Sycnex / Windows10Debloater

Script to remove Windows 10 bloatware.
MIT License
18.09k stars 2.05k forks source link

Trouble with Read/Write permissions after running #56

Closed BlutUndEisen closed 5 years ago

BlutUndEisen commented 5 years ago

I've run it on two patched Win 10 1803 computers in the last week and it completes the debloat but afterward I get errors ("Error 0x80070522, A Required Privilege Is Not Held By The Client"). I managed to resolve it fairly quickly by enabling the magic admin account (net user administrator) and re-enabling full control for Administrators and read/write for authenticated users (doing just one didn't seem to fix it). Wondering if this is something in the script or just an EBKAC. Tested just now on another system, same result except when I changed the permissions for the user it still did not correct the problem and I couldn't copy to the C:\ drive.

Sycnex commented 5 years ago

After doing some reading online, it looks like it is a permissions issue overall, with possible issues within the Registry or the user profile that is being used. I have not experienced this before. Are you using the same image for all of these machines?

Here is a good link with some solutions:

https://www.thewindowsclub.com/required-privilege-not-held-client

smith581 commented 5 years ago

Well if you’re running the script within MDT it’s already running as system account which has admin rights so I don’t know why it would be a permissions issue necessarily

Sent from iPhone

On Oct 18, 2018, at 8:05 PM, Richard Newton notifications@github.com<mailto:notifications@github.com> wrote:

After doing some reading online, it looks like it is a permissions issue overall, with possible issues within the Registry or the user profile that is being used. I have not experienced this before. Are you using the same image for all of these machines?

Here is a good link with some solutions:

https://www.thewindowsclub.com/required-privilege-not-held-clienthttps://eur03.safelinks.protection.outlook.com/?url=https%3A%2F%2Fwww.thewindowsclub.com%2Frequired-privilege-not-held-client&data=02%7C01%7C%7C904d5bdd49ea420d012a08d6356faf50%7C84df9e7fe9f640afb435aaaaaaaaaaaa%7C1%7C0%7C636755151123478269&sdata=UPQK9Zj1N6tpwmp%2BrnTZi5HxyO7pURpRm4LQRJVyKAI%3D&reserved=0

— You are receiving this because you are subscribed to this thread. Reply to this email directly, view it on GitHubhttps://eur03.safelinks.protection.outlook.com/?url=https%3A%2F%2Fgithub.com%2FSycnex%2FWindows10Debloater%2Fissues%2F56%23issuecomment-431230517&data=02%7C01%7C%7C904d5bdd49ea420d012a08d6356faf50%7C84df9e7fe9f640afb435aaaaaaaaaaaa%7C1%7C0%7C636755151123478269&sdata=CGCkFCotANKki%2FghRoAcStFkI601mlyZfEsvRh7clp4%3D&reserved=0, or mute the threadhttps://eur03.safelinks.protection.outlook.com/?url=https%3A%2F%2Fgithub.com%2Fnotifications%2Funsubscribe-auth%2FAJjNA7qwdIyFVnKF70ggvIU3jvYjMJTKks5umUFmgaJpZM4Xj54z&data=02%7C01%7C%7C904d5bdd49ea420d012a08d6356faf50%7C84df9e7fe9f640afb435aaaaaaaaaaaa%7C1%7C0%7C636755151123478269&sdata=SOsUjNFCs3UGCX12pnay4C1WVmXhvlck7%2Frnsgx3e%2BI%3D&reserved=0.

Sycnex commented 5 years ago

Ah, understood. I wasn't sure if this was when using MDT or just manually doing it.

Have you tried it on a separate machine that wasn't imaged when using MDT?

On Thu, Oct 18, 2018, 8:10 PM smith581 notifications@github.com wrote:

Well if you’re running the script within MDT it’s already running as system account which has admin rights so I don’t know why it would be a permissions issue necessarily

Sent from iPhone

On Oct 18, 2018, at 8:05 PM, Richard Newton <notifications@github.com mailto:notifications@github.com> wrote:

After doing some reading online, it looks like it is a permissions issue overall, with possible issues within the Registry or the user profile that is being used. I have not experienced this before. Are you using the same image for all of these machines?

