Are E_ACCESSDENIED CBS errors on cleanup tasks normal for offline servicing, or harmless side-effect of NTLite's behavior?

R

Rikomenar

Member
Hi

When removing or adding updates (packages, msu, cab) the DISM logs show the CBS component having trouble accessing several things such as deleting registry keys/values and a few other things, from the look of it, while I'm not experienced, but I used DISM standalone before and somewhat familiar with the logs, I don't see anything major happening wrong, but unsure.

Code: 
2021-06-18 01:16:09, Info                  CBS    Failed to set security info when trying to delete registry key with backup/restore privileges. [HRESULT = 0x80070005 - E_ACCESSDENIED]
2021-06-18 01:16:09, Info                  CBS    Failed to set security info when trying to delete registry key with backup/restore privileges. [HRESULT = 0x80070005 - E_ACCESSDENIED]
2021-06-18 01:16:09, Info                  CBS    Failed to set security info when trying to delete registry key with backup/restore privileges. [HRESULT = 0x80070005 - E_ACCESSDENIED]
2021-06-18 01:16:09, Info                  CBS    Failed to delete key recursively. [HRESULT = 0x80070005 - E_ACCESSDENIED]
2021-06-18 01:16:09, Info                  CBS    Failed to delete child registry keys: Microsoft-Hyper-V-Integration-Services-Package~31bf3856ad364e35~amd64~~6.3.9600.17388 [HRESULT = 0x80070005 - E_ACCESSDENIED]
2021-06-18 01:16:09, Info                  CBS    Failed to completely delete store object. [HRESULT = 0x80070005 - E_ACCESSDENIED]
2021-06-18 01:16:09, Info                  CBS    Failed to delete applicability evaluation cache. [HRESULT = 0x80070005 - E_ACCESSDENIED]
2021-06-18 01:16:09, Info                  CBS    Doqe: Completed processing queue
2021-06-18 01:16:09, Info                  CBS    Doqe: Driver operations completed successfully.

Additionally, I got a warning popup dialog about some access denied errors in NTLite after doing a round of updates saving to the image, it's just a quick mention looks like if it findy ANY such error, it's pointing to these ones.

Well, I'll later test the ISO and will see how it did, but if the updates are sort of half-installed and broken perhaps the OS might think it's okay but I wouldn't be able to notice it until further down the line, hopefully it doesn't come to this.


I'm currently doing this with Win7 x64 SP1.
 
Update, after the image save, NTLite reports several updates, the ones that had these access errors as "Skipped" and in Red color, well that's not good, trying to figure out if this is only a GUI thing ...

Update2: Looks like these errors also happen when it's trying to unload registry hive, but notes that "client may still need open", client as in NTLite, which makes sense, but these access errors pop up elsewhere like in this case below:

Code: 
2021-06-18 01:24:43, Error                 CBS    Doqe: Failed clearing Temp driver operations queue key. [HRESULT = 0x80070005 - E_ACCESSDENIED]

2021-06-18 01:24:43, Info                  CBS    Failed clearing the temporary driver operations key [HRESULT = 0x80070005 - E_ACCESSDENIED]

2021-06-18 01:24:43, Info                  CSI    000018ff@2021/6/17:23:24:43.112 CSI Transaction @0x1be9a090 destroyed

2021-06-18 01:24:43, Info                  CBS    Perf: InstallUninstallChain complete.

