 1935). I received many "Access is denied" errors during the run of SubInACL. Here is a sample: HKEY_LOCAL_MACHINESOFTWAREClassesAccDictionary.AccDictionaryCLSID - RegSetKeySecurity Error : 5 Access is denied. I tried to install Quicken H&B again but got the same error 1935.
Anonymous
October 17, 2010
Hi Aaron I downloaded and ran SubInAcl because I was having problems with Adobe Acrobat Installer and its uninstallation. Surprisingly, running SubInAcl and reset.cmd not only enabled complete uninstallation of Acrobat but also enabled uninstallation and reinstallation of Windows Live Essentials, which was giving me all sorts of problems. What's more Windows Media Player 11, which had stopped showing video, has started working properly again. However, Adobe Reader 9.4.0, which I still had, failed to open pdf files after uninstallation of acrobat. I am working on it now. Many thanks.
Anonymous
October 18, 2010
Hi nacnudcw - Can you confirm that you're running SubInAcl from an elevated cmd prompt in your scenario? If you are and you're still getting access denied errors, you may need to go to regedit.exe and manually take ownership of the registry key(s) that are getting this error and update the permissions there instead of using SubInAcl.
Anonymous
October 18, 2010
Hi Vinay28 - You may want to try to contact Adobe technical support for more detailed troubleshooting assistance for the PDF opening issue that you're running into.
Anonymous
October 18, 2010
The comment has been removed
Anonymous
October 19, 2010
Hi Vinay28 - The error code 6 can happen if some part of the OS is holding the registry key in use while SubInAcl is trying to update the permissions. It is usually safe to ignore that type of error. I suspect you would get the same type of error if you tried to manually update the permissions for that key in regedit.exe as well. I don't know what the control panel uses to figure out the "installed on" date for programs that it lists, so I'm not sure how to explain why it would have changed when running SubInAcl. I'm sorry I don't have a better answer for you for that issue. That should just be a cosmetic issue though - it doesn't actually affect the installation state of any program on your computer, so it should be safe to ignore.
Anonymous
October 19, 2010
Many thanks Aaron. I guess I can work peacefully now. Best Vinay28
Anonymous
November 08, 2010
Does this fix also include permissions on another drive? Data(D:) drive? Thanks!
Anonymous
November 08, 2010
The comment has been removed
Anonymous
November 21, 2010
Hi aaron. Im having the 8007005 error when i try to download Vista SP2 32. And also my Windows Update will not allow me to update anything. Ive downloaded your tool and ran it twice but the problem presists. Any Idea on what i can do to fix this? Thanks.
Anonymous
November 22, 2010
Hi Rossmig - It usually doesn't help to use SubInAcl to solve this type of Windows Update problem on Windows Vista and higher. I'd suggest taking a look at the information and the tool in the blog posts at blogs.msdn.com/.../9472695.aspx and blogs.msdn.com/.../9303167.aspx. If the above information doesn't help, then I'd suggest contacting Microsoft technical support for more in-depth troubleshooting assistance. You can find their contact information at http://support.microsoft.com.
Anonymous
November 24, 2010
Thank you so much for taking the time to help others solve their problems been dealing with this for about 4 months tried many different things and yours works the first time. Thank you! Thank You
Anonymous
November 26, 2010
THANKYOU SO MUCH i had a problem with the 8007005 error then i went here to try this social.msdn.microsoft.com/.../b7d1a35f-3759-4217-91ba-e4416ac19d78 .... it turns out that script made me unable to open ANY FOLDERS with explorer.exe everytime i tried to open something it results in an error saying: not enough free memory to run program. also. the system sound and network connection showed that it was disabled, however the internet still works, YAY so i came across your site after a long search i had to use taskmanager (thank goodness it still work) to browse and open the reset.cmd and copied your script into it and ran it. in the end everything is fixed. happy holidays
Anonymous
December 06, 2010
I'd like to have the script in french. Where to get it ? What do you understand by USERNAME in the script, all the users with Administrator's name ?? In my case, I have 2 admin accounts and one user account. Do I have to set up for each accounts ? Need a reply, thanks !
Anonymous
December 07, 2010
Hi Ramaflore - If you need a version of the script that runs correctly on French versions of Windows, you will need to make a copy of the original script and make the necessary modifications yourself. I think some of the built-in account names (like "Administrators") will need to be translated into French but I'm not sure if anything else will need to change as well. The USERNAME value needs to be replaced with the account that you are logged in with. There is a modified script posted by someone from PCPerspective.com in one of the earlier comments on this post that gives an example of how to determine the exact username value to use. The script will reset permissions for HKEY_LOCAL_MACHINE, which is used by all user accounts. It will also reset permissions for HKEY_CURRENT_USER, which is only used by the currently logged in account. If you want the script to reset per-user permissions for all accounts on the computer, you will need to make a copy of the original script and make the necessary modifications yourself.
Anonymous
December 13, 2010
Hi astebner. I see in a previous post that this has worked successfully on a Windows 7 machine. I have also problems with Outlook 2007 and (in desperation) Windows Live Mail not showing up in Default Programs. I installed subinacl.msi, which, when I checked, puts subinacl.exe into the Tools folder. However, when I am running the reset.cmd file in the Administrator Command Prompt, it finishes very fast and results in a bunch of errors: "The file name or extension is too long." 'subinecl' is not recognized as an internal or external command, operable program or batch file. I also cannot find a log file subinacl_output.txt. Merry Christmas and thanks (Not sure if this posted. My apologies if it is going to post twice)
Anonymous
December 13, 2010
Hi Dirk - Could you send me a screenshot of the exact text that you typed into the cmd prompt and what the error is? Also, can you confirm that the error that you listed is just a typo in the comments field on this blog post (you listed "subinecl" instead of "subinacl") and that you didn't try to run a program named "subinecl" on your computer?
Anonymous
December 17, 2010
The comment has been removed
Anonymous
December 19, 2010
Hi Sarah - The user name that you use for these commands should be the same as what you use on the Windows login screen. If you have a space in your user name, then you will probably need to put quotes around it in the command lines that you use to run subinacl.exe. I'm not sure that subinacl will help solve issues installing Windows Vista service packs though. To solve that type of issue, I usually recommend the steps and tool listed at blogs.msdn.com/.../9472695.aspx.
Anonymous
December 23, 2010
THANK YOU FOR THIS!!!!! I have been struggling for months trying to get MS Office to install and run and it was ALWAYS configuring itself on startup. I've tried every suggestion even mentioned in any of the MS Community threads all to no avail. I tried this last night and immediately everything started working correctly!!!!!!!!
Anonymous
December 29, 2010
Hi :) Great information here, although I seem to be having the exact same problem as Dirk. I didn't make a typo though. It basically told me it could not operate the subinacl file. :( My running system is Vista... I don't see where Iv'e gone wrong!
Anonymous
December 30, 2010
Hi Roxy - Can you double-check that you've downloaded and installed the SubInAcl tool to the default location? Also, can you post a screenshot so I can see the exact text that you typed into the cmd prompt and what the error is?
Anonymous
December 30, 2010
Ah ha! I think I may have un covered a little break through here... was reading the website on which you can download the subInAcl.exe file... and under system requirements Vista is not listed... is this a possible set back?
Anonymous
December 31, 2010
Hi Roxy - The SubInAcl tool will install and run correctly on Windows Vista (I've heard from many people who have tried this and had no issues). The reason that Windows Vista is not listed on the download page for SubInAcl is that this tool was posted before Windows Vista existed. They typically do not go back and refresh the information on the download pages for previously released tools when new versions of Windows are released.
Anonymous
December 31, 2010
From the CMD window whilst running: Done: 373109, Modified 316422, Failed 56687, Syntax errors 0 Oh gawd...
Anonymous
January 02, 2011
Hi Reelix - There will always be some errors when running this tool due to things like registry keys being held in use by other applications on your computer. Most of the time, those types of error can be safely ignored. Also, if you are on Windows Vista or higher, make sure that you are running the tool from an elevated cmd prompt so it will have the proper permissions to make changes to your registry.
Anonymous
January 04, 2011
The comment has been removed
Anonymous
January 04, 2011
The comment has been removed
Anonymous
January 04, 2011
sure - what do I need to do to upload files?
Anonymous
January 04, 2011
Hi Steve - You can upload the files to a file server of your choice (such as http://skydrive.live.com) and then reply back here and post links to the file server that I can use to download the files.
Anonymous
January 04, 2011
Aaron, I'm new to this process, so hope it works. Here's the link: cid-ad045636eb442e2e.skydrive.live.com/redir.aspx!102&authkey=vO*sduxCv1A%24 Thanks!
Anonymous
January 05, 2011
The comment has been removed
Anonymous
January 05, 2011
The comment has been removed
Anonymous
January 05, 2011
Hi Tez - In this case, I don't think the SubInAcl tool is what you need to use to solve the issue. There are a couple of things I can think of to try:

Try to launch Outlook with elevated permissions and trigger the configuration dialog again. It might complete successfully if it is run from an elevated process.
If #1 doesn't help, then you may want to try to manually run a repair for Microsoft Office by using the entry in the Programs and Features control panel.
If #2 doesn't help either, then you may need to uninstall + re-install Microsoft Office to solve this problem. Hopefully one of these will help.

Anonymous
January 15, 2011
The comment has been removed
Anonymous
January 15, 2011
Hi Paul Moloney - I think you may have already tried this, but I am going to list it just in case. Does it help at all to use steps like the ones in the blog post at www.raymond.cc/.../full-control-permission-to-delete-or-edit-restricted-windows-registry to take ownership of this registry key? The knowledge base article at http://support.microsoft.com/kb/313222 might also help you reset the permissions on this key.
Anonymous
January 19, 2011
@FuzzyBS After a whole three days trying to install real player which happen to just dissappear trying to update. i finally got it running. I tried the first program which astebner has explained. It didnt work :( I came back to this post today and tried your program and finally it installed and ran. I just finished formatting my computer yesterday. Thanks a lot for your post !!!! You saved my day ...
Anonymous
January 20, 2011
Windows 7 Ultimate I ran SubInACL Tool and then edited the reset.cmd file just like you described. Then I ran Reset.cmd and it seemed like everything worked. I even rebooted my computer before I tried to run windows updates. But I am still getting the same errir, Code 80070005. I have not gotten a Windows Update since 11-10-2010 and I am the only user on my computer, and I am the administrator. Any advice? Please help!!!
Anonymous
January 20, 2011
Hi Jon K - I haven't seen folks have good luck using the steps in this blog post to solve Windows Update installation problems on Windows Vista and higher. I've posted some links to knowledge base articles that might help in this scenario at blogs.msdn.com/.../9472695.aspx. If that information doesn't help, then you may need to either contact Microsoft Technical Support (using the contact instructions at http://support.microsoft.com) or try to repair/re-install Windows to solve this type of Windows Update installation issue.
Anonymous
February 05, 2011
THANK YOU SO MUCH, I had been battling this issue for over a year! This worked I am sooooooo happy and grateful! Finally I am updated!
Anonymous
February 08, 2011
Hi Aaron, thanks for this post. Do you know if there is a way we can include all shared folders as well? For example I have many shared drives folders whose permissions needed to be set. subinacl /subdirectories %fileserver% /grant=administrators=f /grant=system=f /grant=users=e >> %temp%subinacl_output.txt Would the above code work for all network shares? (sorry if double post, not sure if submitted?)
Anonymous
February 08, 2011
Hi Jeff - I'm not sure whether or not SubInAcl would support this type of scenario. The SubInAcl tool installs an HTML file with a user's guide to the same folder as subinacl.exe, so I'd suggest taking a look at that to see if there is any information in there that would help in your scenario.
Anonymous
February 10, 2011
The comment has been removed
Anonymous
February 11, 2011
Hi Jan - SubInAcl will work on a 64-bit OS, but I think it will only fix permissions issues for 32-bit registry keys in that scenario. I'm not sure that SubInAcl is needed to solve this type of issue with Office though. When you see that type of configuration dialog, it means that Windows thinks that there is something broken in Office's installation process that needs to be repaired. It might help to try to launch Office with administrator privileges (by right-clicking on it and choosing Run as Administrator), then let it repair once more. Sometimes, the repair process cannot complete successfully without administrator privileges. If that doesn't help, then there are entries in the event log that will explain exactly why this repair is being triggered. I'd suggest contacting the Microsoft support team again and having them take a look at your application event log to try to narrow down this issue further using those event log entries. The steps I use to look at the event log for this type of issue are described at blogs.msdn.com/.../219764.aspx.
Anonymous
February 16, 2011
Hello Aaron! Just commenting to let you know that four and a half years after you made this post you're still helping people. My case was the dreaded error#1402 from Adobe Reader, which I tried to solve a couple of months back then just ignored it for a while after failing. Yesterday I was cleaning up my computer and decided i'd get rid of it once and for all. Knew the problem was on registry, tried messing with the permissions but no success, until I found your post. Many thanks. Cheers from Brazil, Leonardo.
Anonymous
February 28, 2011
The comment has been removed
Anonymous
March 24, 2011
This fixed my Silverlight Issue where IE8 kept saying install silverlight for a better web experience everytime which ultimatly became redundant. Although silverlight worked fine in firefox, I needed it to work in IE8 so that it would also work with the NetFlix in Vists's Media Ceter. Went months without a fix until finally now. :-)
Anonymous
May 10, 2011
Hard to believe a 5-year-old blog entry is still useful today. I have used subInACL to fix corrupt Windows installations quite a lot.
Anonymous
June 09, 2011
Thank you so much to write this tutorial. I had a MSN issue for quite a long time and thanks to this blog, the issue has been solved now.
Anonymous
June 22, 2011
Thank you, thank you, thank you! Windows Updates stopped working on my Vista & nothing was helping! This worked immediately and has ended several nights up late trying to fix my pc!
Anonymous
September 26, 2011
Thanks very much Aaron for your precise instructions. I was having serious problems with upgrading to Office 2010. This post saved me from reformatting my laptop. Everything is running smoothly. Super work....
Anonymous
November 06, 2011
NEED HELP! I rescently installed Visual Studio 2010 and found out it wont let me create new projects duw to some registry permission problems.. I found this forum social.msdn.microsoft.com/.../c273b0e1-7f46-4065-afaf-4edf285d2531 saying it can fix my problem and it did, but to my dismay it kept me from openning all my system programs (all application programs works just fine).. it says "Windows cannot access the specified device, path or file. You may not have the appropriate permissions to access the item." I tried every forum there is except for this one.. I tried running sfc /scannow and tried editing permissions in the regedit but still no luck.. I think this is somehow related to this post.. I'm running 32 bit windows 7.. can anyone help me please..
Anonymous
November 06, 2011
Hi Dennis - This issue sounds similar to the one described at www.brianpeek.com/.../weird-vista-registry-issue.aspx. Can you please take a look at that post to see if the information there helps you resolve this issue?
Anonymous
November 18, 2011
The comment has been removed
Anonymous
November 18, 2011
Hi Chuck - The above error means access is denied. That means that there is some kind of permission problem that is causing your computer to be unable to install the VC++ runtime files. Here are some things I typically suggest that people try when they run into this type of error:

Install the latest OS service pack if you haven't yet.
Try the System Update Readiness Tool described at support.microsoft.com/.../947821.
Try using a tool like the one described above in this blog post (SubInAcl) to update the permissions on the computer. If none of the above help, then you might need to repair/re-install Windows to solve this type of problem.

