Symptoms :

On already activated KMS client a Windows Activation window comes up with the error

An error has occurred:

Code: 0xC004D302

Description: The Security processor reported that the trusted data store was rearmed.

Cause :

1. Changes in the default permissions of the "C:\ProgramData\Microsoft\Crypto\RSA\MachineKeys" .

2. Corruption in the Licensing Files.  (tokens.dat)

3. If you have run the slmgr.vbs /rearm command and try to run any other activation command(/dlv or /dli for example) prior to rebooting you will experience this error.  You must reboot after using the slmgr.vbs /rearm command prior to attempting activation.

Resolution:

1. Change the directory on the command prompt by typing in

(For Vista and Windows 2008)

cd "%windir%\ServiceProfiles\NetworkService\AppData\Roaming\Microsoft\SoftwareLicensing"

(For Win 7 and Windows 2008 R2)

cd "%windir%\ServiceProfiles\NetworkService\AppData\Roaming\Microsoft\SoftwareProtectionPlatform"

2. Backupy tokens.dat to tokens.old  by typing the command and copy the token.dat from activated machine.

ren tokens.dat tokens.old

3. Activated using slmgr command by typing in

- slmgr –ato  (using Internet)

- slui.exe -4  (using telephone)

[USB裝置鎖定執行步驟]

1. 使用者點選USB隨身碟會出現存取被拒:

電腦設定->系統管理範本->系統->卸除式儲存裝置存取權-> 卸除式磁碟: 拒絕讀取存取權

結果: 點選隨身碟裝製出現存取被拒.

2. 針對尚未安裝driver的USB隨身碟:

電腦設定->系統管理範本->系統->裝置安裝->裝置安裝限制->防止安裝卸除式裝置

結果: 使用者插入新的隨身碟後出現無法安裝driver.

3. 針對已經安裝driver的USB隨身碟

將以下的機碼透過startup script 匯入到使用者電腦:

===========================================================

Windows Registry Editor Version 5.00

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\USBSTOR]

"Start"=dword:00000004       

============================================================

結果: 插入隨身碟後會無法使用已經安裝過driver的隨身碟.

問題徵狀：

1.Windows Vista 出現產品無法啟動的訊息，錯誤代碼為0x80070426。

2.檢查Software Licensing 服務無法啟動，啟動時出現0xd0000022錯誤。

問題排除方式：

1. 找到C:\Windows\system32\7B296FB0….開頭的二個檔案(如下圖)，按右鍵，在一般的TAB裏，將唯讀的選項拿掉，重新開機後再試一次啟動Software Licensing服務，確認是否可以解決。

2. 如果做了以上的步驟沒有用，請您在這二個檔案上，去比對其NTFS的權限和正常的機器權限是否有不同?如果不同的話，請將它改成一樣後，再嘗試啟動Software Licensing服務。

3.如果Software Licensing服務可以啟動後，再檢查Windows 的啟動問題是否已解決。

問題現象 –

Winrm quickconfig

WSManFault

    Message

        ProviderFault

            WSManFault

                Message

Error number:  -2147024894 0x80070002

問題成因 - Firewall issue

解決方案 –

you can try to a new Rule in Windows Firewall with Advanced security-> Port : TCP – 5985

Action: Allow all connection

Profile: Selected all network profile

Name: "Windows Remote Management (HTTP-In)"

Next - Finish.

Open Properties for this rule and then on the Program and Services tab, selected All Services.

If the steps action not work.

Please try to disable windows firewall services then run the command. then you can start windows firewall service.

Problem
========
The DC server runs out of memory after install SCOM Agent

Analyze
=========
事件類型: 警告
事件來源: Health Service Script
事件類別目錄: 無
事件識別碼: 19
描述:
AD Op Master Response : The script 'AD Op Master Response' could not determine the schema Op Master.The error returned was: 'LDAP://CN=Schema,CN=Configuration,DC=corp,DC=cht,DC=com,DC=tw' (0x8007046A)

事件類型: 警告
事件來源: Health Service Script
事件類別目錄: 無
事件識別碼: 1000
描述:
AD Replication Monitoring : encountered a runtime error.
Failed to convert to UTC time.
The error returned was: 'RPC 伺服器忙線中，無法完成此操作。' (0x800706BB)

事件類型: 錯誤
事件來源: Health Service Script
事件類別目錄: 無
事件識別碼: 4001
電腦: XXXDC
描述:
Microsoft.Windows.Server.LogicalDiskHealthCheck.vbs : Unable to open WMI Namespace 'winmgmts:\\XXXDC.msft.com\root\cimv2'. Check to see if the WMI service is enabled and running, and ensure this WMI namespace exists..

Solution
==========
1. Install  CScript 5.7 on DC
     http://support.microsoft.com/kb/955360

2. Recompiled the WMI files using the bellow batch file and that stopped the errors:

C:
cd\windows\system32\wbem
regsvr32 /s %systemroot%\system32\scecli.dll
regsvr32 /s %systemroot%\system32\userenv.dll
mofcomp cimwin32.mof
mofcomp cimwin32.mfl
mofcomp rsop.mof
mofcomp rsop.mfl
for /f %%s in ('dir /b /s *.dll') do regsvr32 /s %%s
for /f %%s in ('dir /b *.mof') do mofcomp %%s
for /f %%s in ('dir /b *.mfl') do mofcomp %%s
PAUSE
winmgmt /regserver
wmiprvse /regserver

3. Clear cache on RMS and DC

1. Stop the MOM Health Service on the RMS server and DC.
2. Delete all files in C:\Program Files\System Center Operations Manager 2007\Health Service State\
3. Start the MOM Health Service on RMS.
4. Check C:\Program Files\System Center Operations Manager 2007\Health Service State\ to verify the files were recreated.
5. Start the MOM Health Service on DC.
6. Check C:\Program Files\System Center Operations Manager 2007\Health Service State\ to verify the files were recreated.