- Help and Support - Windows 2000 Upgrade to XP
- Posted by Smurfman on November 22nd, 2005
I posted this in another area, checking to see if it was related to another
issue, and it was suggested that I report here.
Basically, I have been upgrading Windows 2000 Pro workstations to Windows XP
Pro, applying SP2, then Microsoft Update.
After all of this takes place, I can connect to the machine using Remote
Desktop, but when I attempt to use Help and Support, it behaves wierd. For
example, I enter the IP address, it shows me the user name, I click connect,
but then it wants me to log onto the machine, if I attempt to do this, it
then warns me that it will log off the user I am attempting to help.
---
The machine is part of a domain, and I use group policies. I have a domain
GPO that I have created for a set of Default Firewall Settings for SP2,
included in those settings are teh Help and Support programs as suggested by
another Microsoft Whitepaper.
I mention all of this, because this is a domain policy and I have lots of
OEM Windows XP Pro SP2 machines that this works like a charm for. THIS ISSUE
OR BAHAVIOUR IS ONLY HAPPENING ON THESE MACHINES THAT I AM UPGRADING TO
WINDOWS XP PRO SP2 from WINDOWS 2000 PRO.
The related issue that I have submitted on another forum is that when I
attempt to remotely connect to the Event Viewer or the Registry I get an
Access Denied. But I was told this had nothing to do with this issue and to
post here.
Thanks in advance for the help.
J
- Posted by Tom Che [MSFT] on November 23rd, 2005
Hi,
Thanks for posting here.
From your post, my understanding of this issue is: after upgrading Windows
2000 Pro workstations to Windows XP Pro, when you attempt to use Help and
Support to connect the XP Pro system, you will log off immediately after
logon. If this is not correct, please feel free to let me know.
I noticed that you are able to connect the upgraded XP Pro system via
Remote Desktop, but I am afraid I am not very sure what you meant about
"use Help and Support to connect the XP Pro system". Did you mean Remote
Assistance? Could you please let me know the detailed and entire process
step by step? If it is Remote Assistance, it is Solicited or not? For
more information about Remote Assistance, you may refer to the following KB
articles:
306496 How to configure or disable Solicited Remote Assistance in Windows XP
http://support.microsoft.com/default...b;EN-US;306496
300546 Overview of Remote Assistance in Windows XP
http://support.microsoft.com/default...b;EN-US;300546
The detailed information of this issue will help us find the root cause as
soon as possible, and I will follow your process to perform some tests on
my side to attempt to reproduce the weird issue.
Thanks for your time and efforts! I look forward to hearing from your soon!
Have a nice day!
Sincerely,
Tom Che
Microsoft Online Partner Support
Get Secure! - www.microsoft.com/security
================================================== ===
When responding to posts, please "Reply to Group" via your newsreader so
that others may learn and benefit from your issue.
================================================== ===
This posting is provided "AS IS" with no warranties, and confers no rights.
--------------------
>Thread-Topic: Help and Support - Windows 2000 Upgrade to XP
>thread-index: AcXvcT44C5ict8b7SDS70Xxe6zEAKw==
>X-WBNR-Posting-Host: 209.217.222.70
>From: "=?Utf-8?B?U211cmZtYW4=?=" <smurfman@news.postalias>
>Subject: Help and Support - Windows 2000 Upgrade to XP
>Date: Tue, 22 Nov 2005 06:30:10 -0800
>Lines: 31
>Message-ID: <E4682629-F829-4B60-85FE-74CB91538814@microsoft.com>
>MIME-Version: 1.0
>Content-Type: text/plain;
> charset="Utf-8"
>Content-Transfer-Encoding: 7bit
>X-Newsreader: Microsoft CDO for Windows 2000
>Content-Class: urn:content-classes:message
>Importance: normal
>Priority: normal
>X-MimeOLE: Produced By Microsoft MimeOLE V6.00.3790.0
>Newsgroups: microsoft.public.windowsxp.help_and_support
>NNTP-Posting-Host: TK2MSFTNGXA03.phx.gbl 10.40.2.250
>Path: TK2MSFTNGXA02.phx.gbl!TK2MSFTNGP08.phx.gbl!TK2MSFT NGXA03.phx.gbl
>Xref: TK2MSFTNGXA02.phx.gbl
microsoft.public.windowsxp.help_and_support:600899
>X-Tomcat-NG: microsoft.public.windowsxp.help_and_support
>
>I posted this in another area, checking to see if it was related to
another
>issue, and it was suggested that I report here.
>
>Basically, I have been upgrading Windows 2000 Pro workstations to Windows
XP
>Pro, applying SP2, then Microsoft Update.
>
>After all of this takes place, I can connect to the machine using Remote
>Desktop, but when I attempt to use Help and Support, it behaves wierd.
For
>example, I enter the IP address, it shows me the user name, I click
connect,
>but then it wants me to log onto the machine, if I attempt to do this, it
>then warns me that it will log off the user I am attempting to help.
>
>---
>The machine is part of a domain, and I use group policies. I have a
domain
>GPO that I have created for a set of Default Firewall Settings for SP2,
>included in those settings are teh Help and Support programs as suggested
by
>another Microsoft Whitepaper.
>
>I mention all of this, because this is a domain policy and I have lots of
>OEM Windows XP Pro SP2 machines that this works like a charm for. THIS
ISSUE
>OR BAHAVIOUR IS ONLY HAPPENING ON THESE MACHINES THAT I AM UPGRADING TO
>WINDOWS XP PRO SP2 from WINDOWS 2000 PRO.
>
>The related issue that I have submitted on another forum is that when I
>attempt to remotely connect to the Event Viewer or the Registry I get an
>Access Denied. But I was told this had nothing to do with this issue and
to
>post here.
>
>Thanks in advance for the help.
>
>J
>
- Posted by Smurfman on November 23rd, 2005
Scenerio 1 (THIS WORKS)
If I use Remote Desktop I can connect to the workstation
Scenerio 2 (THIS DOES NOT WORK)
Start --> Help and Support --> Tools Link --> "Offer Remote Assistance" on
left
Enter the IP of the machine
It returns that UserXYZ is logged in
Connect
Launches the Help and Support window, then attempts to log onto the
machine, the left pane reports waiting for response. The main pane, gives me
my domain logon box...if I attempt to connect then I get a message that I
will log the currently logged on user. Basically it is the behvaiour that
takes place if you were to remote desktop to a user who was already logged on.
---
I used the articles you mentioned and other hints to create a GPO that
applies to my machines to allow Remote Assistance and Remote Desktop. I know
it works since it is a domain policy and other XP machines that came with XP
OEM and had SP2 applied after work just fine.
On a related note, I submitted on another board an issue that after
performing the upgrade from W2K to XP and Applying SP2 that I can't connect
to Event Viewer or the Registry remotely...could the same services be linked
to remote assistance?
J
"Tom Che [MSFT]" wrote:
> Hi,
>
> Thanks for posting here.
>
> From your post, my understanding of this issue is: after upgrading Windows
> 2000 Pro workstations to Windows XP Pro, when you attempt to use Help and
> Support to connect the XP Pro system, you will log off immediately after
> logon. If this is not correct, please feel free to let me know.
>
> I noticed that you are able to connect the upgraded XP Pro system via
> Remote Desktop, but I am afraid I am not very sure what you meant about
> "use Help and Support to connect the XP Pro system". Did you mean Remote
> Assistance? Could you please let me know the detailed and entire process
> step by step? If it is Remote Assistance, it is Solicited or not? For
> more information about Remote Assistance, you may refer to the following KB
> articles:
>
> 306496 How to configure or disable Solicited Remote Assistance in Windows XP
> http://support.microsoft.com/default...b;EN-US;306496
>
> 300546 Overview of Remote Assistance in Windows XP
> http://support.microsoft.com/default...b;EN-US;300546
>
> The detailed information of this issue will help us find the root cause as
> soon as possible, and I will follow your process to perform some tests on
> my side to attempt to reproduce the weird issue.
>
> Thanks for your time and efforts! I look forward to hearing from your soon!
>
> Have a nice day!
>
> Sincerely,
> Tom Che
> Microsoft Online Partner Support
> Get Secure! - www.microsoft.com/security
>
> ================================================== ===
> When responding to posts, please "Reply to Group" via your newsreader so
> that others may learn and benefit from your issue.
> ================================================== ===
> This posting is provided "AS IS" with no warranties, and confers no rights.
>
> --------------------
> >Thread-Topic: Help and Support - Windows 2000 Upgrade to XP
> >thread-index: AcXvcT44C5ict8b7SDS70Xxe6zEAKw==
> >X-WBNR-Posting-Host: 209.217.222.70
> >From: "=?Utf-8?B?U211cmZtYW4=?=" <smurfman@news.postalias>
> >Subject: Help and Support - Windows 2000 Upgrade to XP
> >Date: Tue, 22 Nov 2005 06:30:10 -0800
> >Lines: 31
> >Message-ID: <E4682629-F829-4B60-85FE-74CB91538814@microsoft.com>
> >MIME-Version: 1.0
> >Content-Type: text/plain;
> > charset="Utf-8"
> >Content-Transfer-Encoding: 7bit
> >X-Newsreader: Microsoft CDO for Windows 2000
> >Content-Class: urn:content-classes:message
> >Importance: normal
> >Priority: normal
> >X-MimeOLE: Produced By Microsoft MimeOLE V6.00.3790.0
> >Newsgroups: microsoft.public.windowsxp.help_and_support
> >NNTP-Posting-Host: TK2MSFTNGXA03.phx.gbl 10.40.2.250
> >Path: TK2MSFTNGXA02.phx.gbl!TK2MSFTNGP08.phx.gbl!TK2MSFT NGXA03.phx.gbl
> >Xref: TK2MSFTNGXA02.phx.gbl
> microsoft.public.windowsxp.help_and_support:600899
> >X-Tomcat-NG: microsoft.public.windowsxp.help_and_support
> >
> >I posted this in another area, checking to see if it was related to
> another
> >issue, and it was suggested that I report here.
> >
> >Basically, I have been upgrading Windows 2000 Pro workstations to Windows
> XP
> >Pro, applying SP2, then Microsoft Update.
> >
> >After all of this takes place, I can connect to the machine using Remote
> >Desktop, but when I attempt to use Help and Support, it behaves wierd.
> For
> >example, I enter the IP address, it shows me the user name, I click
> connect,
> >but then it wants me to log onto the machine, if I attempt to do this, it
> >then warns me that it will log off the user I am attempting to help.
> >
> >---
> >The machine is part of a domain, and I use group policies. I have a
> domain
> >GPO that I have created for a set of Default Firewall Settings for SP2,
> >included in those settings are teh Help and Support programs as suggested
> by
> >another Microsoft Whitepaper.
