glnz

Vistaboy - but then in 2020 we'll all be back for Win 7. Hey, is there a Win 7 POS?

Heinoganda - yes - all good. Thanks again. HEY - WHAT IF I PUT A PICTURE OF ELVIS?

Heinoganda - thanks again, from me and all five of my doppelgangers. Your Info Version 1.6.txt says "For this the image (CertUpd.jpg) of the screen print must be loaded into the same directory of Cert_Updater, or in the same directory of Cert_Updater a text file with the name "Cert_Updater.txt" where the corresponding link to the image of the screen printout is inserted." But I installed your .reg file and I have just run Cert_Updater_v1.6, Do I also need to follow your instructions above about CertUpd.jpg?

Dave-H and heinoganda - this is only about the schannel error, not the crypt32 error, correct?

heinoganda - I just tried it (without understanding the Info .txt), and the results are: ******************************************************* * authroots.sst 07/18/2018 05:09 PM Roots * * delroots.sst 07/06/2018 02:05 PM Roots * * roots.sst 07/06/2018 02:05 PM Roots * * updroots.sst 08/20/2018 08:12 PM Roots * * disallowedcert.sst 04/27/2018 03:29 PM Revoked * ******************************************************* Does that look correct? Thanks.

Dave-H - I'm getting email notifications for SOME of the new posts on this thread (like yours just above but not some of the immediately preceding ones). At a meta+ironic level, in my XP machine's Outlook Express (which I understand is closely tied to IE). when I click on email notifications about updates to MSFN threads, I get Certificate Error warnings, but NOT just now for the one that has inspired this post.

Well, today I started the process of moving 13 years of emails from my Outlook Express to Thunderbird ("TB"), all on my XP machine. I installed Thunderbird on my XP machine and had it Import all settings, folders and emails from my Outlook Express. But then when I had TB start checking for new emails, it started downloading the same very old emails that are in the successful Import. See my details at https://support.mozilla.org/en-US/questions/1233978 and at http://forums.mozillazine.org/viewtopic.php?f=39&t=3041629 . Any thoughts? Thanks.

Dave-H - you are not alone!!! My XP Applications Event Viewer page looks exactly like yours, ending with the same Warning. And I run Heinoganda's cert_updater every few months, which splits the timeline into alternate universes. However, I have not tried any of the other suggestions in this thread.

Looking forward to the future ... Time to set a goal to wean myself from XP by April. These are my tasks: How to migrate my ten years of existing emails from Outlook Express 6 (many folders of ten-years past and current sent and received emails) to a new email app on my Win 7+10 dual-booting machine. Which email app? Someone has said that Mozilla is no longer updating Thunderbird, and I am (as Den knows) just a tad security-conscious. OE6 has been basic but very good to me. Its search function has been 100% A-OK, and I'm able to find what I need. I do have Outlook on my constantly-updated O365 Home on the Win 7 machine (not used yet), but I also use Outlook at work, so it's a bit boring. How to migrate over the air gap? Hire an unlicensed New Jersey trucking company? Ideally the emails will sit on a second hard drive as data. Better than a paper bag. All my emails have been on a POP3 basis until now (but with the OE6 setting "Keep copy on server" checked). How hard is it to change that to IMAP so that I can start accessing from numerous devices but keep a central record and not lose anything? I've never used IMAP. How to pour a copy of my old XP machine into a virtual machine that I can call up when I'm on my Win 7+10 and feeling lonely? I ask because my XP duct-tape machine isn't doing so well. I could just keep its hard drive, but that might be what's getting poky. As these are sort-of new topics, in what folder on this Forum should I start them? Hey - don't cry yet - we still have till April. But then it's auf Wiedersehen -- Au revoir -- adiós -- さようなら -- Прощай -- Tchau -- "Windows is Shutting Down".

France BB - Such good news. Only XP or 7 and 10 as well?

Sì. Bravo.

Den - in honor of the victor in the Democratic primary for Vermont gubernatorial candidate, I'm going to wear a dress.

Hey, SD73 - could you give me the complete instructions for running it with /OVERWRITEOEM ? Do i go into cmd, use cd to go to my download folder, and type in the whole long [filename].exe followed by /OVERWRITEOEM ? If I never did /OVERWRITEOEM before and this would be the first time, should I go back first and re-do some of my others that way? Thanks.

Den - thanks again. I think I actually did much of that per your advice a year+ ago on this very thread. Anyway, just the past two+ weeks, impersonating TI per the tools you recommended earlier, I added EVERYONE to the seven stubborn registry keys and made sure that all explicitly listed accounts have Full Control. If you go to < THIS LINK AGAIN > and scroll up a bit, my two screenshots show this but also show four duplicate "inherited" entries with only "Read" permission that I cannot change, even impersonating TI. I have not tried to delete them, but I am guessing I cannot delete them UNLESS I uncheck "Include inheritable permissions from this object's parent." I think I'll wait through one more O365 update to see if most recent steps work. If not, I'll try the uncheck and deletions. PS - it's also very helpful to run RegScanner 64 when I'm in TI mode. It finds things very fast, and then one can right-click directly into regedit. So, thanks to you, I can impersonate both TI and IT.