Anonymous
November 23, 2011
I had follow the instruction to run the reset.cmd but I still fail to install microsoft office professional plus 2010 64 bits. the error still occur. Do you have any other method to solve the problem?? currently I am using Windows 7 Home premium. Hope to see you reply soon. Thanks
Anonymous
November 23, 2011
Hi Lance - I'm sorry, but the SubInAcl tool isn't able to solve 100% of installation problems. What is the exact error that you see when you try to install Microsoft Office on your computer?
Anonymous
November 24, 2011
Thank your for reply. The Exact error is Error 1402. Setup cannot open the registry key. and Error 1712. One or more files required to be restore your computer to its previous state could not be found. Restoration will not be possible.
Anonymous
November 26, 2011
Hi Lance - Error 1402 is a registry permission error, and usually the SubInAcl tool is able to help fix that type of error. If it didn't help in your scenario, then you will need to manually fix the permissions by locating the registry key that is causing the error in the setup log file and then using regedit.exe to grant full control to that key to both the local system account and the Administrators group.
Anonymous
November 26, 2011
It seems like very technical to me. How to grant full control to that key? Thanks for your reply.
Anonymous
November 27, 2011
Hi Lance - You can use steps like the ones at www.raymond.cc/.../full-control-permission-to-delete-or-edit-restricted-windows-registry to manually change the registry permissions. However, I don't recommend manually updating the registry if you are not confident in what you are doing. You might want to contact Microsoft technical support to get further assistance with this type of issue instead of trying to fix it yourself. You can find contact information at http://support.microsoft.com.
Anonymous
November 27, 2011
Hello, Mr. Stebner. I just wanted to express my appreciation and admiration for the excellent service that you are providing. Although I have barely scratched the surface of the material, I have seen your name previously, and I can see that you are doing an amazing job of assisting a lot of people like myself. Thank you, sir. Best wishes for your good health and continued success. James jameshnelson2009@live.com (I rarely check my messages at that email address although I use it for logging into technical sites; jameshnelson2003@yahoo.com)
Anonymous
December 02, 2011
Hello Mr.Stebner, I'm a novice at this. I install subinacl. I download the notepad from your server. A simple question, what happens if the user name is more than one character? How do I append that in the notepad?
Anonymous
December 05, 2011
Hi Jaya Naicker - I wouldn't recommend trying the steps in this blog post if you are a novice and don't have confidence in your ability to react to issues that might arise after you run the steps. If you still want to try to run these steps, you will need to update the script to replace all instances of the string YOURUSERNAME with your actual login user name.
Anonymous
December 09, 2011
Thanks for getting back What if my user name was like " YOUR USERNAME " instead of " YOURUSERNAME "?
Anonymous
December 09, 2011
The comment has been removed
Anonymous
December 27, 2011
I had noticed some of the software(Nitro Pro) that I try to install has same problem with the microsoft office, fail to open registry key. How Should I do???
Anonymous
December 28, 2011
Hi Lance - If you are getting registry permission problems, you'll need to narrow down which registry keys are causing the problems and then try to update the permissions to fix the problems. If the SubInAcl tool in this blog post doesn't help, you can try to update the registry permissions yourself by using the steps in the link I posted in my previous comment to you (www.raymond.cc/.../full-control-permission-to-delete-or-edit-restricted-windows-registry) or you can work with a support team member to have them walk you through that process. You can find support contact information at http://support.microsoft.com.
Anonymous
December 29, 2011
The comment has been removed
Anonymous
December 29, 2011
Hi Seth - Most of the time, 1935 errors for the VC++ redistributable cannot be solved with SubInAcl. I'd suggest taking a look at the information and links at blogs.msdn.com/.../9904471.aspx to see if any of that information helps in this scenario.
Anonymous
February 20, 2012
The comment has been removed
Anonymous
February 21, 2012
Hi BluegrassPhotog - I'm very sorry for the hassles that these permissions issues and the attempts to fix them have caused. If you're getting that type of Windows validation problem after running SubInAcl, I'd suggest trying to boot in safe mode and see if you can roll back the changes with a system restore point or something like that. Then, once you've rolled back and you verify that Windows validation works and your desktop appears as expected, I'd suggest trying SubInAcl again with the correct username. There is a blog post at www.brianpeek.com/.../weird-vista-registry-issue.aspx that might be helpful to you in this scenario as well.
Anonymous
February 21, 2012
The comment has been removed
Anonymous
February 21, 2012
I adopted a version of Aaron's original script to edit the permissions of the Registry key HKLMSoftwareMicrosoftInternet Explorer so that the local Users group would have Full control of the Internet Explorer key and all subkeys to be able to play sound on a special web application that uses MP3 sound files, but it doesn't seem to change anything. I am running Windows 7 Enterprise 64-bit. My script is: cd /d "%programfiles(x86)%Windows Resource KitsTools" subinacl.exe /noverbose /subkeyreg "HKEY_LOCAL_MACHINESoftwareMicrosoftInternet Explorer" /grant=Users=f > %temp%subinacl_output.txt subinacl.exe /noverbose /keyreg "HKEY_LOCAL_MACHINESoftwareMicrosoftInternet Explorer" /grant=Users=f >> %temp%subinacl_output.txt There are over 1300 subkeys under the Internet Explorer key and the output file lists four "Access Denied" warnings, which I am fine with. Am I expecting the permissions to change when really this is changing something else? Should I use something other than "Users"? I tried doing the same thing with Regini, but it doesn't let the inheritted permissions to trickle down to the child objects even though the child object do say thier permissions are inheritted from thier Parent. Thanks for any help.
Anonymous
February 22, 2012
Hi Mike - I'm not sure how well tested SubInAcl is for 64-bit registry permissions because that tool was created before 64-bit OS's existed. You might need to try to use a different tool like RegIni in your scenario. There is a forum post at social.technet.microsoft.com/.../d5da5921-6f18-4ba4-ba9e-0e8f77bfbd06 that might be helpful to you in this scenario.
Anonymous
March 04, 2012
Hi Aaron, Your script resolved my issue with Microsoft Office 2010 (32-bit) always wanting to re-install every time I started one of the Office applications. Previously, any of the Office apps would show a pop-up message: Please wait while Windows configures Microsoft Office Professional Plus 2010... I didn't even need to reboot. Thanks so much!
Anonymous
March 11, 2012
Hi Aaron, I wanted to get back to you about the problem I was having with installing Lightroom 3, running into the "error 1935, HRESULT: 0x80070005," situation. Just to remind you, this was the situation where Adobe Chat instructed me to run SubInACL, and my Vista license became invalidated. I re-validated Vista online through MS to resolve that problem. I think the problem was caused by Adobe not instructing me to change the (2) parameter values "Yourself," to my user ID. At that time, I had no idea the purpose of SubInACL, only that I was desperate to get the problem resolved. After spending another half-day on the phone with Adobe chat, it was very apparent that the permissions were, indeed, causing all the problems. The Adobe tech could not even perform any simple file copies, receiving "Access Denied," errors. After the tech gave up and referred me to MS, I decided to follow your instructions on running SubInACL. Before that, I ran the "System Readiness Tool for Vista," to look for other inconsistencies. I figured it couldn't hurt! I am happy to report that your instructions resolved the issue, and LR3 installed properly. Thank you so much for your assistance, in addition to your knowledge which you provide as a free service to those of us who don't have a clue. Best regards, Eric
Anonymous
March 25, 2012
The comment has been removed
Anonymous
March 26, 2012
The comment has been removed
Anonymous
May 15, 2012
Hallo, I had 8007005 error after I've manually removed the fake S.M.A.R.T. Check malware program from a PC with Windows 7. To resolve it I've simply removed the hidden and read-only attribute from then c:WindowsSoftwareDistribution folder and subfolder and windows update worked again. Hope this helps
Anonymous
May 24, 2012
Hi Aaron, I am very impressed with the end result of the script. It worked marvelously! Thank you! My only point to improve upon this would be to rename "repair.cmd" into a *.bat (batch script) which I did and ran after modifying the field "YOURUSERNAME". This really simplified the process for me. The initial steps were confusing, but I finally got it and it did fix the error(s) I was having! THANK YOU! -- Morris
Anonymous
July 12, 2012
The comment has been removed
Anonymous
July 13, 2012
Hi Sigurd58 - I don't think the script in this blog post would help in your scenario because it does essentially the same thing as the script you found in that forum post. Your scenario sounds like it might be similar to the issue described at www.brianpeek.com/.../weird-vista-registry-issue.aspx, so I'd suggest taking a look at that post to see if the description matches what you see in your registry. If so, then I'd suggest trying the steps there to see if they help.
Anonymous
July 25, 2012
Excellent, been struggling with an access denied driver error, tried everything upto this point and nothing work. Was just at the point of reformatting machine when I found this, worked perfectly! Win 7 SP1. Thank you.
Anonymous
September 09, 2012
I'm trying to setowner of subkeyreg, and am receiving output that reflects nothing is performed: +subkeyreg HKEY_LOCAL_MACHINESYSTEMControlSet002Enum* /setowner=domainuser Done: 0, Modified 0, Failed 0, Syntax errors 0 The user who is running subinacl has full control over HKLMSYSTEMControlSet002Enum Aaron, I noticed you do use setowner with subkeyreg and am curious what it is I'm doing incorrectly, or how I'm misunderstanding the tool. Thanks, Matt
Anonymous
September 10, 2012
The comment has been removed
Anonymous
September 26, 2012
I paused Kaspersky and now it went in like a dream
Anonymous
January 19, 2013
I tried the guide I get 40000 plus errors. W7 64 bit SP1. I run an admin account. Any help would be much appreciated. I turned my AV off didnt make a difference.
Anonymous
January 20, 2013
Hi KOz - When the number of errors is that large, it usually means that subinacl wasn't run from an elevated cmd prompt. Even if you are logged in as a user that has administrator privileges, you need to run subinacl from an elevated cmd prompt. There are steps that will help you do that in the blog post above. If that doesn't help, then I'd suggest posting a question on the Windows 7 forums at answers.microsoft.com/.../windows_7 and describe the exact problem you are encountering that led you to try to run subinacl in the first place. Hopefully someone there will be able to provide some additional suggestions for you to try.
Anonymous
March 17, 2013
The comment has been removed
Anonymous
March 18, 2013
Hi Jamie - To try to solve the Office auto-repair issue, I'd suggest trying to right-click on the Office application you want to run and choose Run as Administrator. I'm hoping that whatever it is trying to repair will work correctly if the application is given administrative privileges at least once. The same technique might also help solve the auto-repair that you're seeing when you launch Windows Live Mail. If this doesn't help, then I'd suggest posting a question on the Office forums at support.microsoft.com/.../gp_newsgroups_master to see if someone there can provide some additional suggestions for you.
Anonymous
April 30, 2013
Hi Aaron, i'm trying to solve a .net4 full installation problem with the subinacl script on win 2k3 server std 32bit ita. the command give me a syntax error in the "/grant=restricted=r" part and don't process the hklm and hkcu section of the registry. who is the "restricted" user or group? can i ignore that part and delete it from the script? i try both your and PCPerspective scripts versions thanks in advance for any suggestion
Anonymous
May 01, 2013
The comment has been removed
Anonymous
May 01, 2013
The comment has been removed
Anonymous
May 01, 2013
Hi Flipmendisair - I'm not sure how to restore msdt.exe if SFC didn't help. Maybe you can copy it from another computer? For the .NET Framework installation error, can you please use the tool described at blogs.msdn.com/.../6458047.aspx to collect all of your setup log files, upload the file named %temp%vslogs.cab that this tool will create to a file server (such as http://skydrive.live.com), and then reply back here and provide a link that I can use to download your log files and take a closer look?
Anonymous
May 02, 2013
Hi Aaron, Yesterday i have opened a payment request support to microsoft to solve the problem that is very critical for my company. You can find one of the last vslogs collected here skydrive.live.com/redir If i solve i will post the resolution found with the microsoft support Thanks
Anonymous
May 03, 2013
Hi Flipmendisair - I'm sorry, but I can't tell for sure what the root cause is of this failure by looking at your log file. It might help to try to use the tools and steps listed at blogs.msdn.com/.../8108332.aspx to repair and/or remove the .NET Framework and try again to install the .NET Framework 4 on this computer.
Anonymous
May 05, 2013
Thank you for this! It fixed GoToMeeting issues on several of our PCs.
Anonymous
May 18, 2013
@Aaron Stebner I ran this test: subinacl /subdirectories %ProgramFilesPath% First file reported is: +File C:app7pdfmakerApp7-PDFMakerlibAppOOoprogram So last subinacl cmd in your script should have double quotes around "%ProgramFilesPath%" Anyone who has run this may have changed any folder called "program" or "files" as effectively running this on entire drive: "subinacl /subdirectories C:Program" "subinacl /subdirectories Files"
Anonymous
May 21, 2013
I am trying Visual Studio Ultimate 2012 on windows 7, only one user(RAJESH) is there. Still i went through your demo but it had many failure and application did not succeed as well in etting installed. Can not upload log file as it is 1.25Gb. But this log file is of my application which i ran: http://sdrv.ms/10MzgUN Can you help me find out the problem?
Anonymous
May 21, 2013
Hi Rajesh Mishra - Your Visual Studio 2012 log file shows a bunch of errors like the following: [08FC:0BD0][2013-05-21T22:57:53]: Error 0x80070005: Failed to move C:UsersRAJESHAppDataLocalTemp{f9024a51-ab45-4a46-b597-ce12f74963c7}vs_preclean_vs to C:ProgramDataPackage Cache.unverifiedvs_preclean_vs Instead of using SubInAcl, I'd suggest trying to manually update the permissions on your Package Cache folder to see if that will solve this error. You can find a tutorial that shows how to do this at www.wikihow.com/Change-File-Permissions-on-Windows-7.
Anonymous
June 11, 2013
wounderful solution, it worked for me. able to install 2013 without errors Thanks a lot for sharing
Anonymous
June 19, 2013
Nice solution but can be done manually without needing any subinacl software
Anonymous
June 28, 2013
Blessings on you and your descendants! I spent two hours trying other solutions to get Microsoft Office installed on my Win 7 (Dell) machine. This worked!
Anonymous
July 05, 2013
I posted a comment as I had an issue getting rid of Bonjour for iTunes, I want to install iTunes to my laptop which is currently running Windows 7 Professional N but for some reason it won't let me remove the older version of Bonjour so that the new iTunes 11 can install. Please, can anyone help with this problem, I have tried literally everything I can and NOTHING is working... please guys?