> >
> >I mention all of this, because this is a domain policy and I have lots of
> >OEM Windows XP Pro SP2 machines that this works like a charm for. THIS
> ISSUE
> >OR BAHAVIOUR IS ONLY HAPPENING ON THESE MACHINES THAT I AM UPGRADING TO
> >WINDOWS XP PRO SP2 from WINDOWS 2000 PRO.
> >
> >The related issue that I have submitted on another forum is that when I
> >attempt to remotely connect to the Event Viewer or the Registry I get an
> >Access Denied. But I was told this had nothing to do with this issue and
> to
> >post here.
> >
> >Thanks in advance for the help.
> >
> >J
> >
>
>
- Posted by Tom Che [MSFT] on November 24th, 2005
Hi,
Thanks for your detailed reply. Now I totally understand the weird issue.
However, I am unable to reproduce the issue on my side so far. I recommend
that we may perform some tests as below to narrow down the root cause:
1. Please use the problematic upgraded XP SP2 machine to initiate a Remote
Assistance - as a Solicited Remote Assistance. When you use "Offer Remote
Assistance" to logon the remote computer is similar with a Solicited Remote
Assistance. So this test can help us make sure whether the entire Remote
Assistance system is corrupted in the problematic workstation. For more
information about how to Sending a Remote Assistance Invitation, you may
refer to the KB300546 as I mentioned in last reply.
2. When the left pan reports "Waiting for an answer", what is the user name
attempts to logon the remote computer and force the logged on user to log
off? Is it HelpAssistant?
3. Is there any difference between the upgraded XP SP2 computers and OEM XP
SP2? Such as hardware, software, especially security software including
anti-virus or firewall software.
4. Please also let me know what OS you use to Offer Remote Assistance? Is
it a XP SP2 or 2003 Server?
5. Please let me know the upgrade process. For example, it was Windows 2000
Professional SP4, and upgraded to XP with SP1, and then installed XP SP2
later.
Since this is a very weird issue and I cannot find any similar issues in
our internal database, so we may need to more time to troubleshoot this
issue, I appreciate your patience. In addition, so far I am not sure
whether this issue is related to the Remote Registry and EventLog issues,
however, please rest assured that my colleague Ken Zhao is working hard on
those issues.
I look forward to hearing from you soon.
Have a nice day!
Sincerely,
Tom Che
Microsoft Online Partner Support
Get Secure! - www.microsoft.com/security
================================================== ===
When responding to posts, please "Reply to Group" via your newsreader so
that others may learn and benefit from your issue.
================================================== ===
This posting is provided "AS IS" with no warranties, and confers no rights.
--------------------
>Thread-Topic: Help and Support - Windows 2000 Upgrade to XP
>thread-index: AcXwPDW+yVjyyEz+QAq3zlhh90z3Ow==
>X-WBNR-Posting-Host: 209.217.222.70
>From: "=?Utf-8?B?U211cmZtYW4=?=" <smurfman@news.postalias>
>References: <E4682629-F829-4B60-85FE-74CB91538814@microsoft.com>
<vT38Z8#7FHA.2612@TK2MSFTNGXA02.phx.gbl>
>Subject: RE: Help and Support - Windows 2000 Upgrade to XP
>Date: Wed, 23 Nov 2005 06:43:04 -0800
>Lines: 141
>Message-ID: <6C03BECB-AA57-4E6A-A80D-9B660A62477B@microsoft.com>
>MIME-Version: 1.0
>Content-Type: text/plain;
> charset="Utf-8"
>Content-Transfer-Encoding: 7bit
>X-Newsreader: Microsoft CDO for Windows 2000
>Content-Class: urn:content-classes:message
>Importance: normal
>Priority: normal
>X-MimeOLE: Produced By Microsoft MimeOLE V6.00.3790.0
>Newsgroups: microsoft.public.windowsxp.help_and_support
>NNTP-Posting-Host: TK2MSFTNGXA03.phx.gbl 10.40.2.250
>Path: TK2MSFTNGXA02.phx.gbl!TK2MSFTNGP08.phx.gbl!TK2MSFT NGXA03.phx.gbl
>Xref: TK2MSFTNGXA02.phx.gbl
microsoft.public.windowsxp.help_and_support:601324
>X-Tomcat-NG: microsoft.public.windowsxp.help_and_support
>
>Scenerio 1 (THIS WORKS)
> If I use Remote Desktop I can connect to the workstation
>
>Scenerio 2 (THIS DOES NOT WORK)
> Start --> Help and Support --> Tools Link --> "Offer Remote Assistance"
on
>left
> Enter the IP of the machine
> It returns that UserXYZ is logged in
> Connect
> Launches the Help and Support window, then attempts to log onto the
>machine, the left pane reports waiting for response. The main pane, gives
me
>my domain logon box...if I attempt to connect then I get a message that I
>will log the currently logged on user. Basically it is the behvaiour that
>takes place if you were to remote desktop to a user who was already logged
on.
>---
>I used the articles you mentioned and other hints to create a GPO that
>applies to my machines to allow Remote Assistance and Remote Desktop. I
know
>it works since it is a domain policy and other XP machines that came with
XP
>OEM and had SP2 applied after work just fine.
>
>On a related note, I submitted on another board an issue that after
>performing the upgrade from W2K to XP and Applying SP2 that I can't
connect
>to Event Viewer or the Registry remotely...could the same services be
linked
>to remote assistance?
>
>J
>
>
>
>
>"Tom Che [MSFT]" wrote:
>
>> Hi,
>>
>> Thanks for posting here.
>>
>> From your post, my understanding of this issue is: after upgrading
Windows
>> 2000 Pro workstations to Windows XP Pro, when you attempt to use Help
and
>> Support to connect the XP Pro system, you will log off immediately after
>> logon. If this is not correct, please feel free to let me know.
>>
>> I noticed that you are able to connect the upgraded XP Pro system via
>> Remote Desktop, but I am afraid I am not very sure what you meant about
>> "use Help and Support to connect the XP Pro system". Did you mean
Remote
>> Assistance? Could you please let me know the detailed and entire
process
>> step by step? If it is Remote Assistance, it is Solicited or not? For
>> more information about Remote Assistance, you may refer to the following
KB
>> articles:
>>
>> 306496 How to configure or disable Solicited Remote Assistance in
Windows XP
>> http://support.microsoft.com/default...b;EN-US;306496
>>
>> 300546 Overview of Remote Assistance in Windows XP
>> http://support.microsoft.com/default...b;EN-US;300546
>>
>> The detailed information of this issue will help us find the root cause
as
>> soon as possible, and I will follow your process to perform some tests
on
>> my side to attempt to reproduce the weird issue.
>>
>> Thanks for your time and efforts! I look forward to hearing from your
soon!
>>
>> Have a nice day!
>>
>> Sincerely,
>> Tom Che
>> Microsoft Online Partner Support
>> Get Secure! - www.microsoft.com/security
>>
>> ================================================== ===
>> When responding to posts, please "Reply to Group" via your newsreader so
>> that others may learn and benefit from your issue.
>> ================================================== ===
>> This posting is provided "AS IS" with no warranties, and confers no
rights.
>>
>> --------------------
>> >Thread-Topic: Help and Support - Windows 2000 Upgrade to XP
>> >thread-index: AcXvcT44C5ict8b7SDS70Xxe6zEAKw==
>> >X-WBNR-Posting-Host: 209.217.222.70
>> >From: "=?Utf-8?B?U211cmZtYW4=?=" <smurfman@news.postalias>
>> >Subject: Help and Support - Windows 2000 Upgrade to XP
>> >Date: Tue, 22 Nov 2005 06:30:10 -0800
>> >Lines: 31
>> >Message-ID: <E4682629-F829-4B60-85FE-74CB91538814@microsoft.com>
>> >MIME-Version: 1.0
>> >Content-Type: text/plain;
>> > charset="Utf-8"
>> >Content-Transfer-Encoding: 7bit
>> >X-Newsreader: Microsoft CDO for Windows 2000
>> >Content-Class: urn:content-classes:message
>> >Importance: normal
>> >Priority: normal
>> >X-MimeOLE: Produced By Microsoft MimeOLE V6.00.3790.0
>> >Newsgroups: microsoft.public.windowsxp.help_and_support
>> >NNTP-Posting-Host: TK2MSFTNGXA03.phx.gbl 10.40.2.250
>> >Path: TK2MSFTNGXA02.phx.gbl!TK2MSFTNGP08.phx.gbl!TK2MSFT NGXA03.phx.gbl
>> >Xref: TK2MSFTNGXA02.phx.gbl
>> microsoft.public.windowsxp.help_and_support:600899
>> >X-Tomcat-NG: microsoft.public.windowsxp.help_and_support
>> >
>> >I posted this in another area, checking to see if it was related to
>> another
>> >issue, and it was suggested that I report here.
>> >
>> >Basically, I have been upgrading Windows 2000 Pro workstations to
Windows
>> XP
>> >Pro, applying SP2, then Microsoft Update.
>> >
>> >After all of this takes place, I can connect to the machine using
Remote
>> >Desktop, but when I attempt to use Help and Support, it behaves wierd.
>> For
>> >example, I enter the IP address, it shows me the user name, I click
>> connect,
>> >but then it wants me to log onto the machine, if I attempt to do this,
it
>> >then warns me that it will log off the user I am attempting to help.
>> >
>> >---
>> >The machine is part of a domain, and I use group policies. I have a
>> domain
>> >GPO that I have created for a set of Default Firewall Settings for SP2,
>> >included in those settings are teh Help and Support programs as
suggested
>> by
>> >another Microsoft Whitepaper.
>> >
>> >I mention all of this, because this is a domain policy and I have lots
of
>> >OEM Windows XP Pro SP2 machines that this works like a charm for. THIS
>> ISSUE
>> >OR BAHAVIOUR IS ONLY HAPPENING ON THESE MACHINES THAT I AM UPGRADING TO
>> >WINDOWS XP PRO SP2 from WINDOWS 2000 PRO.
>> >
>> >The related issue that I have submitted on another forum is that when I
>> >attempt to remotely connect to the Event Viewer or the Registry I get
an
>> >Access Denied. But I was told this had nothing to do with this issue
and
>> to
>> >post here.
>> >
>> >Thanks in advance for the help.
