The following post claims a fix suggested by MS!http://www.xoxideforums.com/networking/76388-vista-giving-you-server-2.html#post989337I verified it and it fixed the problem under my vista business. I don't have AIM installed. I ran into the issue after playing around with IIS7 authentication settings and granting admin rights to IIS7/ASP.NET related accounts. After this, I got the server execution failed error and all the other symptoms. My visual studio 2005 also crapped out with an error indicating not having permission to access some registry keys when compiling. So I suspect this issue has something to do with registry permission that somehow got messed up.I feel better about this fix than simply granting admin rights to SERVICE or LOCAL SERVICE accounts.NOTE: Backup your registry or create system restore point before you try the fix!

As I have said in many other posts, adding Local Service as an administrator is just plain stupid. Read http://www.microsoft.com/technet/security/guidance/serversecurity/serviceaccount/sspgch02.mspx for more information. Local Service account The Local Service account is a special built-in account that has reduced privileges similar to an authenticated local user account. This limited access helps safeguard the computer if an attacker compromises individual services or processes. A service that runs as the Local Service account accesses network resources as a null session; that is, it uses anonymous credentials. The actual name of the account is NTAUTHORITY\LocalService, and it does not have a password that an administrator needs to manage. TechRepublic also has an article on the subject of the services accounts: http://articles.techrepublic.com.com/2415-10877_11-94725.html LocalService account: The LocalService account has minimum rights on the local computer and uses anonymous credentials on the network. This account has reduced privileges and acts in a similar fashion to an authenticated local user account. Use of this account is useful when the LocalSystem account provides too much access for services that do not need deep access to a system. Adding LocalService as an administrator completely defeats the purpose of having a local service account in the first place. This is NOT a solved issue, I see only an insecure workaround that compromises the security of my computer and I will not accept that solution. This is not a solution from Microsoft, as I have NOT seen ANYONE from Microsoft reccomend this, the only people posting this solution are xoxicde users and I don't believe this would come from Microsoft at all.

Obviously, youonly read the thread subject and DID NOT read my post. CHECK THE LINK IN MY POST. The solution DOES NOT USE "Adding Local Service". The post claims that the solution comes from MS. I verified it and it DOES solve the issue WITHOUT the need ofmaking LOCAL SERVICE an admin. 1. Back up registry 2. Install SubinACLhttp://www.microsoft.com/downloads/details.aspx?FamilyID=e8ba3e56-d8fe-4a91-93cf-ed6985e3927b&displaylang=en 3. Run the following commands in sequence subinacl /subkeyreg HKEY_LOCAL_MACHINE /grant=administrators=f /grant=system=fsubinacl /subkeyreg HKEY_CLASSES_ROOT /grant=administrators=f /grant=system=f subinacl /subkeyreg HKEY_CURRENT_USER /grant=administrators=f /grant=system=fsubinacl /subdirectories %SystemDrive% /grant=administrators=f /grant=system=f secedit /configure /cfg %windir%\inf\defltbase.inf /db defltbase.sdb /verbose 4. Reboot

Edward77, I owe you an apology. It was late at night and the link you posted was the same link as the "LocalService" fix so I didn't bother clicking it. SubInACL is NOT compatible with Windows Vista, and I do NOT reccomend using it. Windows Vista has a tool built-in to control ACL Permissions in the command line (called icacls, visithttp://technet.microsoft.com/en-us/magazine/cc138006.aspxfor more information), but after reviewing each of those lines, I realized that those steps aren't evennecessessary, since the LocalService "fix" was enough to resolve the issue, then just resetting Security level permissions back to default should work (see http://support.microsoft.com/kb/313222) Ignore the other instructions, this one line should be all you need: secedit /configure /cfg %windir%\inf\defltbase.inf /db defltbase.sdb /verbose then Reboot I wasimpressed and relievedthat that solution actually worked. Since it is resetting all services back to their default permissions, it will not compromise security as the LocalService fix does, and it did everything I needed it to. This solution WILL NOT compromise your system, DOES NOT REQUIRE SUBINACL TO BE INSTALLED, and has worked quite well for me. Thank you again Edward77 for leading me in the right direction! Again, DO NOT RUN THE "LOCALSERVICE" FIX, IT IS A SECURITY RISK. The proper fix, from what I gather, is to reset all security permissions to their defaults. This can be accomplished by running that line in the Command Prompt in administrator mode.