Anonymous
July 06, 2013
Hi Ryan - What is the exact error that you see when trying to uninstall the older version of this software? It might help to try manual uninstall steps like the ones listed at blogs.msdn.com/.../487096.aspx. It might also help to visit the iTunes web site to see if they have any troubleshooting guides for their installers.
Anonymous
July 12, 2013
hi Ryan, have you tried comodo programs manager? just be careful because its real powerful and can remove important files etc.
Anonymous
September 21, 2013
Thank you so much! I was finally able to update and install my software. Worked perfectly.
Anonymous
October 30, 2013
Impressive, this had saved me from insanity :) Sometimes windows can surprise me for the worst reasons..... Save me from a error: Permission denied installing asp.net webpages 2 ("pre-requisite from asp.net mvc 4") thank you!
Anonymous
November 12, 2013
Hello Mr Stebner, after reading about your great tools I am writing to see if any of them can help me. I have just bought Visual Studio Professional 2013. Previously on this same machine I had installed both the 2010 and 2012 versions, never had any issue. This time, shortly after the VS installer starts, when it tries to install the .NET framewrok 4.5.1 I get a setup failed message, which specifies the famous "The Windows Installer service could not be accessed" error message. I have tried many things already, as indicated on several support articles, but nothing works for me. It's just terrible . OS Windows 7 pro I would appreciate if you can send me to any direction to solve this problem.
Anonymous
November 12, 2013
Hi Amador - Can you please use the tool described at blogs.msdn.com/.../6458047.aspx to collect all of your setup log files, upload the file named %temp%vslogs.cab that this tool will create to a file server (such as http://skydrive.live.com), and then reply back here and provide a link that I can use to download your log files and take a closer look?
Anonymous
November 12, 2013
Thank you very much! I know that you must be very busy and I do not want to cause you trouble. The output of that tool is over 12 megs. You can download it from here https://db.tt/6DH7nh3y
Anonymous
November 14, 2013
Hi Amador - From your logs, it looks like you've still got a preview version of the .NET Framework 4.5.1 installed on your computer, and that might be causing problems with the final version of the .NET Framework 4.5.1 and VS 2013. I'd suggest trying to fully uninstall any preview versions of VS 2013 and the .NET Framework 4.5.1 that you have on your computer and then try to install VS 2013 again.
Anonymous
November 28, 2013
The comment has been removed
Anonymous
December 06, 2013
I recently installed MS Office Pro 2007 on a Dell laptop. Every time I start MSAccess, "Microsoft Office Professional Hybrid 2007" configuration runs before opening Access. It doesn't happen with any other Office App. Is there any way to stop this Hybrid configuration each tme Access is opened? Thanks in advance for your response.
Anonymous
December 06, 2013
TomV I forgot to mention I am running Windows XP Pro SP3.
Anonymous
December 06, 2013
Hi TomV - I typically use steps like the ones listed at blogs.msdn.com/.../219764.aspx to narrow down the cause of this type of configuration dialog. Those steps require relatively advanced knowledge of Windows Installer though, so you might want to try to post a question on the Office 2007 forum at answers.microsoft.com/.../office_2007 to see if someone there can provide more detailed troubleshooting steps.
Anonymous
December 25, 2013
Wow! I have been working on an iTunes registry error for about 2 1/2 days (about 14 hours total) and THIS finally did the trick. Thank you, thank you, thank you! There was so much I found when researching this issue that just didn't work but this did. Thanks again. Also - I am an IT analyst and have been around Windows for a very, very long time. For those of you that are wondering, this utility took about 75 minutes to run. If you'd like, you can run the process monitor (3rd party tool that's blessed by Microsoft) at the same time while this runs so that you can "see" what's going on.
Anonymous
January 15, 2014
C:UsersiPhone3G>cd /d "C:Program FilesWindows Resource KitsTools" C:Program FilesWindows Resource KitsTools>subinacl /subkeyreg HKEY_CURRENT_US ER /grant=administrators=f /grant=system=f /grant=restricted=r /grant=iPhone3G=f /setowner=administrators 1>C:UsersiPhone3GAppDataLocalTempsubinacl_outpu t.txt Elapsed Time: 00 00:00:03 Done: 4114, Modified 4113, Failed 1, Syntax errors 0 Last Done : HKEY_CURRENT_USERVolatile Environment1 Last Failed: HKEY_CURRENT_USERSoftwareSecuROMLicense information : 2 The syst em cannot find the file specified. C:Program FilesWindows Resource KitsTools>subinacl /keyreg HKEY_CURRENT_USER /grant=administrators=f /grant=system=f /grant=restricted=r /grant=iPhone3G=f /s etowner=administrators 1>>C:UsersiPhone3GAppDataLocalTempsubinacl_output. txt Elapsed Time: 00 00:00:00 Done: 1, Modified 1, Failed 0, Syntax errors 0 Last Done : HKEY_CURRENT_USER C:Program FilesWindows Resource KitsTools>subinacl /subkeyreg HKEY_LOCAL_MACH INE /grant=administrators=f /grant=system=f /grant=users=r /grant=everyone=r /gr ant=restricted=r /setowner=administrators 1>>C:UsersiPhone3GAppDataLocalTe mpsubinacl_output.txt
Anonymous
January 21, 2014
i had installed visual stdio 10 .can i install visual studio 2010 in my system both .?
Anonymous
January 21, 2014
Hi hariom - Yes, you can install both of these versions of Visual Studio side-by-side on the same computer.
Anonymous
February 10, 2014
'subinacl' is not recognised as an internal or external command, operable command or batch file. WHAT DOES THIS MEAN??
Anonymous
February 10, 2014
Hi anirudh - That error message means that the file subinacl.exe is not in the directory that you ran the command from. That could happen if you didn't install the subinacl tool or if you didn't change directory to the folder that it is installed to before running the other commands. Can you please double-check that subinacl is installed correctly and that you ran the steps exactly as they are listed above in this blog post? If it continues to happen after checking those things, please post a screenshot so I can take a closer look.
Anonymous
February 16, 2014
Hey thanks for writing the guide, but when I run the reset.cmd it always says it is not an internal or external command. Please Help!
Anonymous
February 16, 2014
Hi CaptainN - That error message means that the file reset.cmd is not in the directory that you ran the command from. Please double-check that you ran the steps exactly as they are listed above in this blog post and that the file reset.cmd is located in the directory that you are running the command from in your cmd prompt.
Anonymous
March 27, 2014
Hello! I can't run this script but I think I tried everything, I get these messages: C:Program FilesWindows Resource KitsTools>cd /d "C:Program FilesWindows Res ource KitsTools" C:Program FilesWindows Resource KitsTools>subinacl /subkeyreg HKEY_CURRENT_US ER /grant=rendszergazd├ík=f /grant=system=f /grant=restricted=r /grant=HM=f /set owner=rendszergazd├ík 1>C:UsersHM2ECF~1AppDataLocalTempsubinacl_output.tx t Elapsed Time: 00 00:00:00 Done: 0, Modified 0, Failed 0, Syntax errors 1 Last Syntax Error:WARNING : /grant=rendszergazd C:Program FilesWindows Resource KitsTools>subinacl /keyreg HKEY_CURRENT_USER /grant=rendszergazd├ík=f /grant=system=f /grant=restricted=r /grant=HM=f /setown er=rendszergazd├ík 1>>C:UsersHM2ECF~1AppDataLocalTempsubinacl_output.txt Elapsed Time: 00 00:00:00 Done: 0, Modified 0, Failed 0, Syntax errors 1 Last Syntax Error:WARNING : /grant=rendszergazd C:Program FilesWindows Resource KitsTools>subinacl /subkeyreg HKEY_LOCAL_MACH INE /grant=rendszergazd├ík=f /grant=system=f /grant=users=r /grant=everyone=r /g rant=restricted=r /setowner=rendszergazd├ík 1>>C:UsersHM2ECF~1AppDataLocal Tempsubinacl_output.txt Elapsed Time: 00 00:00:00 Done: 0, Modified 0, Failed 0, Syntax errors 1 Last Syntax Error:WARNING : /grant=rendszergazd C:Program FilesWindows Resource KitsTools>subinacl /keyreg HKEY_LOCAL_MACHINE /grant=rendszergazd├ík=f /grant=system=f /grant=users=r /grant=everyone=r /gran t=restricted=r /setowner=rendszergazd├ík 1>>C:UsersHM2ECF~1AppDataLocalTem psubinacl_output.txt Elapsed Time: 00 00:00:00 Done: 0, Modified 0, Failed 0, Syntax errors 1 Last Syntax Error:WARNING : /grant=rendszergazd C:Program FilesWindows Resource KitsTools>subinacl /subkeyreg HKEY_CLASSES_RO OT /grant=rendszergazd├ík=f /grant=system=f /grant=users=r /setowner=rendszergaz d├ík 1>>C:UsersHM2ECF~1AppDataLocalTempsubinacl_output.txt Elapsed Time: 00 00:00:00 Done: 0, Modified 0, Failed 0, Syntax errors 1 Last Syntax Error:WARNING : /grant=rendszergazd ... I have win7 64bit(hungarian), I run this cmd with administrator(rendszergazdák) privilege.
Anonymous
March 27, 2014
The comment has been removed
Anonymous
March 27, 2014
The comment has been removed
Anonymous
March 27, 2014
Hello! I gone too far at manually editing my regitry, and I lost lot of thing from my windows now, I don't have sound, can't uninstall or reinstall microsoft offices, and they don't start, and so on... neither Visual C++ works. Now I reinstall my windows, I can't bare this ***... :( It took more then 10 hours already. I hate microsoft now very much. Anyhow, thank you for your help Aaron Stebner. I hope, I don't have to do this again on the new windows. Marcell
Anonymous
March 31, 2014
Hi Marcell - I'm very sorry to hear that you ran into these issues and needed to re-install Windows to resolve them. If you run into any Visual Studio installation issues in the future, please use the tool described at blogs.msdn.com/.../6458047.aspx to collect all of your setup log files, upload the file named %temp%vslogs.cab that this tool will create to a file server (such as http://onedrive.live.com), and then reply back here and provide a link that I can use to download your log files and take a closer look. Also, here are some links to more information about how to manually update file and registry permissions in case you need them in the future: support.microsoft.com/.../310426 support.microsoft.com/.../308419 I always recommend making a backup of your registry prior to making any changes in case you run into any problems. You can find instructions for doing this at windows.microsoft.com/.../back-up-registry.
Anonymous
March 31, 2014
après aoir fait ce que vous avez dit dans vos explications voici ce qu'il me répond : microsoft windows xp (version 5.1.2600) <c>copyright 1985-2001 microsoft corp 'subinacl' n'est pas reconnu en tant que commande interne ou externe, un programme exécutable ou un fichier de commandes. que faire ? car je n'arrive pas à installer avast free. à bientôt et merci d'avance de votre aide. mail : jean.arsene@neuf.fr
Anonymous
April 01, 2014
Hi LTF123 - That error most likely means that SubInAcl isn't installed at the expected location or you didn't change directories to the directory that SubInAcl is installed to. I'd suggest double-checking both of those issues.
Anonymous
May 04, 2014
Aaron: Since i had problems to reinstall my NVIDIA video card, i applied the subinacl solution that you suggested. It resolved the problem, but now i have a black screen to run IE9 and when i run an MS Office application, it says: "this action is only valid for products that are currently installed". Please help me. The subincl script that i executed was: subinacl /subkeyreg HKEY_CURRENT_USER /grant=administrador=f /grant=system=f /grant=myuser=f /setowner=administrador > %temp%subinacl_output.txt subinacl /keyreg HKEY_CURRENT_USER /grant=administrador=f /grant=system=f /grant=myuser=f /setowner=administrador >> %temp%subinacl_output.txt subinacl /subkeyreg HKEY_LOCAL_MACHINE /grant=administrador=f /grant=system=f /setowner=administrador >> %temp%subinacl_output.txt subinacl /keyreg HKEY_LOCAL_MACHINE /grant=administrador=f /grant=system=f /grant=usuarios=r /setowner=administrador >> %temp%subinacl_output.txt subinacl /subkeyreg HKEY_CLASSES_ROOT /grant=administrador=f /grant=system=f /grant=usuarios=r /setowner=administrador >> %temp%subinacl_output.txt subinacl /keyreg HKEY_CLASSES_ROOT /grant=administrador=f /grant=system=f /grant=usuarios=r /setowner=administrador >> %temp%subinacl_output.txt subinacl /subdirectories %ProgramFilesPath% /grant=administrador=f /grant=system=f /grant=usuarios=e >> %temp%subinacl_output.txt subinacl /subdirectories %windir% /grant=administrador=f /grant=system=f /grant=usuarios=e >> %temp%subinacl_output.txt
Anonymous
May 05, 2014
Hi Oscar - I'm sorry for the hassles you're running into here. For the IE issue, I'd suggest trying to upgrade to a newer version of IE to see if that helps. For the Office issue, I'd suggest trying to repair Office to see if that helps, and if it doesn't help, then I'd suggest trying to uninstall + re-install it.
Anonymous
May 05, 2014
Hi, Aaron. IE runs OK with "Administrator" user. I have the probleme only wit myuser. So, the problem is about privileges. Can you inpect the script that i executed to help me, please? Thanks.
Anonymous
May 05, 2014
Hi Oscar - I'm sorry, but I don't know what specific settings IE uses, and there isn't any specific logic to change permissions for IE settings in the subinacl script in this blog post. If you know what specific settings are causing problems with IE, you can try to manually update the permissions using regedit.exe (for registry keys) or Windows Explorer (for files/folders).
Anonymous
May 08, 2014
I tried this one on xp sp3 it didnt work ,i dont no where to save reset.cmd and that username i didnt understand please help i want to load sql 2005 .netframe 2.0 not installing
Anonymous
May 13, 2014
Hi NARAYAN - In general, I don't recommend using tools like SubInAcl unless you're confident that you know what the tool is doing and have backed things up so that you can revert the changes if needed. Instead of trying to use this tool, can you please use the tool described at blogs.msdn.com/.../6458047.aspx to collect all of your setup log files, upload the file named %temp%vslogs.cab that this tool will create to a file server (such as http://onedrive.live.com), and then reply back here and provide a link that I can use to download your log files and take a closer look and see if I can figure out why the .NET Framework is failing to install on your computer?
Anonymous
May 15, 2014
Been having a Windows update issue for weeks, Windows tries to update every night, and fails with error (80070005). Running Windows 7. Wasn't really an issue until last night when it added an update to Nvidia, the Nvidia windows update failed to install, but it also deleted all my graphics drivers to include monitor drivers. I've tried running the Nvidia driver installer, but that too fails to install, with no additional information as to why. I've installed the SubInAcl tool and below are the results (using the notepad from the file server in the first post). Noticing a lot of "Error : 5 Access is denied." not sure where to go from here. please advise ========================================================================== Elapsed Time: 00 00:00:00 Done: 0, Modified 0, Failed 0, Syntax errors 1 Last Syntax Error:WARNING : /grant=marc : Error when checking arguments - HKEY_C URRENT_USER Elapsed Time: 00 00:00:00 Done: 0, Modified 0, Failed 0, Syntax errors 1 Last Syntax Error:WARNING : /grant=marc : Error when checking arguments - HKEY_C URRENT_USER Elapsed Time: 00 00:02:54 Done: 269750, Modified 214020, Failed 55730, Syntax errors 0 Last Done : HKEY_LOCAL_MACHINESYSTEMCurrentControlSetservices{157BCCF7-3451 -4BD6-9F4B-4B1E6D656EBF}ParametersTcpip Last Failed: HKEY_LOCAL_MACHINESYSTEMCurrentControlSetservicesxmlprovParame tersSchemaGroupsUserwww.microsoft.com/.../mspeapuserpropertie sv1 - RegSetKeySecurity Error : 5 Access is denied. Elapsed Time: 00 00:00:00 Done: 1, Modified 1, Failed 0, Syntax errors 0 Last Done : HKEY_LOCAL_MACHINE Elapsed Time: 00 00:02:07 Done: 129366, Modified 83113, Failed 46253, Syntax errors 0 Last Done : HKEY_CLASSES_ROOTLast Failed: HKEY_CLASSES_ROOT{2C256447-3F0D-4CB B-9D12-575BB20CDA0A}ProgID - RegSetKeySecurity Error : 5 Access is denied. Elapsed Time: 00 00:00:00 Done: 1, Modified 1, Failed 0, Syntax errors 0 Last Done : HKEY_CLASSES_ROOT System Drive... Elapsed Time: 00 00:00:12 Done: 0, Modified 0, Failed 0, Syntax errors 0 Windows Directory... Elapsed Time: 00 00:01:15 Done: 128554, Modified 128534, Failed 20, Syntax errors 0 Last Done : C:Windowswinsxsx86_wwf-system.workflow.runtime_31bf3856ad364e35_ 6.1.7601.17514_none_67224784fe4912e9System.Workflow.Runtime.dll Last Failed: C:Windowswinsxsx86_avast.vc110.crt_2036b14a11e83e4a_11.0.60610.1 _none_1d37a43bbfe1dc9cmsvcr110.dll - CreateFile Error : 5 Access is denied. ========================================================================== FINISHED. Press any key to exit . . .