>> >
>> >J
>> >
>>
>>
>
- Posted by Smurfman on November 28th, 2005
Hey Tom, thanks for the extra steps...I will post my responses with your
questions:
"1. Please use the problematic upgraded XP SP2 machine to initiate a Remote
Assistance - as a Solicited Remote Assistance. When you use "Offer Remote
Assistance" to logon the remote computer is similar with a Solicited Remote
Assistance. So this test can help us make sure whether the entire Remote
Assistance system is corrupted in the problematic workstation. For more
information about how to Sending a Remote Assistance Invitation, you may
refer to the KB300546 as I mentioned in last reply."
-ANSWER- I had to change my policy to allow users Solicite requests for
assistance. The settings are as follows
...... Permit remote control of this computer: Allow helpers to remotely
control the computer
...... Maximum ticket time (value): 10
...... Maximum ticket time (units): Minutes
...... Method for sending e-mail invitations: Mailto
After I log on to the machine and start remote assistance (Start -->
Programs --> Remote Assistance) I can click the link to Invite Someone, I get
a message about Remote Assistanc eand Firewall Settings related to
email...but then I get the next screen that shows me the two methods, one
being the Microsoft Messanger and the other being Outlook Express. At that
point, I can not continue since neither option is available for users.
Outlook Express is not configured and neither is the Messanger.
"2. When the left pan reports "Waiting for an answer", what is the user name
attempts to logon the remote computer and force the logged on user to log
off? Is it HelpAssistant?"
-ANSWER- Once the left pane reports "Waiting for an answer" nothing takes
place on the remote machine, but rather at the "helper" machine I get the
legal notification box as part of our domain policy "Do not attempt..." blah
blah blah...after clicking OK, I get a standard Windows Logon Dialog Box.
The box is blank and only reports the domain in which the machine is attached
to. From there if I enter my administrator account (who is defined in the
list of permitted users) in the GPO, the logon process begins to take place.
After a few seconds, another dialog box pops up, and tells me that USERxyz is
currently logged on, continuing will log them off and they will lose any
unsaved data (not word for word but I think you understand). So at that
point I have to click no.
"3. Is there any difference between the upgraded XP SP2 computers and OEM XP
SP2? Such as hardware, software, especially security software including
anti-virus or firewall software."
-ANSWER- All of the upgraded machines are HP machines, the OEM machines are
also HP, but just newer. The software is basically the core which is yours,
and a few other programs that both machines have. Functionally speaking the
machines all work the same, the software all runs as expected. As far as
Anti-Virus, all of my machines run the same eTrust software, and the Firewall
is yours. I enforce many specific settings for all machines related to
Windows Firewall. The GPResults show that the machines in question are in
fact accepting and applying the GPO, as I also saw with allowing the remote
assistance change in question #1.
"4. Please also let me know what OS you use to Offer Remote Assistance? Is
it a XP SP2 or 2003 Server?"
-ANSWER- The remote assistance is XP SP2 to XP SP2.
"5. Please let me know the upgrade process. For example, it was Windows 2000
Professional SP4, and upgraded to XP with SP1, and then installed XP SP2
later."
-ANSWER- All of the upgraded machines thus far have been Windows 2000
Machines with ALL of the latest patches including the latest SP Rollup
package, that was the starting point. My steps were to run the core XP
install with SP1, after the install, I installed SP2 from my TechNet Disks,
then I perform the Microsoft Update (not the windows update).
RELATED TO THIS:
> Since this is a very weird issue and I cannot find any similar issues in
> our internal database, so we may need to more time to troubleshoot this
> issue, I appreciate your patience. In addition, so far I am not sure
> whether this issue is related to the Remote Registry and EventLog issues,
> however, please rest assured that my colleague Ken Zhao is working hard on
> those issues.
Ken suggested I change the winreg key permissions to make sure the "LOCAL
SERVICE" was included with Read Permissions. When I did this it fixed my
other issue.
HOWEVER - I did submit to him based on KB 313222 "How to Reset Security
Settings Back to the Defaults" that if I performed the steps outlined there,
that the it would reset my registry setting back, removing the Local Service
from the list. I noted to him and I will mention to you that the
secsetup.inf file mentioned in the %windir%/repair folder based on the KB was
outdated, it was listed as May 2002, where as my OEM machines had a AUG 2004
file. I installed the Windows XP Security Guide and Templates msi file from
Microsoft, and noted that there was a Setup Security.inf file there. I
copied that file to my machine in question, ran the secedit command in the KB
and it ran thru the settings and fixed my Remote Registry and Remote Event
Viewer issue. My concern is that the upgrade is not replacing this file, and
is leaving my machines with invalid security setting for the registry.
NOTE TOO, that I tried the Remote Assistance AFTER running the secedit
command to fix the registry and files permissions, but nothing changed in the
way of our issue above.
Thanks Tom
I hope this info helps.
J
"Tom Che [MSFT]" wrote:
> Hi,
>
> Thanks for your detailed reply. Now I totally understand the weird issue.
>
> However, I am unable to reproduce the issue on my side so far. I recommend
> that we may perform some tests as below to narrow down the root cause:
>
> 1. Please use the problematic upgraded XP SP2 machine to initiate a Remote
> Assistance - as a Solicited Remote Assistance. When you use "Offer Remote
> Assistance" to logon the remote computer is similar with a Solicited Remote
> Assistance. So this test can help us make sure whether the entire Remote
> Assistance system is corrupted in the problematic workstation. For more
> information about how to Sending a Remote Assistance Invitation, you may
> refer to the KB300546 as I mentioned in last reply.
>
> 2. When the left pan reports "Waiting for an answer", what is the user name
> attempts to logon the remote computer and force the logged on user to log
> off? Is it HelpAssistant?
>
> 3. Is there any difference between the upgraded XP SP2 computers and OEM XP
> SP2? Such as hardware, software, especially security software including
> anti-virus or firewall software.
>
> 4. Please also let me know what OS you use to Offer Remote Assistance? Is
> it a XP SP2 or 2003 Server?
>
> 5. Please let me know the upgrade process. For example, it was Windows 2000
> Professional SP4, and upgraded to XP with SP1, and then installed XP SP2
> later.
>
> Since this is a very weird issue and I cannot find any similar issues in
> our internal database, so we may need to more time to troubleshoot this
> issue, I appreciate your patience. In addition, so far I am not sure
> whether this issue is related to the Remote Registry and EventLog issues,
> however, please rest assured that my colleague Ken Zhao is working hard on
> those issues.
>
> I look forward to hearing from you soon.
>
> Have a nice day!
>
> Sincerely,
> Tom Che
> Microsoft Online Partner Support
> Get Secure! - www.microsoft.com/security
>
> ================================================== ===
> When responding to posts, please "Reply to Group" via your newsreader so
> that others may learn and benefit from your issue.
> ================================================== ===
> This posting is provided "AS IS" with no warranties, and confers no rights.
>
>
> --------------------
> >Thread-Topic: Help and Support - Windows 2000 Upgrade to XP
> >thread-index: AcXwPDW+yVjyyEz+QAq3zlhh90z3Ow==
> >X-WBNR-Posting-Host: 209.217.222.70
> >From: "=?Utf-8?B?U211cmZtYW4=?=" <smurfman@news.postalias>
> >References: <E4682629-F829-4B60-85FE-74CB91538814@microsoft.com>
> <vT38Z8#7FHA.2612@TK2MSFTNGXA02.phx.gbl>
> >Subject: RE: Help and Support - Windows 2000 Upgrade to XP
> >Date: Wed, 23 Nov 2005 06:43:04 -0800
> >Lines: 141
> >Message-ID: <6C03BECB-AA57-4E6A-A80D-9B660A62477B@microsoft.com>
> >MIME-Version: 1.0
> >Content-Type: text/plain;
> > charset="Utf-8"
> >Content-Transfer-Encoding: 7bit
> >X-Newsreader: Microsoft CDO for Windows 2000
> >Content-Class: urn:content-classes:message
> >Importance: normal
> >Priority: normal
> >X-MimeOLE: Produced By Microsoft MimeOLE V6.00.3790.0
> >Newsgroups: microsoft.public.windowsxp.help_and_support
> >NNTP-Posting-Host: TK2MSFTNGXA03.phx.gbl 10.40.2.250
> >Path: TK2MSFTNGXA02.phx.gbl!TK2MSFTNGP08.phx.gbl!TK2MSFT NGXA03.phx.gbl
> >Xref: TK2MSFTNGXA02.phx.gbl
> microsoft.public.windowsxp.help_and_support:601324
> >X-Tomcat-NG: microsoft.public.windowsxp.help_and_support
> >
> >Scenerio 1 (THIS WORKS)
> > If I use Remote Desktop I can connect to the workstation
> >
> >Scenerio 2 (THIS DOES NOT WORK)
> > Start --> Help and Support --> Tools Link --> "Offer Remote Assistance"
> on
> >left
> > Enter the IP of the machine
> > It returns that UserXYZ is logged in
> > Connect
> > Launches the Help and Support window, then attempts to log onto the
> >machine, the left pane reports waiting for response. The main pane, gives
> me
> >my domain logon box...if I attempt to connect then I get a message that I
> >will log the currently logged on user. Basically it is the behvaiour that
> >takes place if you were to remote desktop to a user who was already logged
> on.
> >---
> >I used the articles you mentioned and other hints to create a GPO that
> >applies to my machines to allow Remote Assistance and Remote Desktop. I
> know
> >it works since it is a domain policy and other XP machines that came with
> XP
> >OEM and had SP2 applied after work just fine.
> >
> >On a related note, I submitted on another board an issue that after
> >performing the upgrade from W2K to XP and Applying SP2 that I can't
> connect
> >to Event Viewer or the Registry remotely...could the same services be
> linked
> >to remote assistance?
> >
> >J
> >
> >
> >
> >
> >"Tom Che [MSFT]" wrote:
> >
> >> Hi,
> >>
> >> Thanks for posting here.
> >>
> >> From your post, my understanding of this issue is: after upgrading
> Windows
> >> 2000 Pro workstations to Windows XP Pro, when you attempt to use Help
> and
> >> Support to connect the XP Pro system, you will log off immediately after
> >> logon. If this is not correct, please feel free to let me know.
> >>
> >> I noticed that you are able to connect the upgraded XP Pro system via
> >> Remote Desktop, but I am afraid I am not very sure what you meant about
> >> "use Help and Support to connect the XP Pro system". Did you mean
> Remote
> >> Assistance? Could you please let me know the detailed and entire
> process
> >> step by step? If it is Remote Assistance, it is Solicited or not? For
> >> more information about Remote Assistance, you may refer to the following
> KB
> >> articles:
> >>
> >> 306496 How to configure or disable Solicited Remote Assistance in
> Windows XP
> >> http://support.microsoft.com/default...b;EN-US;306496
> >>
> >> 300546 Overview of Remote Assistance in Windows XP
> >> http://support.microsoft.com/default...b;EN-US;300546
> >>
> >> The detailed information of this issue will help us find the root cause
> as
> >> soon as possible, and I will follow your process to perform some tests
> on
> >> my side to attempt to reproduce the weird issue.
