Publishing an InfoPath form that contains Sandboxed code to a SharePoint server that is also a domain controller fails

You work with a SharePoint server that is also a domain controller. On this server, the Microsoft SharePoint Foundation Sandboxed Code Service is enabled. You design an InfoPath form template that contains sandboxed code. When you try to publish this form template to the server, InfoPath returns the following error:

The form template has been published to the server but it can only be opened in the InfoPath Filler.

If you click Details, you see one of the following messages:

• This operation is not allowed at this time
• The sandboxed solution could not be activated
• There is an error in the InternalStartup method of form code

Note InfoPath form contains sandboxed code if the Administrator-approved form template (advanced) option is not enabled when the form is published.

Promoting a SharePoint Server to be a domain controller modifies permissions to some registry keys to be more restrictive.

To make the form template usable, the Users group needs Read access to the following three registry keys on the SharePoint Server:

• HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\BFE
• HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Cryptography\Providers
• HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Cryptography\Configuration

To add Read access to these three keys, follow these steps:

1. On the SharePoint Server and domain controller, click Start, click Run, type regedit in the Open box, and then click OK. 
2. Locate and then right-click the following registry subkey:
• HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\BFE
3. Click Permissions, click to select Users, click to select the Read check box in the Allow column of Permissions for Users, and then click OK.
4. Locate and then right-click the following registry subkey:
• HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Cryptography\Providers
5. Click Permissions, click to select Users, click to select the Read check box in the Allow column of Permissions for Users, and then click OK.
6. Locate and then right-click the following registry subkey:
• HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Cryptography\Configuration
7. Click Permissions, click to select Users, click to select the Read check box in the Allow column of Permissions for Users, and then click OK.
8. Exit Registry Editor.

 

Note This is a "FAST PUBLISH" article created directly from within the Microsoft support organization. The information contained herein is provided as-is in response to emerging issues. As a result of the speed in making it available, the materials may include typographical errors and may be revised at any time without notice. See Terms of Use (http://go.microsoft.com/fwlink/?LinkId=151500) for other considerations.