Anonymous
May 17, 2014
I seem to be having the same problem as others = "subinacl is not recognised as an internal or external command, operable program or batch file". The subinacl.exe file is in my Cwindowssystem32 directory as is the reset.cmd file. What am I doing wrong? My windows updates haven't been working for over a month and now I've lost my printer. Please help if you can. Many thanks
Anonymous
May 18, 2014
Hi Marc M - If the SubInAcl tool isn't able to update the permissions on your registry, then I'd first suggest double-checking to make sure that you are running it from an elevated cmd prompt. If you're doing that and still seeing problems, then you might need to manually update the registry permissions on your computer using steps like the ones at support.microsoft.com/.../310426.
Anonymous
May 18, 2014
Hi David S - That error message means that the file reset.cmd is not in the directory that you ran the command from. Please double-check that you ran the steps exactly as they are listed above in this blog post and that the file reset.cmd is located in the directory that you are running the command from in your cmd prompt.
Anonymous
June 02, 2014
Hi....aaron when i'm trying to install visual studio 2012 the following error is coming ,please tell me how to solve it........ Microsoft Visual Studio cannot be installed, and you receive an error message that contains one of the following errors: If this article does not address the Visual Studio installation issue that you are experiencing or you receive an error message of other error codes, please go to the Visual Studio Setup and Installation forum. 0x80200010, 0x80072efe, or 0x80072ee7 - Connectivity issue during download 0x80070005 - Access denied 0x80070643 - Installation cache or ISO is corrupted 0x800713ec - .NET Framework installation is in progress Web Deploy 3.0 - Certificate warning or Unable to locate package source error
Anonymous
June 02, 2014
Hi shaikh zafar - Can you please use the tool described at blogs.msdn.com/.../6458047.aspx to collect all of your setup log files, upload the file named %temp%vslogs.cab that this tool will create to a file server (such as http://onedrive.live.com), and then reply back here and provide a link that I can use to download your log files and take a closer look?
Anonymous
June 06, 2014
I was trying to install visual studio 2013 with update 2 in my windows 8.1 pc. The installation stops and returns error "Update 2 doesn't apply or is blocked by another condition on your computer". Please help me in sorting out this problem
Anonymous
June 08, 2014
Hi Ravi Kumar - That type of error usually means that the product that the update applies to isn't installed on the computer. I'd suggest making sure that you have VS 2013 installed and that you downloaded Update 2 for VS 2013 (I've seen folks accidentally download VS 2012 updates, which is why I mention this). If that doesn't help, then I'd suggest posting a question on the Visual Studio setup forum to see if someone there can offer other suggestions for you to try. You can find that forum at social.msdn.microsoft.com/.../home.
Anonymous
July 06, 2014
This doesn't working for me.. Thank you..
Anonymous
July 07, 2014
Hi ... :( ... - I can try to help, but you need to provide more detailed information. What isn't working for you, and what exact error messages are you seeing on your computer currently?
Anonymous
July 14, 2014
hi sir , i have tried this but same error. "error in opening installation log file. verify that specified log file location exists and that you can write to it." please help to solve this..
Anonymous
July 15, 2014
The same all the time, of course inside the every blog. Words, bla, bla, bla , and not solutions or serious guide to confront the problem.
Anonymous
July 15, 2014
Hi Mehboob88 - If SubInAcl didn't fix the permission problem, you might need to manually update folder and file permissions on your computer using Windows Explorer instead. What exact application are you trying to run when you see that error? Do you know what location it is trying to open the log file from?
Anonymous
July 15, 2014
i m trying to instal Visual studio 2013.. how i can manually update that log file permission as i don't know its actual location...?? any method
Anonymous
July 15, 2014
Hi Mehboob88 - Visual Studio 2013 creates log files in the %temp% directory on a computer. There are a lot of different guides that describe how to manually change file and folder permissions in Windows. For example - technet.microsoft.com/.../cc754344.aspx and www.wikihow.com/Change-File-Permissions-on-Windows-7. If you get stuck, there is also a VS setup forum that you can post questions like this at - social.msdn.microsoft.com/.../home.
Anonymous
July 15, 2014
well i have also asked there but getting very slow response.. and manually i have changed permissions of files present in %temp% directory but still facing same error, don't know how to get rid off from this error :/
Anonymous
July 15, 2014
Hi Mehboob88 - When new files are created, they typically inherit default permissions from the directory that they are being created in. If you haven't yet, you should also update the permissions to the %temp% directory itself, not just the files in the directory.
Anonymous
July 15, 2014
still same error :( "error in opening installation log files. verify thta specified log file location exist and you can write to it"
Anonymous
July 15, 2014
Hi Mehboob88 - I'm sorry for the continued hassles here. It might help to use a tool like Process Monitor to narrow down exactly what path setup is attempting to create the log file at in case it is somewhere other than %temp%. You can download Process Monitor from technet.microsoft.com/.../bb896645.aspx if you want to try that out.
Anonymous
July 16, 2014
hi Aron, it is giving error in installing Process Monitor that it can not find procmon64.exe in temp directory. i think it is my pc permission problems. doesn't it...?
Anonymous
July 16, 2014
Hi Mehboob88 - Yes, this sounds like a permission problem. It sounds like the manual steps you took previously to change the permissions on %temp% didn't work as expected. It might help to try to reset the security permissions on your computer by using steps like the ones in the knowledge base article at support.microsoft.com/.../313222.
Anonymous
July 16, 2014
no relief, would reinstalling my OS will help me to get rid off from this problem....??
Anonymous
July 16, 2014
Hi Mehboob88 - Yes, an OS repair/re-install should resolve this type of problem. Before trying that, you might also want to try to create a new user account and log in with that and see if you have the same problems there. The %temp% folder is different for each user, so creating a new user account might help.
Anonymous
July 16, 2014
well i think i have tried each and every thing to resolve this problem including this :/ but... well sincere thanks to you for being here every time :)
Anonymous
August 08, 2014
i am chinese 谢谢你的文章让我修复了这个c2005的无法顺利安装的错误，非常感谢！
Anonymous
September 19, 2014
i installing the visual studio 2012 on my laptop.os is windows8 but there access denied problem is occure.i also try subACL tool but problem not solve. step no 6 i don't undestand.plz guid in brief.
Anonymous
September 19, 2014
access denied problem is occure in visual studio 2012.i also used subACL tool but not solved that problem.step no 6 don't understand.plz guid in brief.my laptop os is windows 8
Anonymous
September 22, 2014
Hi pk - Can you please use the tool described at blogs.msdn.com/.../6458047.aspx to collect all of your setup log files, upload the file named %temp%vslogs.cab that this tool will create to a file server (such as http://onedrive.live.com), and then reply back here and provide a link that I can use to download your log files and take a closer look?
Anonymous
September 23, 2014
Aaron, I need help with windows 7 update and hope you can help... The windows update has not worked for some time now and I have given up before finding your blog. I followed the post instruction and everything seems to have run fine with many items been changed correctly and just .25% failing. I would like to send you the log file for you to review... After receiving the finish statement I reran the windows 7 update but it did not work for me. Please let me know if you can help, and what I need to do to help you help me... Gerald James
Anonymous
September 23, 2014
The comment has been removed
Anonymous
September 24, 2014
I followed the instructions above with no success, I have placed reset.cmd.last and subinacl_output.txt in onedrive.live.com but have no way to add link to this note...help
Anonymous
September 24, 2014
The comment has been removed
Anonymous
September 25, 2014
I originally followed your post instructions and that is the subinacl_output.txt that I have saved in onedrive.live.com as you suggested. I do not know how to send you a link to that file. Please help with that question so you can then help after receiving my subinacl_output.txt file. Thank you in advance, for your help... Can you send an email to my email on file so we can speed thing up, Gerald
Anonymous
September 25, 2014
Where and under what file name do I find the log file to send to you after running the update?
Anonymous
September 25, 2014
Hi Gerald James - I don't have access to your email on file. You can use the Email Blog Author link at the top left of my blog to send me an email (blogs.msdn.com/.../contact.aspx). You should be able to right-click on the file in OneDrive and copy a shortcut to it from there. The log file names for the failing updates depend on which exact updates are failing. I think most Windows updates will create logs in %temp%, so you might want to try to search there and sort by last modified times to see if you can find them. You might also get a more useful error message if you try to manually download the update and try to install it yourself instead of letting Windows Update install it for you. Windows Update runs the updates in silent mode, and that suppresses a lot of the possible error messages, which makes troubleshooting trickier. Also, I am not an expert with troubleshooting Windows Update installation issues, so you might get a faster resolution for this issue by posting a question on the Windows 7 forum at answers.microsoft.com/.../windows_7.
Anonymous
September 25, 2014
Here is the subinacl_output.txt file: <iframe src="onedrive.live.com/embed width="98" height="120" frameborder="0" scrolling="no"></iframe>
Anonymous
September 26, 2014
hi Aaron I checked the subinacl_output.txt file and there are many many lines but the first lines are like this: "SeSecurityPrivilege : Access is denied." WARNING :Unable to set SeSecurityPrivilege privilege. This privilege may be required. HKEY_CURRENT_USER - QueryObjectSecurity Error : 1314 A required privilege is not held by the client. and sometimes these phrases appear again and again: "RegSetKeySecurity Error : 1307 This security ID may not be assigned as the owner of this object." "RegSetKeySecurity Error : 5 Access is denied." "6 : Unable to enumerate subkeys" "CreateFile Error : 1314 A required privilege is not held by the client." I have read other requests but I don't understand anything at all so please, can you help me with this?
Anonymous
September 26, 2014
Hi Gerald James - I don't see any errors in the subinacl_output.txt file that you uploaded. Did you have any luck finding log files from the failing updates in your %temp% directory? The file c:windowswindowsupdate.log might also have more information about the failures. If you can upload that, I can try to take a quick look and see if I can spot anything there.
Anonymous
September 26, 2014
Hi V.R. - Those errors might be caused by not running the script with elevated privileges, or maybe you missed the step to change YOURUSERNAME to the actual user name that you are logged in with? If neither of those suggestions help, then you might need to manually update your registry permissions instead of using subinacl.exe. You can use instructions like the ones at www.ehow.com/how_5074690_change-registry-permissions.html to do that.
Anonymous
October 15, 2014
Just wanted to say thank you. Was having trouble with updates. Also was having trouble with restore points- Not sure if it fixed that yet. PS: Didn't see the log in the temp folder btw. Had a lot of errors too. But all is well I suppose :)
Anonymous
October 29, 2014
Excellent desk & nice tweaking for requirement !! Just one question : Is the user to whom the permission is granted => he will be able to uninstall the application or software from control panel ???? Thanks Mike
Anonymous
October 29, 2014
Hi Mike - The permissions that are granted by these subinacl commands does not change whether or not the current user is allowed to uninstall an application. Most applications require Administrator privileges in order to uninstall, so the user account that you're using to perform the uninstall will need to be in the Administrator group or you will have to provide Administrator account credentials when Windows prompts you for elevation during the uninstall process.
Anonymous
November 07, 2014
Thank you very much for this document. It solve my problem.
Anonymous
November 29, 2014
I had issues with Error 5 and Error 87 and this solved everything :)
Anonymous
December 20, 2014
I'm running the reset.cmd (Resetting ACLs) prompt now but it's saying that everything modified has also failed. What does that mean? That no changes have been made to the Registry?????? I followed your instructions to the letter, but I used my administrator name instead of just "administrator." I've got tons of registry problems in Vista Home Premium and without a degree in computer programming it's trial and error for me. Thank you for your time.
Anonymous
December 21, 2014
Hi Frustrated - I'm sorry for the hassles that this issue is causing for you. What are the exact error messages that you're seeing when you try running reset.cmd on your computer? Also, can you double-check that you ran reset.cmd from an elevated cmd prompt (step 2 of the instructions in the main blog post)?
Anonymous
January 08, 2015
Is it normal that almost half the attempts fail? I'm on windows 8.1 and got this problem after changing my laptop SSD and cloning the old one.
Anonymous
January 08, 2015
Hi Ian - No, I don't think that's normal. Can you double-check that you ran reset.cmd from an elevated cmd prompt (step 2 of the instructions in the main blog post)? Also, for the commands that fail, what exact error message is being reported by subinacl.exe?
Anonymous
January 08, 2015
Hi Aaron, thanks for the fast reply, The code sort of rerun a second time it seems within 1 session [i had thought it stopped] and this gave no failiurs. However even after restarting i still cannot install the update. My laptop has also been slower since i swapped my SSD, not sure if this is related. I do have a 2gb log file generated, anything useful i can share with you in here? thanks for you help. ian
Anonymous
January 08, 2015
Hi Ian - What update are you trying to install, and what is the exact error that you see when you try to install it? If you have a log from the failing update install, that would be the most helpful thing for me to be able to look at to try to help you figure out possible next steps. If you have that, can you zip and upload it to a file server (such as http://onedrive.live.com) and then reply back here and post a link that I can use to download the log and take a closer look?
Anonymous
January 08, 2015
the update is :

