XP Security Template

[iamtheky]

ImapiService,2,"D:AR(A;;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;BA)(A;;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;SY)(A;;CCLCSWLOCRRC;;;

IU)S:(AU;FA;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;WD)"

My security guys had this line in our deployment security template. The only intent was to set the IMAPI service to automatic (the '2').

**This adds: HKLM\system\currentcontrolset\services\imapiservice\security to the registry, with one hex entry.

With this setting you can send an item to the cd drive, get the 'files are waiting to be written', go through the wizard, but regardless of the disc in the drive you get "no disc in the drive" <--I do not need troubleshooting steps for this error, this is the symptom not the problem.

if you delete the security folder from the registry you can immediately write again.

Loading a computer with a Sec Template with only this line removed fixes the issue.

Can anyone tell me what about this security template entry is killing the IMAPI service for an administrator?

[wick21]

ImapiService,2,"D:AR(A;;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;BA)(A;;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;SY)(A;;CCLCSWLOCRRC;;;

IU)S:(AU;FA;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;WD)"

My security guys had this line in our deployment security template. The only intent was to set the IMAPI service to automatic (the '2').

**This adds: HKLM\system\currentcontrolset\services\imapiservice\security to the registry, with one hex entry.

With this setting you can send an item to the cd drive, get the 'files are waiting to be written', go through the wizard, but regardless of the disc in the drive you get "no disc in the drive" <--I do not need troubleshooting steps for this error, this is the symptom not the problem.

if you delete the security folder from the registry you can immediately write again.

Loading a computer with a Sec Template with only this line removed fixes the issue.

Can anyone tell me what about this security template entry is killing the IMAPI service for an administrator?

i have similar issue post here if you find a solution

[iamtheky]

The solution MS provided was not much different than my original, they said:

'If you delete the contents of HKLM\system\currentcontrolset\services\imapiservice\security this resolves the issue.' You still remain with imapiservice set to automatic.

reg delete HKLM\system\currentcontrolset\services\imapiservice\security /va /f would be ran after the template has been applied.

leaving the empty security folder has no effect.

They escalated my ticket, being to provide a template line that sets it the service to automatic and at minimum accepts the default acls. It has gone into 'research' where they made it repeatedly clear "we cannot guarantee a response time".

Edited May 9, 2009 by iamtheky