Jump to content
Strawberry Orange Banana Lime Leaf Slate Sky Blueberry Grape Watermelon Chocolate Marble
Strawberry Orange Banana Lime Leaf Slate Sky Blueberry Grape Watermelon Chocolate Marble

MSFN is made available via donations, subscriptions and advertising revenue. The use of ad-blocking software hurts the site. Please disable ad-blocking software or set an exception for MSFN. Alternatively, register and become a site sponsor/subscriber and ads will be disabled automatically. 


Jazkal

WinPE v2 and "Access is Denied" error

Recommended Posts

So I have seen a number of people (me included) have seen this "access is denied" error message when trying to run scripts via a network drive.

So, is there anyone that knows how to turn off this security "feature", if in fact that is what this is.

Edited by Jazkal

Share this post


Link to post
Share on other sites

I thought it may have been the the firewall, so I ran:

wpeutil disablefirewall

But that didn't resolve the error.

Share this post


Link to post
Share on other sites

Jazkal,

I am having the same issue here. This needs to get fixed because I need to be able to run our scripts from the network as part of our corporate deployment strategy.

Post back if you hear anything.

I'll do the same

Edited by styxx_78

Share this post


Link to post
Share on other sites

I'm trying to track it down. I'm wondering if it isn't some kind of IE7 security config issue built into Vista (Which PE2 is built on).

If I find a solution, I will post it here.

Share this post


Link to post
Share on other sites

I wonder is User Access Control (UAC) is also incorporated into WinPE 2.0?

If so, I wonder if that could be the culprit and if it can be disabled. (It's soo annoying)

Share this post


Link to post
Share on other sites

I just tested a WinPE 2 build with UAC disabled (assuming the reg key is the same as Vista) , and that didn't effect the Access is denied errors. :no:

Edited by Jazkal

Share this post


Link to post
Share on other sites

Ok, I think I have a working solution for the "access is denied" problem.

What I tested, and it works:

Trying to run a VBS script off a network mapped drive: z:\test.vbs

What needs to be changed:

Once you have your WinPEv2 wim mounted, you have to load the registry so you can make the changes.

example:

reg load HKLM\PE-SFT %MOUNTROOTDIR%\Mount\Windows\system32\config\software

Then load regedit and make these changes, you will have to add them because they aren't there.

[HKEY_LOCAL_MACHINE\PE-SFT\Microsoft\Windows\CurrentVersion\Policies\Associations]
"LowRiskFileTypes"=".com;.exe;.vbs"

Then unmount the reghive with:

reg unload HKLM\PE-SFT

Then you can continue on with your PE creation.

Share this post


Link to post
Share on other sites

I have not tried what you posted above yet but here is what I have found.

I have been able to run .vbs scripts with no modification to my WinPe image so far.

Try specifying wscript as your script engine as follows.

c:\>wscript <script name>.vbs

Also, i was having trouble running .HTA files from a network location. I have made it further but it still is not working perfectly yet.

mshta.exe file.hta <username> <password>

By specifying mshta.exe to load, along with my credentials it seemed to load a partial HTA window, but it was completely grey. I am still not sure if it is a coding issue or the way it is being handled.

Jazkal,

Have you tried loading an hta from a network shre yet? Have you been successful?

Share this post


Link to post
Share on other sites

Yes, I load a HTA file from a mapped network drive:

mshta.exe z:\hta\file.hta

This works without issues for me.

I do know that WinPE v2 has problems with running scripts/HTA's over a UNC network path. Meaning it won't allow it by design.

Share this post


Link to post
Share on other sites

MDAC is the only one I did not load yet. I will try loading that one and try again.

I have actually opened a Premiere Support call with Microsoft on this one because I do not want to spend a lot of time on it. I hope they can help.

Share this post


Link to post
Share on other sites

MDAC shouldn't have anything to do with it, unless your making SQL calls from within the HTA.

Have you tried loading just a basic HTA? see if that works?

Share this post


Link to post
Share on other sites

I'm going to try that right now. The hta I was using does have componenets in it that do adress an SQL database that houses all of our software command lines.

Share this post


Link to post
Share on other sites

Join the conversation

You can post now and register later. If you have an account, sign in now to post with your account.

Guest
Reply to this topic...

×   Pasted as rich text.   Restore formatting

  Only 75 emoji are allowed.

×   Your link has been automatically embedded.   Display as a link instead

×   Your previous content has been restored.   Clear editor

×   You cannot paste images directly. Upload or insert images from URL.


  • Recently Browsing   0 members

    No registered users viewing this page.

×
×
  • Create New...