Definition Update for Windows Defender - KB2267602 (Definition 1.191.1774.0) Download size: 112.9 MB Update type: Important Install this update to revise the definition files that are used to detect viruses, spyware, and other potentially unwanted software. Once you have installed this item, it cannot be removed. More information: www.microsoft.com/.../overview.mspx Help and Support: go.microsoft.com/fwlink

and the error in windows update is:

WindowsUpdate_80070005 OR WindowsUpdate_dt000"‎ (1)

Not sure how to get the logfile for windows update

Anonymous
January 08, 2015
Hi Ian - I'd suggest trying to manually download and install the latest Windows Defender definition updates using the instructions at support.microsoft.com/.../923159. I found some forum posts that indicated that these updates can install successfully in some cases where they fail via Windows Update. If you try to manually install and it still fails, then hopefully there will be a log created in your %temp% that will give more detailed information about the cause of the failure.
Anonymous
January 08, 2015
when i open the file 'mpas-feX64.exe' nothing happens. Tried to open it as admin, the cursor loads for a while but nothing happens. Regarding the registry do you think i will have problems in the future because of this? should i just format my system? Is it easy to recover the windows key of a laptop bought with windows 8? thanks, i need to sleep now, laters and thanks again
Anonymous
January 09, 2015
Hi Ian - I'm sorry, but I don't know how to explain why that file won't run for you. Maybe the steps at www.eightforums.com/.../5906-windows-defender-kb2267602-update-fails.html will help fix that issue? I also found information at answers.microsoft.com/.../6cf718ae-c1ff-49fb-87c6-5ac46f140ff2 that indicates that you may need to run the definition update installer in Windows 8 compatibility mode when you try to install it on Windows 8.1. I don't think you need to format your computer because of this issue.
Anonymous
January 09, 2015
Thanks a lot aaron but i'm suspecting other things went wrong when i upgraded my hard disk and cloned it. The laptop is considerably slower with a faster SSD, e.g. the log in screen picture doesn't load always and the wifi icon etc freezes in 1 place and an other one appears a few pixels above it. A clean install i think would be the best solution right now. Pity that i will have to buy a new licence i think since i do not have an iso or something to create a usb windows installer
Anonymous
January 13, 2015
Hi Aaron ant thx. but or me it doesn't working.. im trying to download Visual Studio 2013 and every time i download after few seconds i get a massage "Setup Engine Access is denied". Now after i did what you post it immediately shows that massage. thanks again and please help. btw i have windows 7 64bit.
Anonymous
January 13, 2015
Hi EldarGoren - That error you describe is specific to Visual Studio setup, and subinacl won't help you solve it. I'd suggest searching for that error text in the Visual Studio setup forum at social.msdn.microsoft.com/.../home and trying the recommended solutions there. If those solutions don't help, then I'd suggest posting a new question in that forum and hopefully someone there will be able to help you solve this problem.
Anonymous
January 13, 2015
thanks man and thanks for fast answer :)
Anonymous
January 13, 2015
Hi, its me again.. ;) I entered to the log file and i see now a lot of "RegSetKeySecurity Error : 5 Access is denied." So i didn't understand what to do next.
Anonymous
January 14, 2015
Hi EldarGoren - Which exact registry keys/values are you seeing that error for? Also, can you please double-check that you ran reset.cmd from an elevated cmd prompt (step 2 of the instructions in the main blog post)?
Anonymous
January 15, 2015
Hi Aaron All of the registry keys had the error.. I ran it through start/run/cmd im now trying to do like step 2 but i already seeing thousands of failed. thank you for helping
Anonymous
January 15, 2015
Hi EldarGoren - If you're sure that you're running from an elevated cmd prompt, then I don't know how else to explain failures changing the permissions for every single registry key. You might need to use a different solution to update your registry permissions if subinacl doesn't work for you. The steps listed at support.microsoft.com/.../310426 can be used to manually change registry permissions for example. If that doesn't help either, then I'd suggest posting a question on one of the Windows forums at answers.microsoft.com/.../windows to see if someone there can offer any other workarounds for you to try.
Anonymous
January 15, 2015
I got tens of thousands that failed. still doesn't working.
Anonymous
January 15, 2015
haha i wrote the last comment and then yours just pop up. Im trying now what you suggested.
Anonymous
January 15, 2015
Just one last thing. i noticed that just the HKEY_CURRENT_USER is okay and when it finish with the HKEY_CURRENT_USER those are these lines: SeSecurityPrivilege : Access is denied. WARNING :Unable to set SeSecurityPrivilege privilege. This privilege may be required. HKEY_CURRENT_USER - QueryObjectSecurity Error : 1314 A required privilege is not held by the client. SeSecurityPrivilege : Access is denied. WARNING :Unable to set SeSecurityPrivilege privilege. This privilege may be required. HKEY_LOCAL_MACHINE - QueryObjectSecurity Error : 1314 A required privilege is not held by the client. HKEY_LOCAL_MACHINEBCD00000000 : 5 Access is denied. and then it starting with the access is denied in all the HKEY_LOCAL_MACHINE. and after the HKEY_LOCAL_MACHINE there is the HKEY_CLASSES_ROOT that in this key some are good and some are not. hope its helping so you can understand, if its not ill go to windows forums. thank you.
Anonymous
January 15, 2015
Hi EldarGoren - The BCD00000000 error is normal. For the other HKEY_LOCAL_MACHINE keys that you see this error for, are you able to update any of their permissions using the manual steps at support.microsoft.com/.../310426
Anonymous
January 20, 2015
Have a lot of issues trying to Install a specific program for a client. I receive this error. Error 1402. Could not open key: HKEY_LOCAL_MACHINE32SoftwareClassesInterface{BEF6E003-A874-101A-8BBA-00AA00300CAB}ProxyStubClsid Have tried running your script without success. Changed permissions for that specific key, no success. Changed users, used local admin rights and still nothing. Although 1 question i'd like answered .. what is with the "HKEY_LOCAL_MACHINE32" - It does not exist in the registry ?? Thank you!
Anonymous
January 20, 2015
Never mind - HKEY_LOCAL_MACHINE32 Means 32BIT Regsitry which is in HKEY_LOCAL_MACHINESoftwareWOW6432Node
Anonymous
January 21, 2015
Hi Will - That's correct. Were you able to manually update the permissions for that registry key when you went to the 32-bit registry location in regedit.exe?
Anonymous
January 21, 2015
Hi Aaron Stebner I had to take ownership of the key before I could edit in permissions. Although everything works now and it installs fine. I just had to analyse that error a lot, then realised HKEY_LOCAL_MACHINE32 could only mean 32bit reg key. Thanks anyway :) (Love the article by the way)
Anonymous
January 24, 2015
The comment has been removed
Anonymous
January 26, 2015
Hi Zoltan - I'm not sure how those registry keys under HKCRInstaller got into the state where they were owned by TrustedInstaller and your SYSTEM account and Administrators group only had read access. On my PCs, the equivalent keys are owned by SYSTEM and both SYSTEM and Administrators have read/write access. I suspect you'll face similar access denied errors if you end up needing to repair/uninstall any other products on this computer that write data to that part of the registry. You might need to go to the parent of all of these registry keys and change ownership and permissions from there and choose the option to have sub-keys inherit the changes in order to fully solve this issue.
Anonymous
January 28, 2015
Thank u I followed all 12 steps but after open the cmd command and typing the word reset.cmd after pressing enter it fail since it is not recognized as the internal or external command, operable program or file. what can i do?
Anonymous
January 28, 2015
Hi loshiye sindiyo - That error means that reset.cmd is not located in the directory that your cmd prompt is pointing to. If you type dir in the cmd prompt, you shouldn't see reset.cmd there. You'll need to either copy reset.cmd to that directory or use the cd command to change directories in your cmd prompt to the directory that reset.cmd is located in on your computer.
Anonymous
March 09, 2015
Thank you for all of this
Anonymous
March 26, 2015
Is this valid for Windows 8 64 bit?
Anonymous
March 26, 2015
Hi Marius - I haven't heard of anyone reporting any problems when trying to run subinacl.exe on Windows 8 in the past, so I think it should work fine for you.
Anonymous
March 27, 2015
Well, I had an issue with installing an update, and did exactly as this said, and it didn't work. I'm running Windows 8.1. However, I am also working on an account that's had some of it's administrative permission changed, somehow, despite it being the starting account when I got my computer and being an admin account by default. I do have a backup full administrative account, but am wondering if I should run this with the parameters for the account I want the permissions corrected on, on the full administrative account, or if it will not work doing so. Please help, this has been an issue plaguing me for a while now.
Anonymous
March 30, 2015
Hi Alex - I'm not sure if subinacl.exe will work correctly if you're trying to reset the permissions of an administrator account that is different from the one you're currently logged in with. You can definitely try it and see how it goes though. You might need to manually update the owners and change permissions using regedit.exe. You can use steps like the ones at support.microsoft.com/.../310426 to do that. That article says that it applies to Windows XP, but the instructions are the same for newer versions of Windows too. It would also be worth double-checking to see if you can install the Windows update that is currently failing with your other administrator account. That would help narrow down whether it is a permissions issue specific to your user account or if there is some other problem on this PC that is causing the update to fail to install.
Anonymous
April 14, 2015
The comment has been removed
Anonymous
April 14, 2015
Hi Doc Sheldon - The file is named subinacl.exe with the letter L at the end, but it looks like you're trying to run it with the name subinac1.exe with the number 1 at the end. Can you try fixing the name and seeing if that helps resolve this issue?
Anonymous
April 14, 2015
I typed the filename incorrectly here, Aaron. The file I originally downloaded and installed was L, not the number 1.
Anonymous
April 14, 2015
Hi Doc Sheldon - Just to confirm, you're saying that you have the file c:Program Files (x86)Windows Resource KitsToolssubinacl.exe on your computer, and you're still getting an error saying that it could not find the file c:Program Files (x86)Windows Resource KitsToolssubinacl.exe? If so, I don't understand how that would be happening. Can you upload a screenshot of the exact command that you ran and the exact error message that you're seeing so I can try to take a closer look?
Anonymous
April 14, 2015
No, Aaron - In fact, checking with Explorer, the WIndows Resource Kits folder doesn't even exist.
Anonymous
April 14, 2015
Here's a screenshot: i38.photobucket.com/.../Solving%20setup%20errors%20by%20using%20the%20SubInACL%20tool%20to%20repair%20file%20and%20registry%20perm_2015-04-14_11-32-54_zps0fm6e40q.png
Anonymous
April 14, 2015
Hi Doc Sheldon - If you install SubInAcl from www.microsoft.com/.../details.aspx and choose the default install path, it will install subinacl.exe to c:Program Files (x86)Windows Resource KitsTools. Can you please double-check that you've done this step?
Anonymous
April 14, 2015
Aaron, in the instructions above, it says to save and close, but gives no specific location. Can you clarify where it should be saved?
Anonymous
April 14, 2015
No "default install path" is offered, Aaron. I see in your code that it will look for the Windows Resource Kits folder (which doesn't exist), but I don't see that it'll do anything but return that error if it's not found.
Anonymous
April 14, 2015
Hi Doc Sheldon - When you go to www.microsoft.com/.../details.aspx, you download a file named subinacl.msi. When you run subinacl.msi, it will launch a setup wizard UI, and clicking through the UI shows a page like this - onedrive.live.com/redir. That is where the default install path is shown.
Anonymous
April 14, 2015
Ah, okay. I just downloaded the file from www.microsoft.com/.../details.aspx and followed the instructions above. I'll try it that way.
Anonymous
April 14, 2015
Since I don't have the Windows Resource Kits folder or its subfolder Tools, should I create those?
Anonymous
April 14, 2015
Hi Doc Sheldon - No. Installing the MSI will create those folders automatically. Instruction 1 above says "Download the SubInACL tool and install it." If you think that step isn't clear enough, please let me know what wording you would suggest to indicate that you have to install the .msi file, not just download it.
Anonymous
April 14, 2015
Okay, point taken, Aaron. ;) I had created the reset.cmd file, and I confused that with the install... my bad. Now I'm faced with another roadblock... when I attempt to install the .msi file, my system won't do it because I'm trapped in Safe Mode. So I have no Windows Installer service. (And I tried using System Restore numerous times, but it fails.
Anonymous
April 14, 2015
Hi Doc Sheldon - If you can't get the .msi to install on your computer, then you'll need to try the workaround in the "Issue 2" section of this blog post - blogs.msdn.com/.../8613982.aspx.
Anonymous
April 14, 2015
okay, Aaron, I went through that procedure, using the .zip version, but when I tried to install it, using msiexec /i subinacl.msi /qb from the command prompt, I get a similar error: i38.photobucket.com/.../Microsoft%20Windowsnbsp2000%20Resource%20Kit%20Tool%20Download%20Release%20Notes_2015-04-14_13-15-59_zpshatf0trv.png is there any other way to force my Windows Installer Service to start, even though I can't get out of Safe Mode?
Anonymous
April 14, 2015
Hi Doc Sheldon - Windows Installer will not work in safe mode. However, the steps in "Issue 2" in the blog post at blogs.msdn.com/.../8613982.aspx don't say anything about installing an .msi. They say to download the file named subinacl.zip and then extract the contents of the .zip file to a folder on your computer. Can you please try doing that instead?
Anonymous
April 14, 2015
I did that, Aaron. Issue 2 then directs me back to this post: "3. Use the steps in the previous blog post to run SubInAcl from the extracted location" The readme file in the extracted subinacl.zip file instructed me to install the .msi file from the command prompt. Obviously, I'm doing something wrong. And just as obviously, your patience seems to be running thin. But frankly, the entire process is a bit confusing to someone that has a LOT less technical chops than you do. I'm just trying to get some assistance in understanding exactly what I need to do (and apparently, NOT do, as well).