> >>
> >> Thanks for your time and efforts! I look forward to hearing from your
> soon!
> >>
> >> Have a nice day!
> >>
> >> Sincerely,
> >> Tom Che
> >> Microsoft Online Partner Support
> >> Get Secure! - www.microsoft.com/security
> >>
> >> ================================================== ===
> >> When responding to posts, please "Reply to Group" via your newsreader so
> >> that others may learn and benefit from your issue.
> >> ================================================== ===
> >> This posting is provided "AS IS" with no warranties, and confers no
> rights.
> >>
> >> --------------------
> >> >Thread-Topic: Help and Support - Windows 2000 Upgrade to XP
> >> >thread-index: AcXvcT44C5ict8b7SDS70Xxe6zEAKw==
> >> >X-WBNR-Posting-Host: 209.217.222.70
> >> >From: "=?Utf-8?B?U211cmZtYW4=?=" <smurfman@news.postalias>
> >> >Subject: Help and Support - Windows 2000 Upgrade to XP
> >> >Date: Tue, 22 Nov 2005 06:30:10 -0800
> >> >Lines: 31
> >> >Message-ID: <E4682629-F829-4B60-85FE-74CB91538814@microsoft.com>
> >> >MIME-Version: 1.0
> >> >Content-Type: text/plain;
> >> > charset="Utf-8"
> >> >Content-Transfer-Encoding: 7bit
> >> >X-Newsreader: Microsoft CDO for Windows 2000
> >> >Content-Class: urn:content-classes:message
> >> >Importance: normal
> >> >Priority: normal
> >> >X-MimeOLE: Produced By Microsoft MimeOLE V6.00.3790.0
> >> >Newsgroups: microsoft.public.windowsxp.help_and_support
> >> >NNTP-Posting-Host: TK2MSFTNGXA03.phx.gbl 10.40.2.250
> >> >Path: TK2MSFTNGXA02.phx.gbl!TK2MSFTNGP08.phx.gbl!TK2MSFT NGXA03.phx.gbl
> >> >Xref: TK2MSFTNGXA02.phx.gbl
> >> microsoft.public.windowsxp.help_and_support:600899
> >> >X-Tomcat-NG: microsoft.public.windowsxp.help_and_support
> >> >
> >> >I posted this in another area, checking to see if it was related to
> >> another
> >> >issue, and it was suggested that I report here.
> >> >
> >> >Basically, I have been upgrading Windows 2000 Pro workstations to
> Windows
> >> XP
> >> >Pro, applying SP2, then Microsoft Update.
> >> >
> >> >After all of this takes place, I can connect to the machine using
> Remote
> >> >Desktop, but when I attempt to use Help and Support, it behaves wierd.
> >> For
> >> >example, I enter the IP address, it shows me the user name, I click
> >> connect,
> >> >but then it wants me to log onto the machine, if I attempt to do this,
> it
> >> >then warns me that it will log off the user I am attempting to help.
> >> >
> >> >---
> >> >The machine is part of a domain, and I use group policies. I have a
> >> domain
> >> >GPO that I have created for a set of Default Firewall Settings for SP2,
> >> >included in those settings are teh Help and Support programs as
> suggested
> >> by
> >> >another Microsoft Whitepaper.
> >> >
> >> >I mention all of this, because this is a domain policy and I have lots
> of
> >> >OEM Windows XP Pro SP2 machines that this works like a charm for. THIS
> >> ISSUE
> >> >OR BAHAVIOUR IS ONLY HAPPENING ON THESE MACHINES THAT I AM UPGRADING TO
> >> >WINDOWS XP PRO SP2 from WINDOWS 2000 PRO.
> >> >
> >> >The related issue that I have submitted on another forum is that when I
> >> >attempt to remotely connect to the Event Viewer or the Registry I get
> an
> >> >Access Denied. But I was told this had nothing to do with this issue
> and
> >> to
> >> >post here.
> >> >
> >> >Thanks in advance for the help.
> >> >
> >> >J
> >> >
> >>
> >>
> >
>
>
- Posted by Tom Che [MSFT] on November 30th, 2005
Hi,
Thanks for your reply!
I am glad to hear that the Remote Registry and EventLog issues have been
resolved.
I understand that you are unable to initiate a Solicited Remote Assistance
via your new policy. However, I don't recommend that you use Group Policy
to set the related settings as you mentioned.
Actually, you can find the following information in the Explain tab of the
Solicited Remote Assistance policy:
"If the status is set to Not Configured, users can enable or disable and
configure Remote Assistance themselves in System properties in Control
Panel. If the status is set to Not Configured, the default maximum time a
Remote Assistance invitation can stay open is determined by the Control
Panel setting."
Therefore, if you don't configure this policy, you still can enable
Solicited Remote Assistance via the Remote tab of System Properties control
panel. I still recommend you may refer to the following KB article to test
the issue with Solicited Remote Assistance:
300546 Overview of Remote Assistance in Windows XP
http://support.microsoft.com/default...b;EN-US;300546
Furthermore, I am researching your other detailed information and will get
back to you as soon as possible. I appreciate your patience.
Have a nice day!
Sincerely,
Tom Che
Microsoft Online Partner Support
Get Secure! - www.microsoft.com/security
================================================== ===
When responding to posts, please "Reply to Group" via your newsreader so
that others may learn and benefit from your issue.
================================================== ===
This posting is provided "AS IS" with no warranties, and confers no rights.
--------------------
>Thread-Topic: Help and Support - Windows 2000 Upgrade to XP
>thread-index: AcX0WherPsVexlUmRvODPmo/2NwXnQ==
>X-WBNR-Posting-Host: 209.217.222.70
>From: "=?Utf-8?B?U211cmZtYW4=?=" <smurfman@news.postalias>
>References: <E4682629-F829-4B60-85FE-74CB91538814@microsoft.com>
<vT38Z8#7FHA.2612@TK2MSFTNGXA02.phx.gbl>
<6C03BECB-AA57-4E6A-A80D-9B660A62477B@microsoft.com>
<tMK0LKP8FHA.2852@TK2MSFTNGXA02.phx.gbl>
>Subject: RE: Help and Support - Windows 2000 Upgrade to XP
>Date: Mon, 28 Nov 2005 12:27:03 -0800
>Lines: 360
>Message-ID: <DD95E70B-3D24-450A-BC40-129161D3C139@microsoft.com>
>MIME-Version: 1.0
>Content-Type: text/plain;
> charset="Utf-8"
>Content-Transfer-Encoding: 7bit
>X-Newsreader: Microsoft CDO for Windows 2000
>Content-Class: urn:content-classes:message
>Importance: normal
>Priority: normal
>X-MimeOLE: Produced By Microsoft MimeOLE V6.00.3790.0
>Newsgroups: microsoft.public.windowsxp.help_and_support
>NNTP-Posting-Host: TK2MSFTNGXA03.phx.gbl 10.40.2.250
>Path: TK2MSFTNGXA02.phx.gbl!TK2MSFTNGP08.phx.gbl!TK2MSFT NGXA03.phx.gbl
>Xref: TK2MSFTNGXA02.phx.gbl
microsoft.public.windowsxp.help_and_support:602854
>X-Tomcat-NG: microsoft.public.windowsxp.help_and_support
>
>Hey Tom, thanks for the extra steps...I will post my responses with your
>questions:
>
>"1. Please use the problematic upgraded XP SP2 machine to initiate a
Remote
>Assistance - as a Solicited Remote Assistance. When you use "Offer Remote
>Assistance" to logon the remote computer is similar with a Solicited
Remote
>Assistance. So this test can help us make sure whether the entire Remote
>Assistance system is corrupted in the problematic workstation. For more
>information about how to Sending a Remote Assistance Invitation, you may
>refer to the KB300546 as I mentioned in last reply."
>
>-ANSWER- I had to change my policy to allow users Solicite requests for
>assistance. The settings are as follows
>..... Permit remote control of this computer: Allow helpers to remotely
>control the computer
>..... Maximum ticket time (value): 10
>..... Maximum ticket time (units): Minutes
>..... Method for sending e-mail invitations: Mailto
>
>After I log on to the machine and start remote assistance (Start -->
>Programs --> Remote Assistance) I can click the link to Invite Someone, I
get
>a message about Remote Assistanc eand Firewall Settings related to
>email...but then I get the next screen that shows me the two methods, one
>being the Microsoft Messanger and the other being Outlook Express. At
that
>point, I can not continue since neither option is available for users.
>Outlook Express is not configured and neither is the Messanger.
>
>"2. When the left pan reports "Waiting for an answer", what is the user
name
>attempts to logon the remote computer and force the logged on user to log
>off? Is it HelpAssistant?"
>
>-ANSWER- Once the left pane reports "Waiting for an answer" nothing takes
>place on the remote machine, but rather at the "helper" machine I get the
>legal notification box as part of our domain policy "Do not attempt..."
blah
>blah blah...after clicking OK, I get a standard Windows Logon Dialog Box.
>The box is blank and only reports the domain in which the machine is
attached
>to. From there if I enter my administrator account (who is defined in the
>list of permitted users) in the GPO, the logon process begins to take
place.
>After a few seconds, another dialog box pops up, and tells me that USERxyz
is
>currently logged on, continuing will log them off and they will lose any
>unsaved data (not word for word but I think you understand). So at that
>point I have to click no.
>
>"3. Is there any difference between the upgraded XP SP2 computers and OEM
XP
>SP2? Such as hardware, software, especially security software including
>anti-virus or firewall software."
>
>-ANSWER- All of the upgraded machines are HP machines, the OEM machines
are
>also HP, but just newer. The software is basically the core which is
yours,
>and a few other programs that both machines have. Functionally speaking
the
>machines all work the same, the software all runs as expected. As far as
>Anti-Virus, all of my machines run the same eTrust software, and the
Firewall
>is yours. I enforce many specific settings for all machines related to
>Windows Firewall. The GPResults show that the machines in question are in
>fact accepting and applying the GPO, as I also saw with allowing the
remote
>assistance change in question #1.
>
>"4. Please also let me know what OS you use to Offer Remote Assistance?
Is
>it a XP SP2 or 2003 Server?"
>
>-ANSWER- The remote assistance is XP SP2 to XP SP2.
>
>"5. Please let me know the upgrade process. For example, it was Windows
2000
>Professional SP4, and upgraded to XP with SP1, and then installed XP SP2
>later."
