You are currently offline, waiting for your internet to reconnect

You cannot change the TCP/IP settings of an operating system that is built with the Windows XP Embedded runtime even if you belong to the Network Configuration Operators group

When you log on to an operating system that is built with the Microsoft Windows XP Embedded runtime, you cannot change the TCP/IP settings, even if you belong to the Network Configuration Operators group. You can only change the settings if you are the local administrator.

For example, after you change the IP address settings or the subnet mask settings, you are prompted to restart the operating system. However, after you restart the operating system, the changes do not take effect.

This problem does not occur in Windows XP Professional edition.
This problem occurs because of missing permission settings in the access control list for the related registry entries. The permission settings are handled differently in Windows XP Embedded than in Windows XP Professional.
The following file is available for download from the Microsoft Download Center:
DownloadDownload the SubInACL.exe package now.

For more information about how to download Microsoft support files, click the following article number to view the article in the Microsoft Knowledge Base:
119591 How to obtain Microsoft support files from online services
Microsoft scanned this file for viruses. Microsoft used the most current virus-detection software that was available on the date that the file was posted. The file is stored on security-enhanced servers that help prevent any unauthorized changes to the file.

To work around this problem, you can use SubInACL, a security editor tool, to run a script file. To do this, follow these steps.
  1. Create a script file that is used to assign appropriate permission in the access control list. To do this, create a .txt file, copy the following code to the .txt file, and then rename the file as Filename.bat.
    subinacl /keyreg HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Tcpip\ /grant="Network Configuration Operators"=QCEYAsubinacl /keyreg HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Tcpip\Linkage\ /grant="Network Configuration Operators"=QSCEYAsubinacl /keyreg HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters\ /grant="Network Configuration Operators"=QSCEYAsubinacl /subkeyreg HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters\Adapters\ /grant="Network Configuration Operators"=QSCEYAsubinacl /subkeyreg HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters\DNSRegisteredAdapters\ /grant="Network Configuration Operators"=QSCEYAsubinacl /subkeyreg HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters\Interfaces\ /grant="Network Configuration Operators"=QSCEYAsubinacl /keyreg HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters\PersistentRoutes\ /grant="Network Configuration Operators"=QSCEYAsubinacl /keyreg HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters\Winsock\ /grant="Network Configuration Operators"=QCEYAsubinacl /keyreg HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Tcpip\Performance\ /grant="Network Configuration Operators"=QCEYAsubinacl /keyreg HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Tcpip\ServiceProvider\ /grant="Network Configuration Operators"=QCEYAsubinacl /keyreg HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Tcpip\Enum\ /grant="Network Configuration Operators"=QCEYAsubinacl /keyreg HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Tcpip\Security\ /grant="Network Configuration Operators"=QCEYAsubinacl /keyreg HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\DHCP\Configurations\ /grant="Network Configuration Operators"=QSCEYADsubinacl /subkeyreg HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\DHCP\Parameters\ /grant="Network Configuration Operators"=QEYAsubinacl /keyreg HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\{GUID_OF_NIC}\Parameters\Tcpip\ /grant="Network Configuration Operators"=QSCEYADsubinacl /subkeyreg HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\NetBT\ /grant="Network Configuration Operators"=QCEYAsubinacl /subkeyreg HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\NetBT\Parameters\ /grant="Network Configuration Operators"=QSCEYA
    Note You must replace {GUID_OF_NIC} in the fifteenth line of the code with the actual GUID of the network adapter on your device. You can find the GUID under the TCP/IP service registry key. For example, in the following resigtry entry, the GUID is AEA17CDF-5551-4DF7-90EE-73E0E595BC31:
  2. Download the SubInAcl.exe package.
  3. Install the SubInAcl tool. The default location of the SubInAcl.exe file is C:\Program Files\Windows Resource Kits\Tools.
  4. Copy the filename.bat file and the SubInAcl.exe file to the same temporary folder.
  5. At a command prompt, locate the temporary folder, and then run the Filename.bat file.
After you follow these steps, you can successfully change the TCP/IP settings if you belong to the Network Configuration Operators group.
This article also applies to the following:
  • WePOS 1.1
  • WinFLP
  • Windows Embedded Standard
  • POSReady 2009

Article ID: 941915 - Last Review: 09/05/2007 00:26:11 - Revision: 1.2

Windows XP Embedded

  • kbexpertiseinter kbtshoot kbprb KB941915