Anonymous
April 14, 2015
Hi Doc Sheldon - I'm sorry for the confusion. I've updated the other blog post (blogs.msdn.com/.../8613982.aspx) to try to eliminate this confusion. Can you please take a look at the updated steps and see if you are able to run subinacl.exe after following the updated steps?
Anonymous
April 14, 2015
Thanks, Aaron. I'm a little unclear on how to edit, per your new step #2: "Depending on where you extract the zip file to in step 2 above, you may need to edit reset.cmd and change the folder path that it is trying to run subinacl.exe from" I extracted the .zip file into a folder I named "subinacl" in My Documents... C:UsersDocDocumentssubinacl But I'm unclear on which path needs to be edited in the reset.cmd file. Can you clarify for me?
Anonymous
April 14, 2015
The comment has been removed
Anonymous
April 14, 2015
The comment has been removed
Anonymous
April 14, 2015
Hooray! It's running! Now I just hope it does the trick.
Anonymous
April 14, 2015
Okay, it completed. In the sequence of the runs scheduled by the reset.cmd file, this is what it shows: 0 failed 0 failed 57,676 failed RegSetKeySecurity Error = 5 Access is denied 0 failed 46k842 failed RegSetKeySecurity Error = 5 Access is denied 0 failed 0 failed 0 failed Any thoughts, Aaron? Should I attempt a reboot now, to see if it will load Windows in Normal Mode?
Anonymous
April 14, 2015
Here's a screenshot of the results, Aaron: i38.photobucket.com/.../Administrator_%20%20Resetting%20ACLs..._2015-04-14_14-51-26_zpsiwp7z553.png
Anonymous
April 14, 2015
Hi Doc Sheldon - I think it is worth trying to boot Windows in normal mode now. I don't know what exact problems you were having that led you to try running subinacl.exe in the first place though, so I can't tell from your screenshot whether or not to expect your problems to be fixed or not.
Anonymous
April 14, 2015
The comment has been removed
Anonymous
April 14, 2015
Well, it looks like it's just not my day. Even when I go into setup during the boot process and select Normal Mode, it boots in Safe Mode. Aaron, do you, or anyone you could recommend, provide remote troubleshooting and system repair services? Is remote access even possible in Safe Mode? I'm desperate to get this system running again, and if I have to pay someone to help, so be it.
Anonymous
April 15, 2015
Hi Doc Sheldon - I'm sorry to hear that you're still running into problems booting your PC after running subinacl.exe. I don't personally know of anyone who provides PC troubleshooting/repair services. I don't think remote access is possible in Safe Mode, so you might have to have someone come to your location or take your PC to a repair shop. Before doing that, I'd suggest posting a question on the Windows 7 forum at answers.microsoft.com/.../windows_7 to see if someone there has any additional troubleshooting suggestions for you to try out.
Anonymous
April 18, 2015
I get the 80070005 error when trying to update windows via control panel. HELP please
Anonymous
April 18, 2015
Hi guys, please help me! I get thrown the error when I try to update windows 7 Home Premium, with the throwback of 80070005. Would be highly appreciated if anyone could help me.
Anonymous
April 18, 2015
Hi Please Help and Allen Austin - SubInAcl can help solve errors like this in some cases, so I'd suggest trying the steps at the top of this blog post if you haven't yet. If you tried those steps and they didn't help, then I'd suggest posting a question on the Windows forum at answers.microsoft.com/.../windows_7 to see if someone there can suggest some other steps for you to try.
Anonymous
May 20, 2015
visual studio update 4 doesn't want to install it says set up blocked
Anonymous
May 20, 2015
Hi Edwin - What is the exact text of the error message that you see in this scenario? Can you please use the tool described at blogs.msdn.com/.../6458047.aspx to collect all of your setup log files, upload the file named %temp%vslogs.cab that this tool will create to a file server (such as http://onedrive.live.com), and then reply back here and provide a link that I can use to download your log files and take a closer look?
Anonymous
June 04, 2015
The comment has been removed
Anonymous
June 06, 2015
You sir, are brilliant. I've spent many hours trying to solve why my amd radeon r9 2oo series graphics card could not be updated with the latest driver. I kept getting access denied & google searches were unable to solve. This worked. Thanks!
Anonymous
June 08, 2015
please help I tried your suggestion but still the same visual studio update 4 doesn't want to install it's just saying "update 4 does not apply or is blocked by another condition on your computer". please help me
Anonymous
June 08, 2015
Hi Edwin - The error you describe doesn't sound like something that is typically able to be solved by changing file/folder/registry permissions with SubInACL. Usually that error means that the version of Visual Studio that the update applies to is not installed. If you can upload your vslogs.cab like I described in my previous reply, I can try to take a look and see if I can narrow it down further. Alternatively, you can post a question on the Visual Studio setup forum at social.msdn.microsoft.com/.../home to see if someone there has any additional suggestions.
Anonymous
June 08, 2015
[070C:04D0][2015-06-08T20:21:48]i001: Burn v3.7.3424.0,[070C:04D0][2015-06-08T20:21:48]i000: Initializing string variable 'EditionDisplayName' to value '#loc.vsupdatededitiondisplayname' [070C:04D0][2015-06-08T20:21:48]i000: Initializing string variable 'FactorMsi' to value '1.3' [070C:04D0][2015-06-08T20:21:48]i000: Initializing numeric variable 'MoreLanguageFwlinkId' to value '427825' [070C:04D0][2015-06-08T20:21:48]i000: Initializing numeric variable 'PrivacyAgreementFwlinkId' to value '427803' [070C:04D0][2015-06-08T20:21:48]i000: Initializing numeric variable 'PrivacyStatementFwlinkId' to value '427803' [070C:04D0][2015-06-08T20:21:48]i000: Initializing numeric variable 'MinOsLevelFwlinkId' to value '427813' [070C:04D0][2015-06-08T20:21:48]i000: Initializing numeric variable 'SolutionFwlinkId' to value '427804' [070C:04D0][2015-06-08T20:21:48]i000: Initializing numeric variable 'HelpFwlinkId' to value '427805' [070C:04D0][2015-06-08T20:21:48]i000: Initializing numeric variable 'IE10FwlinkId' to value '427807' [070C:04D0][2015-06-08T20:21:48]i000: Initializing numeric variable 'WinBlueFwlinkId' to value '427810' [070C:04D0][2015-06-08T20:21:48]i000: Initializing numeric variable 'SHA256BlockFwlinkId' to value '427811' [070C:04D0][2015-06-08T20:21:48]i000: Initializing numeric variable 'Win81PreRelBlockFwlinkId' to value '427809' [070C:04D0][2015-06-08T20:21:48]i000: Initializing string variable 'NetfxProductVersion' to value '4.5.31101' [070C:04D0][2015-06-08T20:21:48]i000: Initializing string variable 'ProfessionalVSVersion' to value '11.0.50727' [070C:04D0][2015-06-08T20:21:48]i000: Initializing string variable 'BaselineBundleVersion' to value '12.0.21005' [070C:04D0][2015-06-08T20:21:52]i101: Detected package: sqlsysclrtypes_Sql2014_amd64_rus, state: Absent, cached: None [070C:04D0][2015-06-08T20:21:52]i101: Detected package: sharedmanagementobjects_Sql2014_x86_rus, state: Absent, cached: None [070C:04D0][2015-06-08T20:21:52]i101: Detected package: sharedmanagementobjects_Sql2014_amd64_rus, state: Absent, cached: None [
Anonymous
June 08, 2015
Hi Edwin - Unfortunately, that isn't enough information to narrow down the root cause of the error that you're seeing. Can you please use the tool described at blogs.msdn.com/.../6458047.aspx to collect all of your setup log files, upload the file named %temp%vslogs.cab that this tool will create to a file server (such as http://onedrive.live.com), and then reply back here and provide a link that I can use to download your log files and take a closer look?
Anonymous
July 01, 2015
thanks
Anonymous
July 04, 2015
QUERO SABER COMO RESOLVER ESSE PROBLEMA NO WINDOWS 7 ULTIMATE
Anonymous
July 08, 2015
The comment has been removed
Anonymous
July 08, 2015
adding up it seems like the McAfee Framework Service & McAfee Registry disappear once I restart the system. Let me know if you have encounter same issue in the past. Btw, my installer is working fine as it can be used to other system without any problem encounter after installation.
Anonymous
July 09, 2015
Hi Snoy - I'm sorry, but I'm not familiar with the McAfee issue that you're describing. It doesn't sound like something that subinacl.exe would be able to fix though. I'd recommend searching on McAfee's web site to see if they have any documented known issues, workarounds, or patches for this type of issue.
Anonymous
July 12, 2015
Hi Aaron, thanks for your reply. It is just seems odd that this issue occur in a fresh windows system installed. BTW, i have tested the subinacle.exe & as what you have said, it cannot fix the issue. But I think your information is great :) Thanks again
Anonymous
August 07, 2015
Is it possible that GWX is the cause of this, in fresh windows installations? I had problems with Windows 7 that I noticed about 2-3 weeks after the GWX update. Because of this I moved to Windows 8. (I didn't want any problems to arise and I had already a copy of it anyway.) After this I had an update of GWX and one of W8.1 (I don't know what was installed first) and the same problem occured again. The reason I'm suspecting it to be GWX is because it behaves like malware. From the start you can't delete sheduled tasks or remove it from the taskbar without some edits in the registry (this was the way I found this, error 5, problem again). Also, this seems to be quite rare when you do a search, but at the same time it happened twice to me and once in a completely fresh windows installation (not an upgrade). Now the only possible way to go around this issue, assuming that the cause is GWX, is by making sure GWX doesn't get installed when you're reinstalling Windows or by moving to Windows 10 In other words, an OS that spies on you and causes microsoft support to explode in an epic fashion because of all the complaints. Too many times because of serious crashes. I'm honestly expecting a lot of rollbacks from Windows 10 (I'm aiming for 10-15%). My dad is already one of them (his PC was my experiment ;) )
Anonymous
August 08, 2015
Don't mind my previous post. I just tested this on a Virtual Machine and found out that a fresh copy without access to the internet during and after the installation already has thousands of RegSetKeySecurity errors (I must have typed that a million times by now). This means that it's normal to have thousands of these errors and I didn't know that (I'm assuming because Windows is not open source?). So for anybody not knowing this: Windows 8 is suposed to have a lot of RegSetKeySecurity errors (5), unless you're a computer (group: SYSTEM).
Anonymous
August 18, 2015
Try www.sevenforums.com or www.tenforums.com. I had a problem installing Visual Studio 2015 community and it would fail on registry entry permission. The entry had no permissions! I had to manually add local account to and then go to advanced to change owner. I finally was able to install VS 2015 with no errors. phew . I almost considered using SubInACL. Microsoft really needs a reset registry command.
Anonymous
August 18, 2015
Hi Mark - The issue you describe where the registry entry had no permissions at all sounds similar to the issue at brianpeek.com/.../weird-vista-registry-issue. There is a way to restore default security permissions on Windows (support.microsoft.com/.../313222), but I'm not sure if it solves this particular issue or not. Also, side note, I typically recommend the official Microsoft Windows forums at answers.microsoft.com/.../windows for this type of issue.
Anonymous
August 18, 2015
The comment has been removed
Anonymous
August 18, 2015
I'm still having permission problem with CurrentVersionInstallerUserDataS-1-5-18Components How do I run SubInACL to fix the permissions? And will they change the entries that have no permissions?
Anonymous
August 19, 2015
Hi Mark - There are a couple of options to fix this type of issue listed at the bottom of the post at brianpeek.com/.../weird-vista-registry-issue. Alternatively, you can manually update registry permissions by using regedit.exe. There are steps for doing that at support.microsoft.com/.../310426. That article says that it applies to Windows XP and Windows Server 2003, but the steps are equivalent in regedit.exe in newer versions of Windows too.
Anonymous
August 19, 2015
I'm all set VS 2015 installs and repairs on Windows 10 with no issues. VS 2008 doesn't install 100% on Windows 10. I think there are some compatibility problems but no permission issues. Search for Visual Studio 2008 uninstall tool. That works.
Anonymous
September 21, 2015
Visual Studio 2015 permission solution if possible please mail to me or online update. Thanks
Anonymous
September 22, 2015
Hi vijay kumar saxena - You'll need to provide more details about your scenario in order for folks to be able to help further. What exact error are you seeing, and what are you doing with Visual Studio that causes the error to appear? If your issue occurs while installing Visual Studio, then can you please use the tool described at blogs.msdn.com/.../6458047.aspx to collect all of your setup log files, upload the file named %temp%vslogs.cab that this tool will create to a file server (such as http://onedrive.live.com), and then reply back here and provide a link that I can use to download your log files and take a closer look? Also, please note that there is a Visual Studio setup forum that might contain additional information about how to solve this type of problem - social.msdn.microsoft.com/.../home.
Anonymous
September 28, 2015
All this sounds like French to me. i have downloaded the subinacl but am unsure of the process. Is there someone who can take over my pc and run this for me? I am desperate to get Itunes back on my PC. I use it for my job.
Anonymous
September 29, 2015
Hi Sonya Jazzercise owner - If you don't feel comfortable following the steps listed at the top of this blog post, then I'd recommend working with a local computer repair technician or someone like that who can help you walk through the steps in person.
Anonymous
September 29, 2015
Hats off to you for running a blog that is good enough to have Microsoft linking to it, while not running any banner ads to cover the hosting costs from the traffic MS sends your way, and providing timely responses for 8 YEARS to whatever people post. and the tool is nice ;-)
Anonymous
September 30, 2015
Thanks to this post , saved my time...
Anonymous
October 06, 2015
The comment has been removed
Anonymous
October 08, 2015
i am running windows 7 and have tried running all of the programs to reset my acls and most of the reseting fails i am not sure why but i have done everything i can to make this work. i am on a 64 bit system i am trying to update to windows 10 and have been unable to please any help would be amazing
Anonymous
October 09, 2015
Hi Brett - For Windows 10 upgrade issues, I'd recommend posting a question on the Windows 10 forum at answers.microsoft.com/.../windows_10 and hopefully someone there will be able to provide additional troubleshooting suggestions for you to try out on your PC.
Anonymous
October 24, 2015