Here is a good link with some solutions:

https://www.thewindowsclub.com/required-privilege-not-held-client< https://eur03.safelinks.protection.outlook.com/?url=https%3A%2F%2Fwww.thewindowsclub.com%2Frequired-privilege-not-held-client&data=02%7C01%7C%7C904d5bdd49ea420d012a08d6356faf50%7C84df9e7fe9f640afb435aaaaaaaaaaaa%7C1%7C0%7C636755151123478269&sdata=UPQK9Zj1N6tpwmp%2BrnTZi5HxyO7pURpRm4LQRJVyKAI%3D&reserved=0>

— You are receiving this because you are subscribed to this thread. Reply to this email directly, view it on GitHub< https://eur03.safelinks.protection.outlook.com/?url=https%3A%2F%2Fgithub.com%2FSycnex%2FWindows10Debloater%2Fissues%2F56%23issuecomment-431230517&data=02%7C01%7C%7C904d5bdd49ea420d012a08d6356faf50%7C84df9e7fe9f640afb435aaaaaaaaaaaa%7C1%7C0%7C636755151123478269&sdata=CGCkFCotANKki%2FghRoAcStFkI601mlyZfEsvRh7clp4%3D&reserved=0>, or mute the thread< https://eur03.safelinks.protection.outlook.com/?url=https%3A%2F%2Fgithub.com%2Fnotifications%2Funsubscribe-auth%2FAJjNA7qwdIyFVnKF70ggvIU3jvYjMJTKks5umUFmgaJpZM4Xj54z&data=02%7C01%7C%7C904d5bdd49ea420d012a08d6356faf50%7C84df9e7fe9f640afb435aaaaaaaaaaaa%7C1%7C0%7C636755151123478269&sdata=SOsUjNFCs3UGCX12pnay4C1WVmXhvlck7%2Frnsgx3e%2BI%3D&reserved=0>.

— You are receiving this because you commented. Reply to this email directly, view it on GitHub https://github.com/Sycnex/Windows10Debloater/issues/56#issuecomment-431231202, or mute the thread https://github.com/notifications/unsubscribe-auth/AHCc4Kiklw4JgatDnSROQaVDh4WzSsoEks5umUKPgaJpZM4Xj54z .

smith581 commented 5 years ago

I was responding to the thread it works for me 100%

Get Outlook for iOShttps://aka.ms/o0ukef


From: Richard Newton notifications@github.com Sent: Thursday, October 18, 2018 8:11:35 PM To: Sycnex/Windows10Debloater Cc: smith581; Comment Subject: Re: [Sycnex/Windows10Debloater] Trouble with Read/Write permissions after running (#56)

Ah, understood. I wasn't sure if this was when using MDT or just manually doing it.

Have you tried it on a separate machine that wasn't imaged when using MDT?

On Thu, Oct 18, 2018, 8:10 PM smith581 notifications@github.com wrote:

Well if you’re running the script within MDT it’s already running as system account which has admin rights so I don’t know why it would be a permissions issue necessarily

Sent from iPhone

On Oct 18, 2018, at 8:05 PM, Richard Newton <notifications@github.com mailto:notifications@github.com> wrote:

After doing some reading online, it looks like it is a permissions issue overall, with possible issues within the Registry or the user profile that is being used. I have not experienced this before. Are you using the same image for all of these machines?

Here is a good link with some solutions:

https://www.thewindowsclub.com/required-privilege-not-held-client< https://eur03.safelinks.protection.outlook.com/?url=https%3A%2F%2Fwww.thewindowsclub.com%2Frequired-privilege-not-held-client&data=02%7C01%7C%7C904d5bdd49ea420d012a08d6356faf50%7C84df9e7fe9f640afb435aaaaaaaaaaaa%7C1%7C0%7C636755151123478269&sdata=UPQK9Zj1N6tpwmp%2BrnTZi5HxyO7pURpRm4LQRJVyKAI%3D&reserved=0>