HOLY ***!!! That MIGHT have fixed my dhcp issues that i have been suffering with since joining my laptop to our corporate dhcp domain like a year ago!Thanks a billion!Though we'll see if the fix will continue to work once i connect back to my corporate network tomorrow. For tonight though (or this morning) i am ecstatic that i am actually able to get a dhcp address from my linksys router. and yes, there is NO WAY that i'll give local service full admin rights to my PCs both at home and definitely not at work!

jhassett1523, for the record, did you install SubinACL, or were you able to resolve your issue using just the security settings reset? To re-state the security settings reset, I am just copying and pasting the steps from http://support.microsoft.com/kb/313222.That seems to be the fix, since you should be able to ignore the SubinACL install or any of the commands related to it. 1. Click Start, click Run, type cmd, type ENTER:2. For Windows Vista, type the following command, and then press ENTER: secedit /configure /cfg %windir%\inf\defltbase.inf /db defltbase.sdb /verbose3. You receive a "Task is completed" message, and a warning message that something could not be done. You can safely ignore this message. For more information about this message, view the %windir%\Security\Logs\Scesrv.log file.Note In Windows Vista, the defltbase.inf file is a Security configuration template for the default security. You can view the settings for this file in the following location: %windir%\inf\defltbase.inf I am glad this has helped someone! If anyone else has similar results, please post here to keep the thread going

Ramy and edward, I was able to resolve the issue with just hte security settings reset. I did not run the subinACL install or any of the other commands. I had already changed the broadcast flags as well as the other fixes through the tool here: To use the tool is simple 1. Click on "Query Adapter" to get the list of network adapters in your systmer 2. Select the adapter you wish to fix. Reboot your system and see if you can get an IP from DHCP. 3. If you wish to undo the fix, select the adapter and choose "Reset to Vista Default". Download it HERE. 23/3/2008 Update Upon request from some friend with sonicwall problems I have added arpretrycount to the tool. Hope this helpsmore people download it HERE... 10/4/2008 Update Reported by one of our readers DhcpConnEnableBcastFlagToggle should be the correct registry key so in order to cover all areas I added this registry key tweak to the tool. So it might actually help some more people... Thanks to Milan Oravec for the tip.. Download it HERE... I had tried the broadcast flag on 2 other PCs with no luck in the past. This still did not fix it. I was hoping that sp1 would also help, but it didn't. I didn't have any problems with DHCP until i joined our corporate domain. then, i could NOT receive addresses from any dhcp server whether home routers such as linksys, netgear, or belkin, nor from my cisco routers at work (when testing), nor from at least 6 different win2k3 dhcp servers at various branches for my organization. There must be something that the windows2003 GPO seems to screw up with the default security settings when you join a domain. None of my XP machines have any problems. I'm just so happy that it works. now i can start testing vista with our legacy applications. Also, i could NEVER get my bluetooth mouse and keyboard to connect to this laptop (m1710) as when i went to add the bluetooth services after the device was discovered. It would always tell me access denied (i'm an administrator of the laptop of course) when trying to download the HID device drivers. Well, this fix ALSO FIXED THAT. i had read about all sorts of problems with people trying to share files between xp and vista, and i hadn't tried this in the past, but it is working with no problems. not sure if that's from sp1 or this fix. My boss has a vista machine at home that was upgraded and runs fine besides NOT being able to share files or printers with his daughters' xp machines. I've given him sp1 on a disc, and also the command for this fix. i should know thursday which one fixes their issues with sharing and seeing PCs on his wireless/wired network at home. He's doing sp1 first, and then if that doesn' work, he's going to try the secedit command. Seriously. i've been dealing with having to change the static ip address EVERYWHERE i went for EVERY NETWORK i connected to.I've now been to 3 different networks, and used a variety of connected and wireless connections and each time its gotten the dhcp address with no problems. It also picked up the reservation i made for this laptop a long time ago when at my datacenter. seriously. vista just rose from a 3/10 to a 7/10 with JUST THIS FIX. Thanks again.

Well, Unfortunately.After last night's updates....I can no longer receive dhcp addresses from mycorporate windows 2003 dhcp server.So i will try the verbose secedit fix AGAIN.Really. I don't know what the problem is with vista, but its very hard to justify moving 240 PCs to it when XP just works.

A BIG thanks goes out to Edward 77 and Ramzypro for figuring out this issue. I've posted on a few other forums which I will reply and correct to this fix instead of the adding "Local Service" fix that I have cross posted on some of them. This fixed both the Networking error messages (COM + Event Host etc), the network not realizing you are connected (but really are), as well as missing information in System Properties...all of which are due to some glitch in loading SP1 and NOT from having AOL IM. I'm not sure about the DHCP issue, as I am but an intermediate computer operator...not a programmer or sys admin,however decent at troubleshooting as well as research on forums for issues. I hope that gets fixed for you soon though jhassett1523. Thanks again for those who helped find this solution!

