Article ID: 2008385 - View products that this article applies to.
This can be caused by either of the following:
1. There is a lack of permissions in the registry key HKU\S-1-5-20. The Network Service account must have full control and read permissions over that registry key.
This situation may be the result of applying a Plug and Play Group Policy object (GPO).
Computer Configuration / Policies / Windows Settings /Security Settings / System Services / Plug and Play (Startup Mode: Automatic)
Because the Licensing service uses Plug and Play to obtain hardware ID information and binds the license to the computer, this setting can result in an activated system appearing to be out of tolerance. The default permissions of the Plug and Play policy do not grant the Licensing service the appropriate rights to access the Plug and Play service. The Licensing service runs under the Network Service account.
2. Missing registry keys. One of more of these registry keys may be missing:
If the issue is caused by lack of permissions, to resolve you can either disable the policy setting (Method A), or edit the permissions to provide the Licensing Service the required permissions (Method B). If the issue is caused by missing registry keys, see Method C.
Method A: Disable the Plug and Play Policy
1. Determine the source of the policy. To do this, follow these steps:
Method B: Edit the permissions of the Group Policy:
1. Open the Group Policy that is identified in Method A, Step 1 above, and open the corresponding Group Policy setting.
Note: The Previous rights are the minimum required permissions.
5. Run gpupdate /force after you apply the previous permissions to the Group Policy setting.
6. Verify that the appropriate permissions are applied with the following command:
sc sdshow plugplay
The following are the rights applied to the Plug and Play service in SDDL:
(A;;CC LC SW LO CR RC ;;;SU is an Access Control Entry (ACE) that allows the following rights to "SU" (SDDL_SERVICE – Service logon user)
Note: If there are no GPO's in place, then another activity may have changed the default registry permissions. To work around this issue, perform the following steps:
Method C: Add Registry Key
1. Copy the below entry as is on a notepad and save the text file to Profilelist.reg
Article ID: 2008385 - Last Review: June 21, 2014 - Revision: 13.0