>
>-ANSWER- All of the upgraded machines thus far have been Windows 2000
>Machines with ALL of the latest patches including the latest SP Rollup
>package, that was the starting point. My steps were to run the core XP
>install with SP1, after the install, I installed SP2 from my TechNet
Disks,
>then I perform the Microsoft Update (not the windows update).
>
>
>
>RELATED TO THIS:
>> Since this is a very weird issue and I cannot find any similar issues in
>> our internal database, so we may need to more time to troubleshoot this
>> issue, I appreciate your patience. In addition, so far I am not sure
>> whether this issue is related to the Remote Registry and EventLog
issues,
>> however, please rest assured that my colleague Ken Zhao is working hard
on
>> those issues.
>
>Ken suggested I change the winreg key permissions to make sure the "LOCAL
>SERVICE" was included with Read Permissions. When I did this it fixed my
>other issue.
>
>HOWEVER - I did submit to him based on KB 313222 "How to Reset Security
>Settings Back to the Defaults" that if I performed the steps outlined
there,
>that the it would reset my registry setting back, removing the Local
Service
>from the list. I noted to him and I will mention to you that the
>secsetup.inf file mentioned in the %windir%/repair folder based on the KB
was
>outdated, it was listed as May 2002, where as my OEM machines had a AUG
2004
>file. I installed the Windows XP Security Guide and Templates msi file
from
>Microsoft, and noted that there was a Setup Security.inf file there. I
>copied that file to my machine in question, ran the secedit command in the
KB
>and it ran thru the settings and fixed my Remote Registry and Remote Event
>Viewer issue. My concern is that the upgrade is not replacing this file,
and
>is leaving my machines with invalid security setting for the registry.
>
>NOTE TOO, that I tried the Remote Assistance AFTER running the secedit
>command to fix the registry and files permissions, but nothing changed in
the
>way of our issue above.
>
>Thanks Tom
>
>I hope this info helps.
>
>J
>
>
>"Tom Che [MSFT]" wrote:
>
>> Hi,
>>
>> Thanks for your detailed reply. Now I totally understand the weird
issue.
>>
>> However, I am unable to reproduce the issue on my side so far. I
recommend
>> that we may perform some tests as below to narrow down the root cause:
>>
>> 1. Please use the problematic upgraded XP SP2 machine to initiate a
Remote
>> Assistance - as a Solicited Remote Assistance. When you use "Offer
Remote
>> Assistance" to logon the remote computer is similar with a Solicited
Remote
>> Assistance. So this test can help us make sure whether the entire
Remote
>> Assistance system is corrupted in the problematic workstation. For more
>> information about how to Sending a Remote Assistance Invitation, you may
>> refer to the KB300546 as I mentioned in last reply.
>>
>> 2. When the left pan reports "Waiting for an answer", what is the user
name
>> attempts to logon the remote computer and force the logged on user to
log
>> off? Is it HelpAssistant?
>>
>> 3. Is there any difference between the upgraded XP SP2 computers and OEM
XP
>> SP2? Such as hardware, software, especially security software including
>> anti-virus or firewall software.
>>
>> 4. Please also let me know what OS you use to Offer Remote Assistance?
Is
>> it a XP SP2 or 2003 Server?
>>
>> 5. Please let me know the upgrade process. For example, it was Windows
2000
>> Professional SP4, and upgraded to XP with SP1, and then installed XP SP2
>> later.
>>
>> Since this is a very weird issue and I cannot find any similar issues in
>> our internal database, so we may need to more time to troubleshoot this
>> issue, I appreciate your patience. In addition, so far I am not sure
>> whether this issue is related to the Remote Registry and EventLog
issues,
>> however, please rest assured that my colleague Ken Zhao is working hard
on
>> those issues.
>>
>> I look forward to hearing from you soon.
>>
>> Have a nice day!
>>
>> Sincerely,
>> Tom Che
>> Microsoft Online Partner Support
>> Get Secure! - www.microsoft.com/security
>>
>> ================================================== ===
>> When responding to posts, please "Reply to Group" via your newsreader so
>> that others may learn and benefit from your issue.
>> ================================================== ===
>> This posting is provided "AS IS" with no warranties, and confers no
rights.
>>
>>
>> --------------------
>> >Thread-Topic: Help and Support - Windows 2000 Upgrade to XP
>> >thread-index: AcXwPDW+yVjyyEz+QAq3zlhh90z3Ow==
>> >X-WBNR-Posting-Host: 209.217.222.70
>> >From: "=?Utf-8?B?U211cmZtYW4=?=" <smurfman@news.postalias>
>> >References: <E4682629-F829-4B60-85FE-74CB91538814@microsoft.com>
>> <vT38Z8#7FHA.2612@TK2MSFTNGXA02.phx.gbl>
>> >Subject: RE: Help and Support - Windows 2000 Upgrade to XP
>> >Date: Wed, 23 Nov 2005 06:43:04 -0800
>> >Lines: 141
>> >Message-ID: <6C03BECB-AA57-4E6A-A80D-9B660A62477B@microsoft.com>
>> >MIME-Version: 1.0
>> >Content-Type: text/plain;
>> > charset="Utf-8"
>> >Content-Transfer-Encoding: 7bit
>> >X-Newsreader: Microsoft CDO for Windows 2000
>> >Content-Class: urn:content-classes:message
>> >Importance: normal
>> >Priority: normal
>> >X-MimeOLE: Produced By Microsoft MimeOLE V6.00.3790.0
>> >Newsgroups: microsoft.public.windowsxp.help_and_support
>> >NNTP-Posting-Host: TK2MSFTNGXA03.phx.gbl 10.40.2.250
>> >Path: TK2MSFTNGXA02.phx.gbl!TK2MSFTNGP08.phx.gbl!TK2MSFT NGXA03.phx.gbl
>> >Xref: TK2MSFTNGXA02.phx.gbl
>> microsoft.public.windowsxp.help_and_support:601324
>> >X-Tomcat-NG: microsoft.public.windowsxp.help_and_support
>> >
>> >Scenerio 1 (THIS WORKS)
>> > If I use Remote Desktop I can connect to the workstation
>> >
>> >Scenerio 2 (THIS DOES NOT WORK)
>> > Start --> Help and Support --> Tools Link --> "Offer Remote
Assistance"
>> on
>> >left
>> > Enter the IP of the machine
>> > It returns that UserXYZ is logged in
>> > Connect
>> > Launches the Help and Support window, then attempts to log onto the
>> >machine, the left pane reports waiting for response. The main pane,
gives
>> me
>> >my domain logon box...if I attempt to connect then I get a message that
I
>> >will log the currently logged on user. Basically it is the behvaiour
that
>> >takes place if you were to remote desktop to a user who was already
logged
>> on.
>> >---
>> >I used the articles you mentioned and other hints to create a GPO that
>> >applies to my machines to allow Remote Assistance and Remote Desktop.
I
>> know
>> >it works since it is a domain policy and other XP machines that came
with
>> XP
>> >OEM and had SP2 applied after work just fine.
>> >
>> >On a related note, I submitted on another board an issue that after
>> >performing the upgrade from W2K to XP and Applying SP2 that I can't
>> connect
>> >to Event Viewer or the Registry remotely...could the same services be
>> linked
>> >to remote assistance?
>> >
>> >J
>> >
>> >
>> >
>> >
>> >"Tom Che [MSFT]" wrote:
>> >
>> >> Hi,
>> >>
>> >> Thanks for posting here.
>> >>
>> >> From your post, my understanding of this issue is: after upgrading
>> Windows
>> >> 2000 Pro workstations to Windows XP Pro, when you attempt to use Help
>> and
>> >> Support to connect the XP Pro system, you will log off immediately
after
>> >> logon. If this is not correct, please feel free to let me know.
>> >>
>> >> I noticed that you are able to connect the upgraded XP Pro system via
>> >> Remote Desktop, but I am afraid I am not very sure what you meant
about
>> >> "use Help and Support to connect the XP Pro system". Did you mean
>> Remote
>> >> Assistance? Could you please let me know the detailed and entire
>> process
>> >> step by step? If it is Remote Assistance, it is Solicited or not?
For
>> >> more information about Remote Assistance, you may refer to the
following
>> KB
>> >> articles:
>> >>
>> >> 306496 How to configure or disable Solicited Remote Assistance in
>> Windows XP
>> >> http://support.microsoft.com/default...b;EN-US;306496
>> >>
>> >> 300546 Overview of Remote Assistance in Windows XP
>> >> http://support.microsoft.com/default...b;EN-US;300546
>> >>
>> >> The detailed information of this issue will help us find the root
cause
>> as
>> >> soon as possible, and I will follow your process to perform some
tests
>> on
>> >> my side to attempt to reproduce the weird issue.
>> >>
>> >> Thanks for your time and efforts! I look forward to hearing from
your
>> soon!
>> >>
>> >> Have a nice day!
>> >>
>> >> Sincerely,
>> >> Tom Che
>> >> Microsoft Online Partner Support
>> >> Get Secure! - www.microsoft.com/security
>> >>
>> >> ================================================== ===
>> >> When responding to posts, please "Reply to Group" via your newsreader
so
>> >> that others may learn and benefit from your issue.
>> >> ================================================== ===
>> >> This posting is provided "AS IS" with no warranties, and confers no
>> rights.
>> >>
>> >> --------------------
>> >> >Thread-Topic: Help and Support - Windows 2000 Upgrade to XP
>> >> >thread-index: AcXvcT44C5ict8b7SDS70Xxe6zEAKw==
>> >> >X-WBNR-Posting-Host: 209.217.222.70
>> >> >From: "=?Utf-8?B?U211cmZtYW4=?=" <smurfman@news.postalias>
>> >> >Subject: Help and Support - Windows 2000 Upgrade to XP
>> >> >Date: Tue, 22 Nov 2005 06:30:10 -0800
>> >> >Lines: 31
>> >> >Message-ID: <E4682629-F829-4B60-85FE-74CB91538814@microsoft.com>
>> >> >MIME-Version: 1.0
>> >> >Content-Type: text/plain;
>> >> > charset="Utf-8"
>> >> >Content-Transfer-Encoding: 7bit
>> >> >X-Newsreader: Microsoft CDO for Windows 2000
>> >> >Content-Class: urn:content-classes:message
>> >> >Importance: normal
>> >> >Priority: normal
>> >> >X-MimeOLE: Produced By Microsoft MimeOLE V6.00.3790.0
>> >> >Newsgroups: microsoft.public.windowsxp.help_and_support
>> >> >NNTP-Posting-Host: TK2MSFTNGXA03.phx.gbl 10.40.2.250
>> >> >Path:
TK2MSFTNGXA02.phx.gbl!TK2MSFTNGP08.phx.gbl!TK2MSFT NGXA03.phx.gbl
>> >> >Xref: TK2MSFTNGXA02.phx.gbl
>> >> microsoft.public.windowsxp.help_and_support:600899
>> >> >X-Tomcat-NG: microsoft.public.windowsxp.help_and_support
>> >> >
>> >> >I posted this in another area, checking to see if it was related to
>> >> another
>> >> >issue, and it was suggested that I report here.