— You are receiving this because you are subscribed to this thread. Reply to this email directly, view it on GitHub< https://eur03.safelinks.protection.outlook.com/?url=https%3A%2F%2Fgithub.com%2FSycnex%2FWindows10Debloater%2Fissues%2F56%23issuecomment-431230517&data=02%7C01%7C%7C904d5bdd49ea420d012a08d6356faf50%7C84df9e7fe9f640afb435aaaaaaaaaaaa%7C1%7C0%7C636755151123478269&sdata=CGCkFCotANKki%2FghRoAcStFkI601mlyZfEsvRh7clp4%3D&reserved=0>, or mute the thread< https://eur03.safelinks.protection.outlook.com/?url=https%3A%2F%2Fgithub.com%2Fnotifications%2Funsubscribe-auth%2FAJjNA7qwdIyFVnKF70ggvIU3jvYjMJTKks5umUFmgaJpZM4Xj54z&data=02%7C01%7C%7C904d5bdd49ea420d012a08d6356faf50%7C84df9e7fe9f640afb435aaaaaaaaaaaa%7C1%7C0%7C636755151123478269&sdata=SOsUjNFCs3UGCX12pnay4C1WVmXhvlck7%2Frnsgx3e%2BI%3D&reserved=0>.

— You are receiving this because you commented. Reply to this email directly, view it on GitHub https://github.com/Sycnex/Windows10Debloater/issues/56#issuecomment-431231202, or mute the thread https://github.com/notifications/unsubscribe-auth/AHCc4Kiklw4JgatDnSROQaVDh4WzSsoEks5umUKPgaJpZM4Xj54z .

— You are receiving this because you commented. Reply to this email directly, view it on GitHubhttps://nam02.safelinks.protection.outlook.com/?url=https%3A%2F%2Fgithub.com%2FSycnex%2FWindows10Debloater%2Fissues%2F56%23issuecomment-431231405&data=02%7C01%7C%7C45004130e87b4f041b9708d63570944b%7C84df9e7fe9f640afb435aaaaaaaaaaaa%7C1%7C0%7C636755154966623508&sdata=9lq51BplaLTcbLLK%2FlIjiuzXwXbUBTeHtaYl10RkWSY%3D&reserved=0, or mute the threadhttps://nam02.safelinks.protection.outlook.com/?url=https%3A%2F%2Fgithub.com%2Fnotifications%2Funsubscribe-auth%2FAJjNA3c2UmgGmZxtNSk_GhvvYZYXM-utks5umULngaJpZM4Xj54z&data=02%7C01%7C%7C45004130e87b4f041b9708d63570944b%7C84df9e7fe9f640afb435aaaaaaaaaaaa%7C1%7C0%7C636755154966623508&sdata=gzO65iX6SlfUKweOu2DAUW8Jtm7H7kdC68s9fZcsxAs%3D&reserved=0.

Sycnex commented 5 years ago

Whoops, I mixed around the names. Lol.

On Thu, Oct 18, 2018, 8:13 PM smith581 notifications@github.com wrote:

I was responding to the thread it works for me 100%

Get Outlook for iOShttps://aka.ms/o0ukef


From: Richard Newton notifications@github.com Sent: Thursday, October 18, 2018 8:11:35 PM To: Sycnex/Windows10Debloater Cc: smith581; Comment Subject: Re: [Sycnex/Windows10Debloater] Trouble with Read/Write permissions after running (#56)

Ah, understood. I wasn't sure if this was when using MDT or just manually doing it.

Have you tried it on a separate machine that wasn't imaged when using MDT?

On Thu, Oct 18, 2018, 8:10 PM smith581 notifications@github.com wrote:

Well if you’re running the script within MDT it’s already running as system account which has admin rights so I don’t know why it would be a permissions issue necessarily

Sent from iPhone

On Oct 18, 2018, at 8:05 PM, Richard Newton <notifications@github.com mailto:notifications@github.com> wrote:

After doing some reading online, it looks like it is a permissions issue overall, with possible issues within the Registry or the user profile that is being used. I have not experienced this before. Are you using the same image for all of these machines?