Trip - SYSTEM is listed the first time with "Full Control" as an explicit permission ("not inherited"). SYSTEM is listed a second time with "Read" as an inherited permission, which I have not yet tried to change with one of the strong techniques you list. I understand that the double-listing means that SYSTEM has all the permissions granted in either listing, so effectively it should be Full Control, yes? Let's see what happens with the next update for O365, which seems to happen about every three weeks. Thanks.

EDIT - I found heinoganda's link and installed and ran Cert_Updater v 1.3. The sun is still shining, but maybe everybody has switched right and left shoes - anything is possible with the Cert_Updater! Hey, heinoganda, my oldest and dearest friend -- there's a version 1.3? May I ask you for the link etc.? (And what will happen this time if I try to use it? Maybe I'll win the lottery?) Also, do you recommend that I stay away from Windows Server 2003 SP2 administration tool at this time? I'm just reading some science fiction short stories about old repair robots on junkyard space ships that get all the humans into deep trouble, and so maybe I should avoid this "administration tool" for the moment? Thanks.

Trip - I'd like to post a follow-up question to you and some more detail here but I'm getting error message from MSFN that I don't have permission to post on this server. Try the info I posted here: < PCLOUD LINK TO DOCX > Thanks.

Trip - thanks. I' not sure what you mean by "You can try, adding SYSTEM security context additionally to read, so that it too would have a "not inherited" listing." SYSTEM already appears twice - explicitly (not inherited) with Full Control, and inherited as Read. Should I add it again? If yes, with what setting? Also, is it relevant that all seven stubborn registry keys end with "InprocServer32"? When I started this philosophical-life struggle two years ago, an MS telephone tech person wrongly had me install the 32-bit version of O365 when I had always wanted the 64-bit version. We UNinstalled the 32-bit and re-installed the 64-bit. So, is "InprocServer32" a holdover from the initial installation that should no longer be there? (And keep in mind I have tried to do some VERY thorough UNinstalls and re-installs since then.)

Added note on odd aspects of seven registry keys that are “protected” and throw Warnings when I update Office 365 Home One of the seven is: Software\Classes\CLSID\{3050F667-98B5-11CF-BB82-00AA00BDCE0B}\InprocServer32 Its “Advanced Security Settings” show the following (and this is after I gave Full Control to Everyone, Account Unknown and Users and made sure others had Full Control) – two screenshots: < SEE SCREENSHOTS HERE> OR TRY < THIS LINK AND SCROLL UP IF TOO FAR > NOTE HOW there are four DUPLICATE listings for SYSTEM, Administrators, Users and Account Unknown that say “Read”. Two things: I cannot Edit those “Reads”. Any attempt to double-click on any of those last four does not work – I just bounce back into the upper list that already says “Full Control”. (All other attempts to check the Permissions of the upper part of the list indicate Full Control.) I cannot check “Replace all child object permissions with inheritable permissions from this object”. If I do and hit Apply, it unchecks itself. I see these symptoms on at least four of the seven "protected" keys and a few of these symptoms on the other three. So, might this be connected to the reason I get warnings that these keys are protected and cannot be modified each time I update O365? glnzglnz <br/> ► In the office, Dell Optiplex 7010 with 4GB RAM, Win 7 Pro 32-bit and Office 2010. <br/> ► At home, Dell Optiplex 7010 with 16GB RAM dual-booting Win 7 Pro 64-bit (now with Office 365 Home) and Win 10 Pro 64-bit. <br/> ► Also still have Dell Optiplex 755 with 4GB RAM with Win XP Pro SP3 (which still gets updates with the POS hack) and Office 2003.

I am in the presence of GREATNESS. Dave-H - please do everything suggested by Heinoganda and let us know.

UPDATE - NO LUCK - The same seven keys would not accept three modifications each. Any ideas?

Dave - H How does one find and insert the Server 2003 Admin Pack, and then what are the down sides?

Dave-H - You made me look, and I found the same error 11 in my Applications Event Viewer list! This is your fault. Well, if you try Thomas S's excellent link, please let us know. Thanks.

Den - already did that twice - no luck. Same error message. Maybe I should use the Waybac machine (System Restore) to one or two days ago, just to get it going?

Just to keep things fun ... Yesterday or the day before, my MBAE updated itself and then of course stopped working. (Naturally!) I got and (when I try to reinstall) continue to get the following error message: "The procedure entry point K32GetModuleFileNameExW could not be located in the dynamic link library KERNEL32.dll." That's a REAL CLASSIC of an error message. Maybe the "entry point" is even a bit ... porno? (And, like the old dog it is, my PC has ... bad aim? Really embarrassing.) Now I bet at least 1 Euro, 10 Yen, 5 Reais or 3 shillings that Den, heinoganda, jaclaz, Dave-H and others here KNOW JUST WHAT TO DO. C'mon pals - don't be modest.