>> >> >
>> >> >Basically, I have been upgrading Windows 2000 Pro workstations to
>> Windows
>> >> XP
>> >> >Pro, applying SP2, then Microsoft Update.
>> >> >
>> >> >After all of this takes place, I can connect to the machine using
>> Remote
>> >> >Desktop, but when I attempt to use Help and Support, it behaves
wierd.
>> >> For
>> >> >example, I enter the IP address, it shows me the user name, I click
>> >> connect,
>> >> >but then it wants me to log onto the machine, if I attempt to do
this,
>> it
>> >> >then warns me that it will log off the user I am attempting to help.
>> >> >
>> >> >---
>> >> >The machine is part of a domain, and I use group policies. I have a
>> >> domain
>> >> >GPO that I have created for a set of Default Firewall Settings for
SP2,
>> >> >included in those settings are teh Help and Support programs as
>> suggested
>> >> by
>> >> >another Microsoft Whitepaper.
>> >> >
>> >> >I mention all of this, because this is a domain policy and I have
lots
>> of
>> >> >OEM Windows XP Pro SP2 machines that this works like a charm for.
THIS
>> >> ISSUE
>> >> >OR BAHAVIOUR IS ONLY HAPPENING ON THESE MACHINES THAT I AM UPGRADING
TO
>> >> >WINDOWS XP PRO SP2 from WINDOWS 2000 PRO.
>> >> >
>> >> >The related issue that I have submitted on another forum is that
when I
>> >> >attempt to remotely connect to the Event Viewer or the Registry I
get
>> an
>> >> >Access Denied. But I was told this had nothing to do with this
issue
>> and
>> >> to
>> >> >post here.
>> >> >
>> >> >Thanks in advance for the help.
>> >> >
>> >> >J
>> >> >
>> >>
>> >>
>> >
>>
>>
>
- Posted by Smurfman on December 1st, 2005
Tom, thanks for getting back to me. First off allowing users to solicite
help is not part of our "Policy - as in our Paper Policy not Electronic".
Also I DID NOT state that it did not work, only that I was able to get the
point of where the invitation would be sent via email or messenger...this was
the point in which I stopped. Users DO NOT have access to email via Outlook
Express, and Messange is not configured either.
The GPO works on all of my other machines, and is not the focus of the
problem. The GPO Results shows that in fact the settings are being applied
for a particular user logged onto that machine. I hope we can get past this.
The focus should be that an upgraded Windows 2000 Pro Machine is not getting
some part of the Remote Assistance libraries or something updated. I suspect
this since already I have discoved that the secsetup.inf file is also not
being upgraded/replaced for an XP Upgrade, and when the upgrade process looks
to reset the permissions on the Registry and Files it is simply grabbing the
old settings from Windows 2000. I was able to prove and fix this.
I suspect that there is still something else that is not getting upgraded
properly during this process.
J
"Tom Che [MSFT]" wrote:
> Hi,
>
> Thanks for your reply!
>
> I am glad to hear that the Remote Registry and EventLog issues have been
> resolved.
>
> I understand that you are unable to initiate a Solicited Remote Assistance
> via your new policy. However, I don't recommend that you use Group Policy
> to set the related settings as you mentioned.
>
> Actually, you can find the following information in the Explain tab of the
> Solicited Remote Assistance policy:
>
> "If the status is set to Not Configured, users can enable or disable and
> configure Remote Assistance themselves in System properties in Control
> Panel. If the status is set to Not Configured, the default maximum time a
> Remote Assistance invitation can stay open is determined by the Control
> Panel setting."
>
> Therefore, if you don't configure this policy, you still can enable
> Solicited Remote Assistance via the Remote tab of System Properties control
> panel. I still recommend you may refer to the following KB article to test
> the issue with Solicited Remote Assistance:
>
> 300546 Overview of Remote Assistance in Windows XP
> http://support.microsoft.com/default...b;EN-US;300546
>
> Furthermore, I am researching your other detailed information and will get
> back to you as soon as possible. I appreciate your patience.
>
> Have a nice day!
>
> Sincerely,
> Tom Che
> Microsoft Online Partner Support
> Get Secure! - www.microsoft.com/security
>
> ================================================== ===
> When responding to posts, please "Reply to Group" via your newsreader so
> that others may learn and benefit from your issue.
> ================================================== ===
> This posting is provided "AS IS" with no warranties, and confers no rights.
>
> --------------------
> >Thread-Topic: Help and Support - Windows 2000 Upgrade to XP
> >thread-index: AcX0WherPsVexlUmRvODPmo/2NwXnQ==
> >X-WBNR-Posting-Host: 209.217.222.70
> >From: "=?Utf-8?B?U211cmZtYW4=?=" <smurfman@news.postalias>
> >References: <E4682629-F829-4B60-85FE-74CB91538814@microsoft.com>
> <vT38Z8#7FHA.2612@TK2MSFTNGXA02.phx.gbl>
> <6C03BECB-AA57-4E6A-A80D-9B660A62477B@microsoft.com>
> <tMK0LKP8FHA.2852@TK2MSFTNGXA02.phx.gbl>
> >Subject: RE: Help and Support - Windows 2000 Upgrade to XP
> >Date: Mon, 28 Nov 2005 12:27:03 -0800
> >Lines: 360
> >Message-ID: <DD95E70B-3D24-450A-BC40-129161D3C139@microsoft.com>
> >MIME-Version: 1.0
> >Content-Type: text/plain;
> > charset="Utf-8"
> >Content-Transfer-Encoding: 7bit
> >X-Newsreader: Microsoft CDO for Windows 2000
> >Content-Class: urn:content-classes:message
> >Importance: normal
> >Priority: normal
> >X-MimeOLE: Produced By Microsoft MimeOLE V6.00.3790.0
> >Newsgroups: microsoft.public.windowsxp.help_and_support
> >NNTP-Posting-Host: TK2MSFTNGXA03.phx.gbl 10.40.2.250
> >Path: TK2MSFTNGXA02.phx.gbl!TK2MSFTNGP08.phx.gbl!TK2MSFT NGXA03.phx.gbl
> >Xref: TK2MSFTNGXA02.phx.gbl
> microsoft.public.windowsxp.help_and_support:602854
> >X-Tomcat-NG: microsoft.public.windowsxp.help_and_support
> >
> >Hey Tom, thanks for the extra steps...I will post my responses with your
> >questions:
> >
> >"1. Please use the problematic upgraded XP SP2 machine to initiate a
> Remote
> >Assistance - as a Solicited Remote Assistance. When you use "Offer Remote
> >Assistance" to logon the remote computer is similar with a Solicited
> Remote
> >Assistance. So this test can help us make sure whether the entire Remote
> >Assistance system is corrupted in the problematic workstation. For more
> >information about how to Sending a Remote Assistance Invitation, you may
> >refer to the KB300546 as I mentioned in last reply."
> >
> >-ANSWER- I had to change my policy to allow users Solicite requests for
> >assistance. The settings are as follows
> >..... Permit remote control of this computer: Allow helpers to remotely
> >control the computer
> >..... Maximum ticket time (value): 10
> >..... Maximum ticket time (units): Minutes
> >..... Method for sending e-mail invitations: Mailto
> >
> >After I log on to the machine and start remote assistance (Start -->
> >Programs --> Remote Assistance) I can click the link to Invite Someone, I
> get
> >a message about Remote Assistanc eand Firewall Settings related to
> >email...but then I get the next screen that shows me the two methods, one
> >being the Microsoft Messanger and the other being Outlook Express. At
> that
> >point, I can not continue since neither option is available for users.
> >Outlook Express is not configured and neither is the Messanger.
> >
> >"2. When the left pan reports "Waiting for an answer", what is the user
> name
> >attempts to logon the remote computer and force the logged on user to log
> >off? Is it HelpAssistant?"
> >
> >-ANSWER- Once the left pane reports "Waiting for an answer" nothing takes
> >place on the remote machine, but rather at the "helper" machine I get the
> >legal notification box as part of our domain policy "Do not attempt..."
> blah
> >blah blah...after clicking OK, I get a standard Windows Logon Dialog Box.
> >The box is blank and only reports the domain in which the machine is
> attached
> >to. From there if I enter my administrator account (who is defined in the
> >list of permitted users) in the GPO, the logon process begins to take
> place.
> >After a few seconds, another dialog box pops up, and tells me that USERxyz
> is
> >currently logged on, continuing will log them off and they will lose any
> >unsaved data (not word for word but I think you understand). So at that
> >point I have to click no.
> >
> >"3. Is there any difference between the upgraded XP SP2 computers and OEM
> XP
> >SP2? Such as hardware, software, especially security software including
> >anti-virus or firewall software."
> >
> >-ANSWER- All of the upgraded machines are HP machines, the OEM machines
> are
> >also HP, but just newer. The software is basically the core which is
> yours,
> >and a few other programs that both machines have. Functionally speaking
> the
> >machines all work the same, the software all runs as expected. As far as
> >Anti-Virus, all of my machines run the same eTrust software, and the
> Firewall
> >is yours. I enforce many specific settings for all machines related to
> >Windows Firewall. The GPResults show that the machines in question are in
> >fact accepting and applying the GPO, as I also saw with allowing the
> remote
> >assistance change in question #1.
> >
> >"4. Please also let me know what OS you use to Offer Remote Assistance?
> Is
> >it a XP SP2 or 2003 Server?"
> >
> >-ANSWER- The remote assistance is XP SP2 to XP SP2.
> >
> >"5. Please let me know the upgrade process. For example, it was Windows
> 2000
> >Professional SP4, and upgraded to XP with SP1, and then installed XP SP2
> >later."
> >
> >-ANSWER- All of the upgraded machines thus far have been Windows 2000
> >Machines with ALL of the latest patches including the latest SP Rollup
> >package, that was the starting point. My steps were to run the core XP
> >install with SP1, after the install, I installed SP2 from my TechNet
> Disks,
> >then I perform the Microsoft Update (not the windows update).
> >
> >
> >
> >RELATED TO THIS:
> >> Since this is a very weird issue and I cannot find any similar issues in
> >> our internal database, so we may need to more time to troubleshoot this
> >> issue, I appreciate your patience. In addition, so far I am not sure
> >> whether this issue is related to the Remote Registry and EventLog
> issues,
> >> however, please rest assured that my colleague Ken Zhao is working hard
> on
> >> those issues.
