You cannot change the TCP/IP settings of an operating system that is built with the Windows XP Embedded runtime even if you belong to the Network Configuration Operators group

Article translations Article translations
Article ID: 941915 - View products that this article applies to.
Expand all | Collapse all

SYMPTOMS

When you log on to an operating system that is built with the Microsoft Windows XP Embedded runtime, you cannot change the TCP/IP settings, even if you belong to the Network Configuration Operators group. You can only change the settings if you are the local administrator.

For example, after you change the IP address settings or the subnet mask settings, you are prompted to restart the operating system. However, after you restart the operating system, the changes do not take effect.

This problem does not occur in Windows XP Professional edition.

CAUSE

This problem occurs because of missing permission settings in the access control list for the related registry entries. The permission settings are handled differently in Windows XP Embedded than in Windows XP Professional.

WORKAROUND

The following file is available for download from the Microsoft Download Center:
Collapse this imageExpand this image
Download
Download the SubInACL.exe package now.

For more information about how to download Microsoft support files, click the following article number to view the article in the Microsoft Knowledge Base:
119591 How to obtain Microsoft support files from online services
Microsoft scanned this file for viruses. Microsoft used the most current virus-detection software that was available on the date that the file was posted. The file is stored on security-enhanced servers that help prevent any unauthorized changes to the file.

To work around this problem, you can use SubInACL, a security editor tool, to run a script file. To do this, follow these steps.
  1. Create a script file that is used to assign appropriate permission in the access control list. To do this, create a .txt file, copy the following code to the .txt file, and then rename the file as Filename.bat.
    subinacl /keyreg HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Tcpip\ /grant="Network Configuration Operators"=QCEYA
    subinacl /keyreg HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Tcpip\Linkage\ /grant="Network Configuration Operators"=QSCEYA
    subinacl /keyreg HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters\ /grant="Network Configuration Operators"=QSCEYA
    subinacl /subkeyreg HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters\Adapters\ /grant="Network Configuration Operators"=QSCEYA
    subinacl /subkeyreg HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters\DNSRegisteredAdapters\ /grant="Network Configuration Operators"=QSCEYA
    subinacl /subkeyreg HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters\Interfaces\ /grant="Network Configuration Operators"=QSCEYA
    subinacl /keyreg HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters\PersistentRoutes\ /grant="Network Configuration Operators"=QSCEYA
    subinacl /keyreg HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters\Winsock\ /grant="Network Configuration Operators"=QCEYA
    subinacl /keyreg HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Tcpip\Performance\ /grant="Network Configuration Operators"=QCEYA
    subinacl /keyreg HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Tcpip\ServiceProvider\ /grant="Network Configuration Operators"=QCEYA
    subinacl /keyreg HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Tcpip\Enum\ /grant="Network Configuration Operators"=QCEYA
    subinacl /keyreg HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Tcpip\Security\ /grant="Network Configuration Operators"=QCEYA
    subinacl /keyreg HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\DHCP\Configurations\ /grant="Network Configuration Operators"=QSCEYAD
    subinacl /subkeyreg HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\DHCP\Parameters\ /grant="Network Configuration Operators"=QEYA
    subinacl /keyreg HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\{GUID_OF_NIC}\Parameters\Tcpip\ /grant="Network Configuration Operators"=QSCEYAD
    subinacl /subkeyreg HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\NetBT\ /grant="Network Configuration Operators"=QCEYA
    subinacl /subkeyreg HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\NetBT\Parameters\ /grant="Network Configuration Operators"=QSCEYA
    
    Note You must replace {GUID_OF_NIC} in the fifteenth line of the code with the actual GUID of the network adapter on your device. You can find the GUID under the TCP/IP service registry key. For example, in the following resigtry entry, the GUID is AEA17CDF-5551-4DF7-90EE-73E0E595BC31:
    HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters\Adapters\{AEA17CDF-5551-4DF7-90EE-73E0E595BC31}
  2. Download the SubInAcl.exe package.
  3. Install the SubInAcl tool. The default location of the SubInAcl.exe file is C:\Program Files\Windows Resource Kits\Tools.
  4. Copy the filename.bat file and the SubInAcl.exe file to the same temporary folder.
  5. At a command prompt, locate the temporary folder, and then run the Filename.bat file.
After you follow these steps, you can successfully change the TCP/IP settings if you belong to the Network Configuration Operators group.

MORE INFORMATION

This article also applies to the following:
  • WePOS 1.1
  • WinFLP
  • Windows Embedded Standard
  • POSReady 2009

Properties

Article ID: 941915 - Last Review: September 5, 2007 - Revision: 1.2
APPLIES TO
  • Windows XP Embedded
Keywords: 
kbexpertiseinter kbtshoot kbprb KB941915

Give Feedback

 

Contact us for more help

Contact us for more help
Connect with Answer Desk for expert help.
Get more support from smallbusiness.support.microsoft.com