Ramzypro wrote: Edward77, I owe you an apology. It was late at night and the link you posted was the same link as the "LocalService" fix so I didn't bother clicking it. SubInACL is NOT compatible with Windows Vista, and I do NOT reccomend using it. Windows Vista has a tool built-in to control ACL Permissions in the command line (called icacls, visithttp://technet.microsoft.com/en-us/magazine/cc138006.aspxfor more information), but after reviewing each of those lines, I realized that those steps aren't evennecessessary, since the LocalService "fix" was enough to resolve the issue, then just resetting Security level permissions back to default should work (see http://support.microsoft.com/kb/313222) Ignore the other instructions, this one line should be all you need: secedit /configure /cfg %windir%\inf\defltbase.inf /db defltbase.sdb /verbose then Reboot I wasimpressed and relievedthat that solution actually worked. Since it is resetting all services back to their default permissions, it will not compromise security as the LocalService fix does, and it did everything I needed it to. This solution WILL NOT compromise your system, DOES NOT REQUIRE SUBINACL TO BE INSTALLED, and has worked quite well for me. Thank you again Edward77 for leading me in the right direction! Again, DO NOT RUN THE "LOCALSERVICE" FIX, IT IS A SECURITY RISK. The proper fix, from what I gather, is to reset all security permissions to their defaults. This can be accomplished by running that line in the Command Prompt in administrator mode.I tried this and I got the ""Task is completed" message, and a warning message that something could not be done."But when I rebooted it didn't help out at all.I'm on vista home premium with SP1 installed.I tried the Localservice fix as well, but I got System Error 1376.Any ideas why?

Many thanks! This worked a treat, and I don't have to worry about the Local Service securit hole. Subinacl might be for XP, but it fixed my Vista installation. Just using the security command alone did not. I was having the red X on the network icon, no sound playback(despite device manager saying all was well, and re-installing sound drivers), and system info that would not display. After trying everything else, this worked!

The secedit fix is unnecessary for 99% of users. From the summary of the secedit fix, "You should should only follow these steps when a security change has been applied to the computer that has negative affects and when no backup is available to restore from." Before you manually reset your security settings, FIRST TRY A SYSTEM RESTORE. Secedit should only be usedwhen system restore fails or was turned off. Vista does not show all available restore points, by default it hides them! Your computer should have lots of system restore points. They are normally hidden, but easy to access. Unless you manuallycrippled your system restore disk usage settings, you will have several months of restore points.System Restore first showsoptions ofa recommended restore point, or choose a different restore point. Select Choose a different restore point. Then system restore shows a list of five days worth of restore points. Check the box at the bottom of the window to Display restore points older than five days. Restore to right before the (com+ system stopped working/red x appeared on network icon/system info disappeared) Turn on UAC Reinstall the software that broke your system (ie AIM). Run Windows update. Do NOT do the localgroup administrator "fix" under any circumstances. If you just installed AIM, you MUST RESTORE not UNINSTALL, and you MUST enable UAC before reinstalling AIM. Thousands have succesfully done this, It is the "Official" Fix to try before the secedit fix (which also works).

Only problem with this...my issues happened about 9 months ago approximately...and there have been many many changes and additions since then I'd care not to lose. So system restore does not work for me and thousands of others who had been waiting for so long for a fix.

Edward77 & RamzyPro, I just used this fix over the internet on a system with the "server failed" notice and resolved the whole issue in one fell swoop! THANK YOU SO MUCH! You are truly worth your weight in GOLD! We are not worthy! We are not worthy! We are not worthy!!!

1. Back up registry 2. Install SubinACL http://www.microsoft.com/downloads/details.aspx?FamilyID=e8ba3e56-d8fe-4a91-93cf-ed6985e3927b&displaylang=en 3. Run the following commands in sequence subinacl /subkeyreg HKEY_LOCAL_MACHINE /grant=administrators=f /grant=system=f subinacl /subkeyreg HKEY_CLASSES_ROOT /grant=administrators=f /grant=system=f subinacl /subkeyreg HKEY_CURRENT_USER /grant=administrators=f /grant=system=f subinacl /subdirectories %SystemDrive% /grant=administrators=f /grant=system=f secedit /configure /cfg %windir%\inf\defltbase.inf /db defltbase.sdb /verbose 4. Reboot I get an error. The command "subinacl" was either written wrong or could not be found. I tried the Local Host solution (error 13xx), the secedit solution (rebooted, nothing changed), this one (doesn't recognize subinacl as a command), and another approach that involved going into my computer, manage, groups, but I'm on vista home sp1 and groups wasn't there. I think this problem is at the root of why my IE won't connect despite Firefox connecting without a problem, why I can't make updates to most of my games, and can't connect for updates through most programs built in updater.