> >
> >Ken suggested I change the winreg key permissions to make sure the "LOCAL
> >SERVICE" was included with Read Permissions. When I did this it fixed my
> >other issue.
> >
> >HOWEVER - I did submit to him based on KB 313222 "How to Reset Security
> >Settings Back to the Defaults" that if I performed the steps outlined
> there,
> >that the it would reset my registry setting back, removing the Local
> Service
> >from the list. I noted to him and I will mention to you that the
> >secsetup.inf file mentioned in the %windir%/repair folder based on the KB
> was
> >outdated, it was listed as May 2002, where as my OEM machines had a AUG
> 2004
> >file. I installed the Windows XP Security Guide and Templates msi file
> from
> >Microsoft, and noted that there was a Setup Security.inf file there. I
> >copied that file to my machine in question, ran the secedit command in the
> KB
> >and it ran thru the settings and fixed my Remote Registry and Remote Event
> >Viewer issue. My concern is that the upgrade is not replacing this file,
> and
> >is leaving my machines with invalid security setting for the registry.
> >
> >NOTE TOO, that I tried the Remote Assistance AFTER running the secedit
> >command to fix the registry and files permissions, but nothing changed in
> the
> >way of our issue above.
> >
> >Thanks Tom
> >
> >I hope this info helps.
> >
> >J
> >
> >
> >"Tom Che [MSFT]" wrote:
> >
> >> Hi,
> >>
> >> Thanks for your detailed reply. Now I totally understand the weird
> issue.
> >>
> >> However, I am unable to reproduce the issue on my side so far. I
> recommend
> >> that we may perform some tests as below to narrow down the root cause:
> >>
> >> 1. Please use the problematic upgraded XP SP2 machine to initiate a
> Remote
> >> Assistance - as a Solicited Remote Assistance. When you use "Offer
> Remote
> >> Assistance" to logon the remote computer is similar with a Solicited
> Remote
> >> Assistance. So this test can help us make sure whether the entire
> Remote
> >> Assistance system is corrupted in the problematic workstation. For more
> >> information about how to Sending a Remote Assistance Invitation, you may
> >> refer to the KB300546 as I mentioned in last reply.
> >>
> >> 2. When the left pan reports "Waiting for an answer", what is the user
> name
> >> attempts to logon the remote computer and force the logged on user to
> log
> >> off? Is it HelpAssistant?
> >>
> >> 3. Is there any difference between the upgraded XP SP2 computers and OEM
> XP
> >> SP2? Such as hardware, software, especially security software including
> >> anti-virus or firewall software.
> >>
> >> 4. Please also let me know what OS you use to Offer Remote Assistance?
> Is
> >> it a XP SP2 or 2003 Server?
> >>
> >> 5. Please let me know the upgrade process. For example, it was Windows
> 2000
> >> Professional SP4, and upgraded to XP with SP1, and then installed XP SP2
> >> later.
> >>
> >> Since this is a very weird issue and I cannot find any similar issues in
> >> our internal database, so we may need to more time to troubleshoot this
> >> issue, I appreciate your patience. In addition, so far I am not sure
> >> whether this issue is related to the Remote Registry and EventLog
> issues,
> >> however, please rest assured that my colleague Ken Zhao is working hard
> on
> >> those issues.
> >>
> >> I look forward to hearing from you soon.
> >>
> >> Have a nice day!
> >>
> >> Sincerely,
> >> Tom Che
> >> Microsoft Online Partner Support
> >> Get Secure! - www.microsoft.com/security
> >>
> >> ================================================== ===
> >> When responding to posts, please "Reply to Group" via your newsreader so
> >> that others may learn and benefit from your issue.
> >> ================================================== ===
> >> This posting is provided "AS IS" with no warranties, and confers no
> rights.
> >>
> >>
> >> --------------------
> >> >Thread-Topic: Help and Support - Windows 2000 Upgrade to XP
> >> >thread-index: AcXwPDW+yVjyyEz+QAq3zlhh90z3Ow==
> >> >X-WBNR-Posting-Host: 209.217.222.70
> >> >From: "=?Utf-8?B?U211cmZtYW4=?=" <smurfman@news.postalias>
> >> >References: <E4682629-F829-4B60-85FE-74CB91538814@microsoft.com>
> >> <vT38Z8#7FHA.2612@TK2MSFTNGXA02.phx.gbl>
> >> >Subject: RE: Help and Support - Windows 2000 Upgrade to XP
> >> >Date: Wed, 23 Nov 2005 06:43:04 -0800
> >> >Lines: 141
> >> >Message-ID: <6C03BECB-AA57-4E6A-A80D-9B660A62477B@microsoft.com>
> >> >MIME-Version: 1.0
> >> >Content-Type: text/plain;
> >> > charset="Utf-8"
> >> >Content-Transfer-Encoding: 7bit
> >> >X-Newsreader: Microsoft CDO for Windows 2000
> >> >Content-Class: urn:content-classes:message
> >> >Importance: normal
> >> >Priority: normal
> >> >X-MimeOLE: Produced By Microsoft MimeOLE V6.00.3790.0
- Posted by Tom Che [MSFT] on December 2nd, 2005
Hi,
Thanks for your reply!
I understand your concern. Actually, the Solicited Remote Assistance
request can be saved as a file, and then copy it from the nova to the
expert. I would like to test the Solicited Remote Assistance is because I
would confirm whether the entire architecture of Remote Assistance has not
been upgraded successfully.
I will test this issue with an exactly same upgrade process as yours to
check whether I can reproduce this issue. Please understand that this is a
time-consuming test and I can only perform the test at this weekend. I
appreciate your patience.
Furthermore, could you please help me collect the following information for
compare within my test?
1. The detailed error message may help us find the root cause as soon as
possible, so please take some screenshots of the process of the issue, and
then send them to me at
v-tomche@microsoft.com:
To take a screenshot:
---------------------
a. Press the Print Screen key once on the keyboard when the expected screen
appears.
b. Click Start, go to Run, enter MSPAINT in the open dialog box, and then
Click OK.
c. Use Ctrl + V to paste the screenshot to the canvas.
d. From the File menu, go to Save and save it as a JPG file.
2. Please help me collect some system information from both the upgraded
machine and the OEM system:
a. Download MPSReport tool from below URL:
<http://download.microsoft.com/downlo...e5-a579-30b0bd
915706/MPSRPT_SETUPPerf.EXE>
b. Execute the tool on both computers, and if you are prompted "Include the
MSINFO32 report?", please type Y.
c. Please send the two result files (CAB files) to me at
v-tomche@microsoft.com.
For detailed information about the MPS Report Tools, please refer to the
following link:
Microsoft Product Support's Reporting Tools
<http://www.microsoft.com/downloads/d...3C7C-7CA5-408F
-88B7-F9C79B7306C0&displaylang=en>
I look forward to hearing from you soon.
Have a nice day!
Sincerely,
Tom Che
Microsoft Online Partner Support
Get Secure! - www.microsoft.com/security
================================================== ===
When responding to posts, please "Reply to Group" via your newsreader so
that others may learn and benefit from your issue.
================================================== ===
This posting is provided "AS IS" with no warranties, and confers no rights.
--------------------
>Thread-Topic: Help and Support - Windows 2000 Upgrade to XP
>thread-index: AcX2gZ9aNUwlOOfnT2iNCOQfqMWq4A==
>X-WBNR-Posting-Host: 209.217.222.70
>From: "=?Utf-8?B?U211cmZtYW4=?=" <smurfman@news.postalias>
>References: <E4682629-F829-4B60-85FE-74CB91538814@microsoft.com>
<vT38Z8#7FHA.2612@TK2MSFTNGXA02.phx.gbl>
<6C03BECB-AA57-4E6A-A80D-9B660A62477B@microsoft.com>
<tMK0LKP8FHA.2852@TK2MSFTNGXA02.phx.gbl>
<DD95E70B-3D24-450A-BC40-129161D3C139@microsoft.com>
<ULQzWJb9FHA.832@TK2MSFTNGXA02.phx.gbl>
>Subject: RE: Help and Support - Windows 2000 Upgrade to XP
>Date: Thu, 1 Dec 2005 06:15:03 -0800
>Lines: 325
>Message-ID: <CF33BC24-B538-4C71-BF3A-612B4AFF3E86@microsoft.com>
>MIME-Version: 1.0
>Content-Type: text/plain;
> charset="Utf-8"
>Content-Transfer-Encoding: 7bit
>X-Newsreader: Microsoft CDO for Windows 2000
>Content-Class: urn:content-classes:message
>Importance: normal
>Priority: normal
>X-MimeOLE: Produced By Microsoft MimeOLE V6.00.3790.0
>Newsgroups: microsoft.public.windowsxp.help_and_support
>NNTP-Posting-Host: TK2MSFTNGXA03.phx.gbl 10.40.2.250
>Path: TK2MSFTNGXA02.phx.gbl!TK2MSFTNGXA01.phx.gbl!TK2MSF TNGXA03.phx.gbl
>Xref: TK2MSFTNGXA02.phx.gbl
microsoft.public.windowsxp.help_and_support:603742
>X-Tomcat-NG: microsoft.public.windowsxp.help_and_support
>
>Tom, thanks for getting back to me. First off allowing users to solicite
>help is not part of our "Policy - as in our Paper Policy not Electronic".
>Also I DID NOT state that it did not work, only that I was able to get the
>point of where the invitation would be sent via email or messenger...this
was
>the point in which I stopped. Users DO NOT have access to email via
Outlook
>Express, and Messange is not configured either.
>
>The GPO works on all of my other machines, and is not the focus of the
>problem. The GPO Results shows that in fact the settings are being
applied
>for a particular user logged onto that machine. I hope we can get past
this.
>
>The focus should be that an upgraded Windows 2000 Pro Machine is not
getting
>some part of the Remote Assistance libraries or something updated. I
suspect
>this since already I have discoved that the secsetup.inf file is also not
>being upgraded/replaced for an XP Upgrade, and when the upgrade process
looks
>to reset the permissions on the Registry and Files it is simply grabbing
the
>old settings from Windows 2000. I was able to prove and fix this.
>
>I suspect that there is still something else that is not getting upgraded
>properly during this process.
>
>J
>
>"Tom Che [MSFT]" wrote:
>
>> Hi,
>>
>> Thanks for your reply!
>>
>> I am glad to hear that the Remote Registry and EventLog issues have been
>> resolved.
>>
>> I understand that you are unable to initiate a Solicited Remote
Assistance
>> via your new policy. However, I don't recommend that you use Group
Policy
>> to set the related settings as you mentioned.