2021-06-18 01:24:43, Info                  CBS    Failed to execute execution chain. [HRESULT = 0x80070005 - E_ACCESSDENIED]

2021-06-18 01:24:43, Error                 CBS    Failed to process single phase execution. [HRESULT = 0x80070005 - E_ACCESSDENIED]

2021-06-18 01:24:43, Info                  CBS    WER: Generating failure report for package: Package_for_RollupFix~31bf3856ad364e35~amd64~~7601.24544.1.9, status: 0x80070005, failure source: Execute, start state: Staged, target state: Installed, client id: DISM Package Manager Provider

2021-06-18 01:24:43, Info                  CBS    WER: Reporting disabled for testing purposes.  Not submitting report: CbsPackageServicingFailure2

2021-06-18 01:24:43, Info                  CBS    SQM: Reporting package change for package: Package_for_RollupFix~31bf3856ad364e35~amd64~~7601.24544.1.9, current: Absent, pending: Default, start: Absent, applicable: Installed, target: Installed, limit: Installed, hotpatch status: DisabledBecauseNoHotpatchPackagesInitiated, status: 0x0, failure source: Execute, reboot required: False, client id: DISM Package Manager Provider, initiated offline: True, execution sequence: 620, first merged sequence: 620

2021-06-18 01:24:43, Info                  CBS    SQM: Package change report datapoints not populated because SQM is not initialized or not running online.

2021-06-18 01:24:43, Info                  CBS    SQM: Reporting package change completion for package: Package_for_RollupFix~31bf3856ad364e35~amd64~~7601.24544.1.9, current: Staged, original: Absent, target: Installed, status: 0x80070005, failure source: Execute, failure details: "(null)", client id: DISM Package Manager Provider, initiated offline: True, execution sequence: 620, first merged sequence: 620

2021-06-18 01:24:43, Info                  CBS    SQM: Package change report datapoints not populated because SQM is not initialized or not running online.

2021-06-18 01:24:43, Info                  CBS    Failed to set security info when trying to delete registry key with backup/restore privileges. [HRESULT = 0x80070005 - E_ACCESSDENIED]

2021-06-18 01:24:43, Info                  CBS    Failed to set security info when trying to delete registry key with backup/restore privileges. [HRESULT = 0x80070005 - E_ACCESSDENIED]

2021-06-18 01:24:43, Info                  CBS    Failed to set security info when trying to delete registry key with backup/restore privileges. [HRESULT = 0x80070005 - E_ACCESSDENIED]

2021-06-18 01:24:43, Info                  CBS    Failed to delete key recursively. [HRESULT = 0x80070005 - E_ACCESSDENIED]

2021-06-18 01:24:43, Info                  CBS    Failed to delete child registry keys: Microsoft-Hyper-V-Integration-Services-Package~31bf3856ad364e35~amd64~~6.3.9600.17388 [HRESULT = 0x80070005 - E_ACCESSDENIED]

2021-06-18 01:24:43, Info                  CBS    Failed to completely delete store object. [HRESULT = 0x80070005 - E_ACCESSDENIED]

2021-06-18 01:24:43, Info                  CBS    Failed to delete applicability evaluation cache. [HRESULT = 0x80070005 - E_ACCESSDENIED]

2021-06-18 01:24:43, Info                  CBS    Restored system sleep block state: 0x80000000

2021-06-18 01:24:43, Info                  DISM   DISM Package Manager: PID=180116  Error in operation: (null) (CBS HRESULT=0x80070005) - CCbsConUIHandler::Error

2021-06-18 01:24:43, Info                  CBS    Exec: Processing complete.  Session: 180116_906552250, Package: Package_for_RollupFix~31bf3856ad364e35~amd64~~7601.24544.1.9 [HRESULT = 0x80070005 - E_ACCESSDENIED]

2021-06-18 01:24:43, Info                  CBS    Exec: Multi-phase offline operation, session will complete after booting into online

2021-06-18 01:24:43, Error                 CBS    Failed to perform operation.  [HRESULT = 0x80070005 - E_ACCESSDENIED]

2021-06-18 01:24:43, Info                  CBS    Session: 180116_906552250 finalized. Reboot required: no [HRESULT = 0x80070005 - E_ACCESSDENIED]

2021-06-18 01:24:43, Error                 DISM   DISM Package Manager: PID=180116 Failed finalizing changes. - CDISMPackageManager::Internal_Finalize(hr:0x80070005)