Helped me following your directions word for word. Windows 10 user happy! Was trying to download Origins for a game and would always stop at the same place. Finally stumbled upon your excellent guide and problem solved. Thank you !
Anonymous
December 11, 2015
Hello, i have a big problem with the reset.cmd.... i'll try it often, but everytime there is a problem. What can i do? Here is my list. Please help me. Determine whether we are on an 32 or 64 bit machine Resetting ACLs... (this may take several minutes to complete) IMPORTANT NOTE: For this script to run correctly, you must change the values named Peter to be the Windows user account that you are logged in with. ========================================================================== Elapsed Time: 00 00:00:00 Done: 0, Modified 0, Failed 0, Syntax errors 1 Last Syntax Error:WARNING : /grant=administrators=f : Error when checking argume nts - HKEY_CURRENT_USER Elapsed Time: 00 00:00:00 Done: 0, Modified 0, Failed 0, Syntax errors 1 Last Syntax Error:WARNING : /grant=administrators=f : Error when checking argume nts - HKEY_CURRENT_USER Elapsed Time: 00 00:00:00 Done: 0, Modified 0, Failed 0, Syntax errors 1 Last Syntax Error:WARNING : /grant=administrators=f : Error when checking argume nts - HKEY_LOCAL_MACHINE Elapsed Time: 00 00:00:00 Done: 0, Modified 0, Failed 0, Syntax errors 1 Last Syntax Error:WARNING : /grant=administrators=f : Error when checking argume nts - HKEY_LOCAL_MACHINE Elapsed Time: 00 00:00:00 Done: 0, Modified 0, Failed 0, Syntax errors 1 Last Syntax Error:WARNING : /grant=administrators=f : Error when checking argume nts - HKEY_CLASSES_ROOT Elapsed Time: 00 00:00:00 Done: 0, Modified 0, Failed 0, Syntax errors 1 Last Syntax Error:WARNING : /grant=administrators=f : Error when checking argume nts - HKEY_CLASSES_ROOT System Drive... Elapsed Time: 00 00:00:00 Done: 0, Modified 0, Failed 0, Syntax errors 1 Last Syntax Error:WARNING : /grant=administrators=f : Error when checking argume nts - C:Program Windows Directory... Elapsed Time: 00 00:00:00 Done: 0, Modified 0, Failed 0, Syntax errors 1 Last Syntax Error:WARNING : /grant=administrators=f : Error when checking argume nts - C:Windows ========================================================================== FINISHED. Press any key to exit . . . Thank for help!!
Anonymous
December 14, 2015
Hi Peter - I'm not sure what would cause the warnings that you're seeing on your PC. Maybe there was some kind of copy and paste issue when you created your version of reset.cmd? Can you upload the exact file that you ran on your PC to a file server (such as http://onedrive.live.com) so I can download it and double-check the command lines listed in there?
Anonymous
December 20, 2015
Hej Aaron, i load i up here: onedrive.live.com/redir Thank you very much for help!
Anonymous
December 20, 2015
Sorry, it was only the half link... onedrive.live.com/redir
Anonymous
December 28, 2015
Hi Peter - I am not sure how to explain these errors. Your copy of the script looks the same as the one I uploaded except you filled in your user name in place of the place-holder YOURUSERNAME value. It seems to be complaining about the Administrators group name - is your version of Windows a non-English version that has the name of the Administrators translated? If so, you should be able to update the script to use the SID instead of the group name. You can find a list of SIDs for common Windows groups at support.microsoft.com/.../243330.
Anonymous
January 07, 2016
dude i mistake copy paste to cmd. straight, is it will be okay, i mean without copy paste to notepad ??? after that i realize so i take second chance and do it right...
Anonymous
January 08, 2016
Hi Yuen - The commands listed in this blog post won't run correctly if you copy and paste all of the text into a cmd prompt instead of creating a script and running the script. There is logic to figure out the location of the Program Files folder and set a variable that is used by later commands, which will only work if you're running the commands from a script.
Anonymous
March 28, 2016
When I run reset.cmd I get the error message "Could not find file C:\Program Files (x86)\Windows Resource Kits\Tools\subinacl.exe. Double check that subinacl is correctly installed and re-run this script." Subinacl.exe seemed to install without problems when I ran the msi file. I have double checked and subinaclacl.exe does exist in the correct directory. The file is dated 11/06/2004 and is 284KB in size.I created the Reset.cmd file by copying and pasting so there be no spelling mistakes. I found 2 occurrences of YOURUSERNAME which I changed to my account name. I hope that this is sufficient info.
- Anonymous
  March 28, 2016
  Hi TomH - I'm sorry, but I don't know how to explain this behavior. The script is just checking for the existence of C:\Program Files (x86)\Windows Resource Kits\Tools\subinacl.exe, and I don't know how that would fail if the file does exist at that location. If you want, you can try to update your copy of reset.cmd to remove that existence check and see if the rest of the script works correctly afterwards.
  - Anonymous
    March 29, 2016
    Thanks for the reply. Before I proceed could you please clarify where the SubInACL file should be. The msi seems to have placed it in a directory in Programs Files (x86), which I understand is for 32-bit programs. My PC is Win 7 64-bit. Should I try moving the Windows Resource Kits folder or is there a 64-bit version in the Windows download site that I have somehow managed not to download?
- Anonymous
  April 11, 2016
  I copied the reset.cmd to same directory as subinacl.exe, removed the file exist check from reset.cmd and ran it.
Anonymous
March 29, 2016
Hi TomH - The SubInAcl tool is a 32-bit tool and it is installed by a 32-bit MSI, so it will be installed to the 32-bit Program Files directory. On a 64-bit OS, the path should be C:\Program Files (x86)\Windows Resource Kits\Tools\subinacl.exe. On a 32-bit OS, the path should be C:\Program Files\Windows Resource Kits\Tools\subinacl.exe.
Anonymous
April 15, 2016
If you guys get the "internal or external" error on command prompt, just put the reset.cmd file in the default location that shows in the command prompt, FOR EXAMPLE in my case when I opened the command prompt the default location was "C:\Windows\system32" so i copied the "reset.cmd" in system32 folder & then when I entered the command "reset.cmd" it started the process.! Thanks..
Anonymous
April 29, 2016
The comment has been removed
- Anonymous
  May 02, 2016
  The comment has been removed
  - Anonymous
    May 09, 2016
    Just to let you know something about quotes. When copying the script directly from the page to notepad it may change the standard straight (let's call it "vertical") quotes to italic quotes. In my case the initial check failed until I changed. I also noticed that for some reason it replaced one of the quotes with a question mark. I just fixed by comparing the original code from the MS website and voila.
Anonymous
May 16, 2016
This is a great script, but it appears the some functionality is achieved through one of the tools built in to the tweaking.com program here:http://www.tweaking.com/content/page/windows_repair_all_in_one.html
Anonymous
June 05, 2016
The comment has been removed
- Anonymous
  June 06, 2016
  Hi kamol roy - I'll need more information in order to be able to diagnose this type of problem. What version of Visual Studio are you trying to install, and what is the exact error message that you see? Also, can you please use the tool described at http://blogs.msdn.com/astebner/archive/2007/11/21/6458047.aspx to collect all of your setup log files and send me the file named %temp%\vslogs.cab that this tool will create so I can take a closer look?
Anonymous
June 27, 2016
Hello0,I get the message that the program could not be found even though it is properly installed in the correct location. Thoughts?
- Anonymous
  June 27, 2016
  Hi carbonterry - I think this might be caused by a formatting issue when copying and pasting the reset.cmd commands. I just tried copying and pasting them from https://blogs.msdn.microsoft.com/astebner/2006/09/04/solving-setup-errors-by-using-the-subinacl-tool-to-repair-file-and-registry-permissions/, and the quotation mark characters are being converted from standard quotes to formatted open and closed quotes, and those formatted quotes aren’t recognized when running the script. You can see if that is the issue in your scenario by opening your reset.cmd in notepad and changing the formatted open and closed quotes to standard quotes and then saving and re-running the script.
  - Anonymous
    August 29, 2016
    Thank you. You have just saved a life.
Anonymous
June 29, 2016
Hello.I'm having problems with Windows Update getting stuck and eating up all processor capacity.I tried to run the reset procedure as instructed, but it just flashes on the screen and doesn't seem to do anything.My Computer has Windows 7 Sp 1 Home Premium.regards,Jaakko
- Anonymous
  June 29, 2016
  Hi Jaakko Lehtniemi - I'm not sure SubInAcl will be helpful for the Windows Update issue you're describing. I'd recommend posting a question on the Windows 7 forum at http://answers.microsoft.com/en-us/windows/forum/windows_7 to see if someone there can suggest some ideas for you to try to solve this problem on your PC.
Anonymous
June 29, 2016
Be careful copying and pasting. I found that IE is too helpful by setting double-quotes as so-called "smart quotes" instead of straight double-quotes.
Anonymous
July 16, 2016
I ran this in the hope it might fix a problem with Device Manager which was preventing access to minor peripherals. Google suggestions said that there could be a problem with permissions in the registry. Realise it’s not quite what subinacl is designed for but figured it couldn’t do any harm to try.reset.cmd ran about 20 mins and produced errors in the 10’s of 1000’s on the red banded display for each segment + a 35Mb output file. After it ended, there was still a whirling circle round my cursor which Task Manager revealed was umpteen werkmgr Win error reporting processes running. This went on for hours and rebooting made no difference, the werkmgr processes came back.I had made a complete registry backup but it wouldn’t restore. Restore almost finished then came up with an error message about lack of permission. I can’t restore from the daily backup as the external HDD’s aren’t recognised any more.On Win 7 64 bit. My bad, just a warning that things can go horribly wrong.
Anonymous
September 20, 2016
Been following this for several years after using it once a very long time ago. While I don't have a specific need for it at the moment, I would like to know if this is still useful in more modern versions of Windows (Server 2012 or Windows 10 for example)
- Anonymous
  September 20, 2016
  Hi JeeNz - Yes, the steps in this blog post can be useful on newer versions of Windows too if there are missing file or registry permissions at the locations that are specified in the script in the main blog post.
Anonymous
September 24, 2016
Your style is so unique compared to other folks I've read stuff from.Thanks for posting when you've got the opportunity, Guess I'll just book mark this web site.
Anonymous
October 10, 2016
Hi, I am trying to resolve an 0X0004005 error while trying to install the Windows 10 Anniversary edition update.When I originally tried to install from Windows 7 to Windows 10, I could not do so, constant error messages that I couldn't seem to overcome, so I resorted to a "clean" install and then reinstalled all my Apps etc.Going through the notes on you page...https://blogs.msdn.microsoft.com/astebner/2006/09/04/solving-setup-errors-by-using-the-subinacl-tool-to-repair-file-and-registry-permissions/I have discovered that the folder name in C:Userswilli is willi, and in Task Manager it is william (all lower case). Under Accounts in the Settings, My user name is shown as William.Could this be the cause of the problems?If so, how can I resolve this problem, as I am unsure as to which USERNAME when trying to create reset.cmd.I would appreciate your assistance.
- Anonymous
  October 18, 2016
  Hi William Glendenning - The error code you listed isn't an access denied error code, so I'm not sure you need to run SubInAcl in this scenario. I'd recommend posting a question on the Windows 10 forum at http://answers.microsoft.com/en-us/windows/forum/windows_10 to see if someone there can help troubleshoot your Windows 10 Anniversary Edition installation problem.
Anonymous
October 20, 2016
Excellent article. I absolutely love this site. Keep writing!
Anonymous
October 25, 2016
The comment has been removed
- Anonymous
  October 31, 2016
  Hi Hijam Monarsingh – Some of the registry sub-keys will be held in use by Windows and subinacl.exe won’t be able to update the permissions. If you are seeing subinacl.exe fail to update registry permissions for sub-keys that are not in use, then you might need to try to manually update the permissions using regedit.exe instead. You can find instructions for doing that at https://support.microsoft.com/en-us/kb/310426.
Anonymous
October 31, 2016
I NEED HELP !! PLEASE HELP ME AS SOON AS POSSIBLE !!!I have the Subinacl File installed in my computer and still it is showing "Could not find file %ProgramFilesPath%\Windows Resource Kits\Tools\subinacl.exe. Double-check that SubInAcl is correctly installed and re-run this script."I dont know what to do !!!I am using Windows 7 Ultimate 64 Bit !
- Anonymous
  November 01, 2016
  Hi Abhraneel Roy - The first step is to double-check the exact location on your PC where subinacl.exe is installed. The example reset.cmd script assumes you have installed it to the default location that the subinacl setup program uses - c:\Program Files\Windows Resource Kits\Tools if you are running a 32-bit version of Windows, or c:\Program Files (x86)\Windows Resource Kits\Tools if you are running a 64-bit version of Windows.If subinacl.exe doesn't exist at those locations, then you can update the example reset.cmd script to point to the actual install location of subinacl.exe on your PC.
  - Anonymous
    November 01, 2016
    My Subinacl File is located at the Default Location while Installation which is "C:\Program Files (x86)\Windows Resource Kits\Tools"But when i Type reset.cmd , it says it could not detect the Subinacl File.
    - Anonymous
      November 01, 2016
      Hi Abhraneel Roy - I don't know how to explain why reset.cmd isn't finding subinacl.exe if it is in that location on your PC. I think the contents of the reset.cmd script are fairly self-explanatory, so you may have to open reset.cmd in Notepad and make a minor change to it to force it to find subinacl.exe in that location. You can also use the cd command in the elevated cmd prompt to manually change directories to c:\Program Files (x86)\Windows Resource Kits\Tools before running subinacl.exe.
      - Anonymous
        November 01, 2016
        Ok i will try and i tell you the feedback !!!
      - Anonymous
        November 01, 2016
        No can you tell me the Steps so i can Force the CMD to "C:\Program Files (x86)\Windows Resource Kits\Tools before running subinacl.exe." and find Subinacl file !
      - Anonymous
        November 01, 2016
        Please see this screenshot - http://i781.photobucket.com/albums/yy93/abhraneel/Capture_zpszxlgrn7v.pngHere i had the Subinacl file installed in the Default Location but CMD still couldn't detected it.
        