>>
>> Actually, you can find the following information in the Explain tab of
the
>> Solicited Remote Assistance policy:
>>
>> "If the status is set to Not Configured, users can enable or disable and
>> configure Remote Assistance themselves in System properties in Control
>> Panel. If the status is set to Not Configured, the default maximum time
a
>> Remote Assistance invitation can stay open is determined by the Control
>> Panel setting."
>>
>> Therefore, if you don't configure this policy, you still can enable
>> Solicited Remote Assistance via the Remote tab of System Properties
control
>> panel. I still recommend you may refer to the following KB article to
test
>> the issue with Solicited Remote Assistance:
>>
>> 300546 Overview of Remote Assistance in Windows XP
>> http://support.microsoft.com/default...b;EN-US;300546
>>
>> Furthermore, I am researching your other detailed information and will
get
>> back to you as soon as possible. I appreciate your patience.
>>
>> Have a nice day!
>>
>> Sincerely,
>> Tom Che
>> Microsoft Online Partner Support
>> Get Secure! - www.microsoft.com/security
>>
>> ================================================== ===
>> When responding to posts, please "Reply to Group" via your newsreader so
>> that others may learn and benefit from your issue.
>> ================================================== ===
>> This posting is provided "AS IS" with no warranties, and confers no
rights.
>>
>> --------------------
>> >Thread-Topic: Help and Support - Windows 2000 Upgrade to XP
>> >thread-index: AcX0WherPsVexlUmRvODPmo/2NwXnQ==
>> >X-WBNR-Posting-Host: 209.217.222.70
>> >From: "=?Utf-8?B?U211cmZtYW4=?=" <smurfman@news.postalias>
>> >References: <E4682629-F829-4B60-85FE-74CB91538814@microsoft.com>
>> <vT38Z8#7FHA.2612@TK2MSFTNGXA02.phx.gbl>
>> <6C03BECB-AA57-4E6A-A80D-9B660A62477B@microsoft.com>
>> <tMK0LKP8FHA.2852@TK2MSFTNGXA02.phx.gbl>
>> >Subject: RE: Help and Support - Windows 2000 Upgrade to XP
>> >Date: Mon, 28 Nov 2005 12:27:03 -0800
>> >Lines: 360
>> >Message-ID: <DD95E70B-3D24-450A-BC40-129161D3C139@microsoft.com>
>> >MIME-Version: 1.0
>> >Content-Type: text/plain;
>> > charset="Utf-8"
>> >Content-Transfer-Encoding: 7bit
>> >X-Newsreader: Microsoft CDO for Windows 2000
>> >Content-Class: urn:content-classes:message
>> >Importance: normal
>> >Priority: normal
>> >X-MimeOLE: Produced By Microsoft MimeOLE V6.00.3790.0
>> >Newsgroups: microsoft.public.windowsxp.help_and_support
>> >NNTP-Posting-Host: TK2MSFTNGXA03.phx.gbl 10.40.2.250
>> >Path: TK2MSFTNGXA02.phx.gbl!TK2MSFTNGP08.phx.gbl!TK2MSFT NGXA03.phx.gbl
>> >Xref: TK2MSFTNGXA02.phx.gbl
>> microsoft.public.windowsxp.help_and_support:602854
>> >X-Tomcat-NG: microsoft.public.windowsxp.help_and_support
>> >
>> >Hey Tom, thanks for the extra steps...I will post my responses with
your
>> >questions:
>> >
>> >"1. Please use the problematic upgraded XP SP2 machine to initiate a
>> Remote
>> >Assistance - as a Solicited Remote Assistance. When you use "Offer
Remote
>> >Assistance" to logon the remote computer is similar with a Solicited
>> Remote
>> >Assistance. So this test can help us make sure whether the entire
Remote
>> >Assistance system is corrupted in the problematic workstation. For
more
>> >information about how to Sending a Remote Assistance Invitation, you
may
>> >refer to the KB300546 as I mentioned in last reply."
>> >
>> >-ANSWER- I had to change my policy to allow users Solicite requests for
>> >assistance. The settings are as follows
>> >..... Permit remote control of this computer: Allow helpers to remotely
>> >control the computer
>> >..... Maximum ticket time (value): 10
>> >..... Maximum ticket time (units): Minutes
>> >..... Method for sending e-mail invitations: Mailto
>> >
>> >After I log on to the machine and start remote assistance (Start -->
>> >Programs --> Remote Assistance) I can click the link to Invite Someone,
I
>> get
>> >a message about Remote Assistanc eand Firewall Settings related to
>> >email...but then I get the next screen that shows me the two methods,
one
>> >being the Microsoft Messanger and the other being Outlook Express. At
>> that
>> >point, I can not continue since neither option is available for users.
>> >Outlook Express is not configured and neither is the Messanger.
>> >
>> >"2. When the left pan reports "Waiting for an answer", what is the user
>> name
>> >attempts to logon the remote computer and force the logged on user to
log
>> >off? Is it HelpAssistant?"
>> >
>> >-ANSWER- Once the left pane reports "Waiting for an answer" nothing
takes
>> >place on the remote machine, but rather at the "helper" machine I get
the
>> >legal notification box as part of our domain policy "Do not attempt..."
>> blah
>> >blah blah...after clicking OK, I get a standard Windows Logon Dialog
Box.
>> >The box is blank and only reports the domain in which the machine is
>> attached
>> >to. From there if I enter my administrator account (who is defined in
the
>> >list of permitted users) in the GPO, the logon process begins to take
>> place.
>> >After a few seconds, another dialog box pops up, and tells me that
USERxyz
>> is
>> >currently logged on, continuing will log them off and they will lose
any
>> >unsaved data (not word for word but I think you understand). So at
that
>> >point I have to click no.
>> >
>> >"3. Is there any difference between the upgraded XP SP2 computers and
OEM
>> XP
>> >SP2? Such as hardware, software, especially security software
including
>> >anti-virus or firewall software."
>> >
>> >-ANSWER- All of the upgraded machines are HP machines, the OEM machines
>> are
>> >also HP, but just newer. The software is basically the core which is
>> yours,
>> >and a few other programs that both machines have. Functionally
speaking
>> the
>> >machines all work the same, the software all runs as expected. As far
as
>> >Anti-Virus, all of my machines run the same eTrust software, and the
>> Firewall
>> >is yours. I enforce many specific settings for all machines related to
>> >Windows Firewall. The GPResults show that the machines in question are
in
>> >fact accepting and applying the GPO, as I also saw with allowing the
>> remote
>> >assistance change in question #1.
>> >
>> >"4. Please also let me know what OS you use to Offer Remote Assistance?
>> Is
>> >it a XP SP2 or 2003 Server?"
>> >
>> >-ANSWER- The remote assistance is XP SP2 to XP SP2.
>> >
>> >"5. Please let me know the upgrade process. For example, it was Windows
>> 2000
>> >Professional SP4, and upgraded to XP with SP1, and then installed XP
SP2
>> >later."
>> >
>> >-ANSWER- All of the upgraded machines thus far have been Windows 2000
>> >Machines with ALL of the latest patches including the latest SP Rollup
>> >package, that was the starting point. My steps were to run the core XP
>> >install with SP1, after the install, I installed SP2 from my TechNet
>> Disks,
>> >then I perform the Microsoft Update (not the windows update).
>> >
>> >
>> >
>> >RELATED TO THIS:
>> >> Since this is a very weird issue and I cannot find any similar issues
in
>> >> our internal database, so we may need to more time to troubleshoot
this
>> >> issue, I appreciate your patience. In addition, so far I am not
sure
>> >> whether this issue is related to the Remote Registry and EventLog
>> issues,
>> >> however, please rest assured that my colleague Ken Zhao is working
hard
>> on
>> >> those issues.
>> >
>> >Ken suggested I change the winreg key permissions to make sure the
"LOCAL
>> >SERVICE" was included with Read Permissions. When I did this it fixed
my
>> >other issue.
>> >
>> >HOWEVER - I did submit to him based on KB 313222 "How to Reset Security
>> >Settings Back to the Defaults" that if I performed the steps outlined
>> there,
>> >that the it would reset my registry setting back, removing the Local
>> Service
>> >from the list. I noted to him and I will mention to you that the
>> >secsetup.inf file mentioned in the %windir%/repair folder based on the
KB
>> was
>> >outdated, it was listed as May 2002, where as my OEM machines had a AUG
>> 2004
>> >file. I installed the Windows XP Security Guide and Templates msi file
>> from
>> >Microsoft, and noted that there was a Setup Security.inf file there. I
>> >copied that file to my machine in question, ran the secedit command in
the
>> KB
>> >and it ran thru the settings and fixed my Remote Registry and Remote
Event
>> >Viewer issue. My concern is that the upgrade is not replacing this
file,
>> and
>> >is leaving my machines with invalid security setting for the registry.
>> >
>> >NOTE TOO, that I tried the Remote Assistance AFTER running the secedit
>> >command to fix the registry and files permissions, but nothing changed
in
>> the
>> >way of our issue above.
>> >
>> >Thanks Tom
>> >
>> >I hope this info helps.
>> >
>> >J
>> >
>> >
>> >"Tom Che [MSFT]" wrote:
>> >
>> >> Hi,
>> >>
>> >> Thanks for your detailed reply. Now I totally understand the weird
>> issue.
>> >>
>> >> However, I am unable to reproduce the issue on my side so far. I
>> recommend
>> >> that we may perform some tests as below to narrow down the root cause:
>> >>
>> >> 1. Please use the problematic upgraded XP SP2 machine to initiate a
>> Remote
>> >> Assistance - as a Solicited Remote Assistance. When you use "Offer
>> Remote
>> >> Assistance" to logon the remote computer is similar with a Solicited
>> Remote
>> >> Assistance. So this test can help us make sure whether the entire
>> Remote
>> >> Assistance system is corrupted in the problematic workstation. For
more
>> >> information about how to Sending a Remote Assistance Invitation, you
may
>> >> refer to the KB300546 as I mentioned in last reply.
>> >>
>> >> 2. When the left pan reports "Waiting for an answer", what is the
user
>> name
>> >> attempts to logon the remote computer and force the logged on user to
>> log
>> >> off? Is it HelpAssistant?
>> >>
>> >> 3. Is there any difference between the upgraded XP SP2 computers and
OEM
>> XP
>> >> SP2? Such as hardware, software, especially security software
including
>> >> anti-virus or firewall software.
>> >>
>> >> 4. Please also let me know what OS you use to Offer Remote
Assistance?
>> Is
>> >> it a XP SP2 or 2003 Server?
>> >>
>> >> 5. Please let me know the upgrade process. For example, it was<
