One of these unattended regtweaks causes the tcpip driver to fail with the following error upon reboot:

Event ID:	7000
Description:
The TCP/IP Protocol Driver service failed to start due to the following error: 
The system cannot find the file specified.

Can anyone figure out which tweak is killing it? (please see attached - you may want to run in a VM and make a restore point before running it)

services.reg

I'll take a guess.

You have the comments right after the reg-entrys, maybe put them on top?

You got them like this:

"CascadeControlPanel"="Yes"             ;Cascade control panel (classic start menu)

But maybe you should have 'em like:

; Cascade control panel (classic start menu)

"CascadeMyDocuments"="YES"

Im not sure if it makes a diffrence tho, better wait for somebody else to take a look.

; signifies the begining of a comment and continues for the rest of that line unless cancalled (if im not mistaken). All it is, is a comment, it doesnt direct the registry tweak, so that should not be it i dont believe.

Some of the services should be left in automatic mode. DHCP, dnscashe etc. This are tcpip services. If you want a possible explaination of services then check out http://www.blackviper.com/WinXP/servicecfg.htm .

OK, it's definitely one of the services tweaks. Thanks for leading me in that direction, MHz.

Any ideas? I've disabled DNS and DHCP on Windows 2000 machines with no problems, so I doubt it's those.

Hmm... it might be:

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\IPSec]

"Start"=dword:00000003

This sets the IPSec driver to manual, when I meant to disable the PolicyAgent. Let's test in VM ...

I'll take a shot.

if IPSEC works, great! but if not, you might like to try setting lmhosts to automatic..

it's just a guess..

;TCP/IP Helper 
;Enables support for NetBIOS over TCP/IP (NetBT) service and NetBIOS name resolution.
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\LmHosts]
"Start"=dword:00000002

If you go through the properties of the services, they will tell you of their dependences on others. I believe IPSec is important. I use hardware profiling for aggressive use for services.

Still proper etiquette in reg file's should have the comments on different lines like Lolly pointed out.

Another thing is add a blank line between them and at another at end of file. I've personally seen instances where it don't import correctly if not. Fast PC or Slow could be it but i haven't pin pointed it yet.

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Alerter]

"Start"=dword:00000003

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\ERSvc]

"Start"=dword:00000003

Don't think that's your problem but who know's. export a reg from regedit and you'll see the blank line's.

OK, it was the IPSec driver, which the TCPIP driver depends on. Both IPSec and TCPIP are not listed in services.msc.

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\IPSec]

"Start"=dword:00000003

Thanks everyone.