        Anonymous
        November 02, 2016
        Hi Abhraneel Roy - Did you download reset.cmd from my OneDrive, or did you copy and paste it from the text of the blog post? If you copied and pasted from my blog post, it looks like there might be a formatting issue with the quotation mark character that is causing this error. Batch files need to have a standard quotation mark character (2 straight vertical lines), but the text of the blog post has smart quotes (the curly lines used by programs like Word and Outlook that look different for open and closed quotes). If you have the smart quotes, can you try using notepad to change them to standard quotes and see if that helps?Side note - when I open the blog post in edit mode, the quotation marks are correct. They only get rendered as smart quotes when I save the blog post and view it afterwards. I'll see if I can figure out a way to make the blog host stop converting quotes like that to help avoid this type of issue in the future.
      - Anonymous
        November 02, 2016
        I think i should now Upgrade to Windows 10 ! Bcuz there is no other way to fix it.Actually i came to this Forum in the search of 0x80070005 error while installing Visual C++ 2015 !If i Upgrade to windows 10 will the Visual C++ 2015 will install correctly ?
        
        Anonymous
        November 03, 2016
        Hi Abhraneel Roy - Yes, I would expect VC++ 2015 to install correctly on Windows 10. However, I would also expect it to install correctly on all supported versions of Windows, so there's no guarantee you won't run into some kind of problem after upgrading too.Before upgrading, you might want to post a question on the Visual Studio setup forum at https://social.msdn.microsoft.com/Forums/vstudio/en-US/home?forum=vssetup to see if someone there can help solve the installation issue on your current version of Windows.
Anonymous
November 23, 2016
The comment has been removed
- Anonymous
  November 28, 2016
  The comment has been removed
Anonymous
December 02, 2016
Unbelievable, that a post after 10 years still can prevent you from reinstalling your operating system.Works fine on Windows 10, just one reboot required after the changes.Thanks Aaron. Your Framework Repair and Remove tools saved me too in a lot of cases (4 years of Microsoft Technical Support in Germany).
Anonymous
December 07, 2016
Wonderful goods from you, man. I've understand your stuff previous to and you are just too fantastic. I actually like what you've acquired here, certainly like what you're saying and the way in which you say it. You make it enjoyable and you still take care of to keep it smart. I can not wait to read far more from you. This is actually a great website.
Anonymous
December 07, 2016
i,m using windows 8.1 OS, i install visual studio 2012 professional software, ,It does not install my pc during fatal error comes,so how to resolve the problem. Fatal error during installation.
- Anonymous
  December 08, 2016
  Hi Saran Kumar - Can you please use the tool described at http://blogs.msdn.com/astebner/archive/2007/11/21/6458047.aspx to collect all of your Visual Studio 2012 setup log files, upload the file named %temp%\vslogs.cab that this tool will create to a file server (such as http://onedrive.live.com), and then reply back here and provide a link that I can use to download your log files and take a closer look?
Anonymous
December 11, 2016
The comment has been removed
- Anonymous
  December 15, 2016
  Hi Nalin - The only thing I can think of to suggest in your scenario is to look at the permissions on the relevant files/folders on your Windows 7 PCs and then mirror those permissions onto the same set of files/folders on your Windows 10 PCs. When you install the SubInAcl tool, there is a help file that installs to the same directory as subinacl.exe that you can use as a reference if you want to try to use subinacl.exe to automate setting those permissions. You can also manually set permissions using instructions like the ones at https://technet.microsoft.com/en-us/library/cc754344(v=ws.11).aspx.
Anonymous
January 08, 2017
I tried several suggested solutions, but nothing worked.Now everything is fine.Thanks a lot!
Anonymous
January 09, 2017
Thank you for that.I try to do but when my computer restart,It can not start .How can i do?
- Anonymous
  January 09, 2017
  Hi cqr2287 - What exact error do you see when you try to restart your computer? You might need to boot into safe mode and roll back to an earlier system check point in order to resolve this type of issue.
Anonymous
March 15, 2017
Thanks for finally talking about >Solving setup errors by using the SubInACL tool to repair file and registry permissions - Aaron Stebner's WebLog <Loved it!
Anonymous
May 18, 2017
Setup Can Not Run.. how to fix it
- Anonymous
  May 18, 2017
  Hi shailesh - I need more information in order to be able to try to help solve this issue. What exact program are you trying to install, what exact error message do you see when you try to install it, and what version of Windows are you running on your PC?
Anonymous
May 31, 2017
The comment has been removed
- Anonymous
  May 31, 2017
  I Get same error for installing visual c++ 2005 and 2008 redistributable packages also, also searching for this suggests its related to some c++ runtime libraries. Please help
- Anonymous
  June 02, 2017
  Hi RamdasP - Error code 0x800736b3 means ERROR_SXS_ASSEMBLY_NOT_FOUND (The referenced assembly is not installed on your system.) Here are the steps that I suggest for this type of error:1. Install the latest Windows service pack and updates if you haven't yet.2. Try to run the System Update Readiness Tool from http://support.microsoft.com/kb/947821.3. Try to repair the files that are a part of your OS by using the steps listed at http://blogs.msdn.com/astebner/archive/2007/03/26/how-to-repair-the-net-framework-2-0-and-3-0-on-windows-vista.aspx.If none of the above help, you might need to repair/re-install Windows to fix this type of error. It might also help to post a question on one of the Windows forums at http://answers.microsoft.com/en-us/windows to see if someone there has any additional suggestions for you to try before you resort to re-installing Windows.
Anonymous
June 14, 2017
The comment has been removed
- Anonymous
  June 15, 2017
  Hi faiz aiman - The log file you posted looks incomplete, and I don't see any access denied errors in it. Can you please use the tool described at http://blogs.msdn.com/astebner/archive/2007/11/21/6458047.aspx to collect all of your setup log files, upload the file named %temp%\vslogs.zip that this tool will create to a file server (such as http://onedrive.live.com), and then reply back here and provide a link that I can use to download your log files and take a closer look?
Anonymous
November 06, 2017
I am forever thought about this, thanks for putting up.
Anonymous
November 27, 2017
I second what everyone is saying. Thank you, so much!
- Anonymous
  February 07, 2019
  (The content was deleted per user request)
Anonymous
February 07, 2019
We have several Access 97 runtime applications that constantly get locked out due to Office Updates. The current solution is to uninstall and then reinstall our application, which uses a custom Wise installer. Could a "package" be put together using SubInACL to allow a local user to unlock the required registry keys to ensure our application can be run? We have had a difficult time isolating the correct registry keys affected. Any help is greatly appreciated! I know we are on "borrowed time" with our Access 97 applications, but we have so much invested in our programs, that it has been difficult getting all of this upgraded to newer technologies.
- Anonymous
  February 13, 2019
  Hi tskelley - I wouldn't recommend trying to automate the use of SubInACL to solve the problem you describe. Instead, I'd suggest using a tool like Process Monitor (https://docs.microsoft.com/en-us/sysinternals/downloads/procmon) to narrow down exactly which registry keys are affected and then come up with a more targeted workaround.
Anonymous
March 11, 2019
(The content was deleted per user request)
Anonymous
March 11, 2019
In step 6 (ascertain value of YOURUSERNAME) I found it easiest to bring up a command prompt (run CMD from the search bar in Windows 10) and then type in "set username" and press enter. The response will be something starting with "username=" and thenthe value of YOURUSERNAME will be displayed. Change YOURUSERNAME to this value (in all instances) in the "Reset.cmd" file.(Lines 44 and 47) (I noted that there is no "User Name" column in Task Manager when you view any of the Tabs, including Processes")

通过

Solving setup errors by using the SubInACL tool to repair file and registry permissions

Comments

and the error in windows update is:

WindowsUpdate_80070005 OR WindowsUpdate_dt000"‎ (1)

其他资源