Here is a good link with some solutions:

https://www.thewindowsclub.com/required-privilege-not-held-client<

https://eur03.safelinks.protection.outlook.com/?url=https%3A%2F%2Fwww.thewindowsclub.com%2Frequired-privilege-not-held-client&data=02%7C01%7C%7C904d5bdd49ea420d012a08d6356faf50%7C84df9e7fe9f640afb435aaaaaaaaaaaa%7C1%7C0%7C636755151123478269&sdata=UPQK9Zj1N6tpwmp%2BrnTZi5HxyO7pURpRm4LQRJVyKAI%3D&reserved=0

— You are receiving this because you are subscribed to this thread. Reply to this email directly, view it on GitHub<

https://eur03.safelinks.protection.outlook.com/?url=https%3A%2F%2Fgithub.com%2FSycnex%2FWindows10Debloater%2Fissues%2F56%23issuecomment-431230517&data=02%7C01%7C%7C904d5bdd49ea420d012a08d6356faf50%7C84df9e7fe9f640afb435aaaaaaaaaaaa%7C1%7C0%7C636755151123478269&sdata=CGCkFCotANKki%2FghRoAcStFkI601mlyZfEsvRh7clp4%3D&reserved=0 , or mute the thread<

https://eur03.safelinks.protection.outlook.com/?url=https%3A%2F%2Fgithub.com%2Fnotifications%2Funsubscribe-auth%2FAJjNA7qwdIyFVnKF70ggvIU3jvYjMJTKks5umUFmgaJpZM4Xj54z&data=02%7C01%7C%7C904d5bdd49ea420d012a08d6356faf50%7C84df9e7fe9f640afb435aaaaaaaaaaaa%7C1%7C0%7C636755151123478269&sdata=SOsUjNFCs3UGCX12pnay4C1WVmXhvlck7%2Frnsgx3e%2BI%3D&reserved=0 .

— You are receiving this because you commented. Reply to this email directly, view it on GitHub < https://github.com/Sycnex/Windows10Debloater/issues/56#issuecomment-431231202 , or mute the thread < https://github.com/notifications/unsubscribe-auth/AHCc4Kiklw4JgatDnSROQaVDh4WzSsoEks5umUKPgaJpZM4Xj54z

.

— You are receiving this because you commented. Reply to this email directly, view it on GitHub< https://nam02.safelinks.protection.outlook.com/?url=https%3A%2F%2Fgithub.com%2FSycnex%2FWindows10Debloater%2Fissues%2F56%23issuecomment-431231405&data=02%7C01%7C%7C45004130e87b4f041b9708d63570944b%7C84df9e7fe9f640afb435aaaaaaaaaaaa%7C1%7C0%7C636755154966623508&sdata=9lq51BplaLTcbLLK%2FlIjiuzXwXbUBTeHtaYl10RkWSY%3D&reserved=0>, or mute the thread< https://nam02.safelinks.protection.outlook.com/?url=https%3A%2F%2Fgithub.com%2Fnotifications%2Funsubscribe-auth%2FAJjNA3c2UmgGmZxtNSk_GhvvYZYXM-utks5umULngaJpZM4Xj54z&data=02%7C01%7C%7C45004130e87b4f041b9708d63570944b%7C84df9e7fe9f640afb435aaaaaaaaaaaa%7C1%7C0%7C636755154966623508&sdata=gzO65iX6SlfUKweOu2DAUW8Jtm7H7kdC68s9fZcsxAs%3D&reserved=0

.

— You are receiving this because you commented. Reply to this email directly, view it on GitHub https://github.com/Sycnex/Windows10Debloater/issues/56#issuecomment-431231647, or mute the thread https://github.com/notifications/unsubscribe-auth/AHCc4DhIeupF3TCOddrOQGJoP5oEn1qQks5umUNRgaJpZM4Xj54z .

Sycnex commented 5 years ago

@BlutUndEisen Any updates? If not can I close it?

BlutUndEisen commented 5 years ago

I haven't been able to replicate it with a fresh ISO from MS, so for now yes. If I run into the problem again I'll gather more info and make another issue. Otherwise, I'll chalk it up to something related to the image we used. Furthermore, there doesn't seem to be any lingering effects if I go back after the install and just reestablish R/W permissions for admins on the drive.