Fix Office 2010 install error 1402 ‘Setup cannot open the registry key: UNKNOWN\Components\…’

I wanted to install the Office 2010 beta. I had Office 2007 installed. I installed the Office 2010 Technical Preview earlier this year. When trying to remove Office 2010 Technical Preview, it asked me for the original CD. Didn’t have it anymore.

I tried to ‘manually’ remove Office 2010. I failed… miserably. Now Office 2007 wasn’t working either. The Office 2007 uninstall failed, too. Aaarrgghh. I ended up not being able to use any Microsoft Office application. After following many ‘removal guides’ like this one and that one, I ended up with the 1402 error while almost having finished the Office 2010 install:

 

Error 1402. Setup cannot open the registry key: UNKNOWN\Components\<very long CLASS ID ending in>0F01FEC. Verify that you have sufficient permissions to access the registry or contact Microsoft Product Support Services (PSS) for assistance. For information about how to contact PSS, see C:\Users\XXX\AppData\Local\Temp\Setup00000e60\PSS10R.Chm.

 

It is suggested on many websites that running the command ‘secedit /configure /cfg %windir%\inf\defltbase.inf /db defltbase.sdb /verbose‘ will fix this. For me, it didn’t. Maybe it has to do with running Windows, or Office 2007 and the Office 2010 Technical Preview, I don’t know. Probably a combination of those and my ‘hacks’ trying to get them of my system. I finally found a forum post by Bill Castner, a Microsoft MVP, who, in turn, got his info from an MSDN blog post by Aaron Stebner. It explained the use of yet another excellent utility by Microsoft named SubInAcl. This utility does the following:

SubInACL is a command-line tool that enables administrators to obtain security information about files, registry keys, and services, and transfer this information from user to user, from local or global group to group, and from domain to domain. For example, if a user has moved from one domain (DomainA) to another (DomainB), the administrator can replace DomainA\User with DomainB\User in the security information for the user’s files. This gives the user access to the same files from the new domain. SubInACL enables administrators to do the following:

• Display security information associated with files, registry keys, or services. This information includes owner, group, permission access control list (ACL), discretionary ACL (DACL), and system ACL (SACL).
• Change the owner of an object.
• Replace the security information for one identifier (account, group, well-known security identifier (SID)) with that of another identifier.
• Migrate security information about objects. This is useful if you have reorganized a network’s domains and need to migrate the security information for files from one domain to another.

Subsequently, running the following commands fixed my registry error (after copying SubInAcl.exe to my PATH) and I am now running Office 2010 without any problems.

subinacl /subkeyreg HKEY_LOCAL_MACHINE /setowner=administrators

subinacl /subkeyreg HKEY_CURRENT_USER /setowner=administrators

subinacl /subkeyreg HKEY_CLASSES_ROOT /setowner=administrators

subinacl /subkeyreg HKEY_LOCAL_MACHINE /grant=administrators=f /grant=system=f

subinacl /subkeyreg HKEY_CURRENT_USER /grant=administrators=f /grant=system=f

subinacl /subkeyreg HKEY_CLASSES_ROOT /grant=administrators=f /grant=system=f

Fix the Event Log service error ‘Access Denied’ after a restore of a Windows Server 2008 server

After preforming a disaster recovery of a Windows Server 2008 server, the Event Log service wouldn’t start. Manually trying to start it resulted in an Access Denied error.

A very helpful post in the Technet Forums, pointed me in the right direction: The correct permission on the event logs folder was missing.

Executing the following command fixed my problem:

ICACLS C:\Windows\System32\winevt\logs /grant *S-1-5-80-880578595-1860270145-482643319-2788375705-1540778122:(F)

This gives the EventLog group full permission on the folder C:\Windows\System32\winevt\logs.

Fix Exchange 2007 Export-Mailbox error “ID no: 00000000-0000-00000000, error code: -1056749164”

While trying to export a mailbox to a pst file (Export-Mailbox -Identity yuri.dejager -PSTFolderPath E:\yuri.dejager.pst -BadItemLimit 65000 -ExcludeFolders “\Deleted Items”) I received the following error:

MAPI or an unspecified service provider.

ID no: 00000000-0000-00000000, error code: -1056749164

At line:1 char:15

Thanks to a Technet forum thread I quickly found it to be a permission problem. The following command fixed things:

Add-mailboxpermission -identity yuri.dejager -accessrights fullaccess -user <user which executes the Export-Mailbox command>

You, of course, need to have permission to successfully execute this command =)