9 replies to this topic

[MedEvil]

For a quick test of WimBoot with NaughtyPE, i have copied a complete previously already build NaughtyPE project to another computer. Everything works fine except that on the other computer neighter WB nor i can access the ENUM key.

I already tryed to change the permissions before i copy, to allow all, but to no avail.

If i build now a NaughtyPE on the other computer ENUM works fine on that computer, but not on the first one.

Does anyone know, what causes ENUM key to act up while no other keys do that?

btw. I'm loged in as admin on both machines. And if i want to view the permissions, the error message says something like, you do not have the rights to view the permissions but you can change them.
Which is just a lie as windows does not let me change the permissions.

[cdob]

A admin dosn't have full permisssions.
But a admin may grant permissions himself.

Take ownership of ENUM keys first.
Change permisssions next.

[Sha0]

Or you can run as the SYSTEM account and should have permissions. You could either use the at command or you could use Microsoft's SysInternals' PsExec.exe to start a regedit.exe window as SYSTEM. See the at trick here.

[MedEvil]

Thanks for the help you two, but i would really like to understand and maybe fix the occurrence of this problem.
How can some keys have this problems an others don't? They are all created by WB. Shouldn't that mean, that they are all created with the same permissions?

[cdob]

How can some keys have this problems an others don't? They are all created by WB. Shouldn't that mean, that they are all created with the same permissions?

Do you have some ENUM examples?
How do you add ENUM keys?
Do you add .reg files? Do you process .script files?

Did you used temp files from a previous build?

How does WB create ENUM keys?
Does WB use a windows api?
Does windows api set permission defaults to a local account?
Which permissions does exist at ENUM key?

@Sha0
At XP machines I prefer sc.exe to launch application at system account

%SystemRoot%\system32\sc.exe delete SystemCmd >nul

%SystemRoot%\system32\sc.exe create SystemCmd binpath= "%SystemRoot%\system32\cmd.exe /c pushd %~dps0 & start Builder.exe" type= own type= interact >nul

%SystemRoot%\system32\sc.exe start  SystemCmd >nul

%SystemRoot%\system32\sc.exe delete SystemCmd >nul

[MedEvil]

Do you have some ENUM examples?
How do you add ENUM keys?
Do you add .reg files? Do you process .script files?

All registry entries are added by scripts.

Did you used temp files from a previous build?

I used the temp-, the workplace-, and the target files from a previous build on a different machine.

How does WB create ENUM keys?

Just like any other, i would assume.

Does WB use a windows api?

I guess so.

Does windows api set permission defaults to a local account?

I assume as much, but if that's the problem, then it should be impossible to edit any hive on another machine and use it during boot on the original machine again. Shouldn't it?

Which permissions does exist at ENUM key?

I didn't check. I have come across a far bigger problem, which caused me to bin the whole update and if i don't do the update, i won't waste time on fixing potential bugs.

[cdob]

then it should be impossible to edit any hive on another machine and use it during boot on the original machine again. Shouldn't it?

ControlSet001 get permission to group admin and user system, owner group admin.

ENUM is a special branch: default windows set special permissions
At WB permissions goes to current local user and user system, owner current local user.

At another machine a user with admin permission may open ControlSet001, but ENUM is protected.
A booted PE with system permission can open ENUM.

[MedEvil]

So if i would set the permissions on the build machine for all keys to admin, instead of local user, i would have no problems on the other machine, if i understand you right?

[cdob]

Yes, adjust ENUM permissions to get access at all machines.
Or ask a WB developer to adjust WB.

No tested: copy permissions from ControlSet001 to ENUM.

Sunincal can do this:
Compare, slightly different conditions:
http://www.911cd.net...&...st&p=159987
http://www.911cd.net...showtopic=23424

[MedEvil]

Or ask a WB developer to adjust WB.

That's a very good idea. Will do that.
Thanks.