2021-06-18 01:24:43, Info                  CBS    Unloading offline registry hive: {bf1a281b-ad7b-4476-ac95-f47682990ce7}C:/Users/User/AppData/Local/Temp/NLTmpMount01/Windows/System32/config/SOFTWARE

2021-06-18 01:24:43, Info                  CBS    Failed to unload offline registry: {bf1a281b-ad7b-4476-ac95-f47682990ce7}C:/Users/User/AppData/Local/Temp/NLTmpMount01/Windows/System32/config/SOFTWARE, the client may still need it open. [HRESULT = 0x80070005 - E_ACCESSDENIED]

2021-06-18 01:24:43, Info                  CBS    Unloading offline registry hive: {bf1a281b-ad7b-4476-ac95-f47682990ce7}C:/Users/User/AppData/Local/Temp/NLTmpMount01/Windows/System32/config/SYSTEM

2021-06-18 01:24:43, Info                  CBS    Failed to unload offline registry: {bf1a281b-ad7b-4476-ac95-f47682990ce7}C:/Users/User/AppData/Local/Temp/NLTmpMount01/Windows/System32/config/SYSTEM, the client may still need it open. [HRESULT = 0x80070005 - E_ACCESSDENIED]

2021-06-18 01:24:43, Info                  CBS    Unloading offline registry hive: {bf1a281b-ad7b-4476-ac95-f47682990ce7}C:/Users/User/AppData/Local/Temp/NLTmpMount01/Windows/System32/config/SECURITY

2021-06-18 01:24:43, Info                  CBS    Failed to unload offline registry: {bf1a281b-ad7b-4476-ac95-f47682990ce7}C:/Users/User/AppData/Local/Temp/NLTmpMount01/Windows/System32/config/SECURITY, the client may still need it open. [HRESULT = 0x80070005 - E_ACCESSDENIED]

2021-06-18 01:24:43, Info                  CBS    Unloading offline registry hive: {bf1a281b-ad7b-4476-ac95-f47682990ce7}C:/Users/User/AppData/Local/Temp/NLTmpMount01/Windows/System32/config/SAM

2021-06-18 01:24:43, Info                  CBS    Failed to unload offline registry: {bf1a281b-ad7b-4476-ac95-f47682990ce7}C:/Users/User/AppData/Local/Temp/NLTmpMount01/Windows/System32/config/SAM, the client may still need it open. [HRESULT = 0x80070005 - E_ACCESSDENIED]

2021-06-18 01:24:43, Info                  CBS    Unloading offline registry hive: {bf1a281b-ad7b-4476-ac95-f47682990ce7}C:/Users/User/AppData/Local/Temp/NLTmpMount01/Windows/System32/config/COMPONENTS

2021-06-18 01:24:43, Info                  CBS    Failed to unload offline registry: {bf1a281b-ad7b-4476-ac95-f47682990ce7}C:/Users/User/AppData/Local/Temp/NLTmpMount01/Windows/System32/config/COMPONENTS, the client may still need it open. [HRESULT = 0x80070005 - E_ACCESSDENIED]

2021-06-18 01:24:43, Info                  CBS    Unloading offline registry hive: {bf1a281b-ad7b-4476-ac95-f47682990ce7}C:/Users/User/AppData/Local/Temp/NLTmpMount01/Windows/System32/config/DEFAULT

2021-06-18 01:24:43, Info                  CBS    Failed to unload offline registry: {bf1a281b-ad7b-4476-ac95-f47682990ce7}C:/Users/User/AppData/Local/Temp/NLTmpMount01/Windows/System32/config/DEFAULT, the client may still need it open. [HRESULT = 0x80070005 - E_ACCESSDENIED]

2021-06-18 01:24:43, Info                  CBS    Unloading offline registry hive: {bf1a281b-ad7b-4476-ac95-f47682990ce7}C:/Users/User/AppData/Local/Temp/NLTmpMount01/Users/default/ntuser.dat

2021-06-18 01:24:43, Info                  CBS    Failed to unload offline registry: {bf1a281b-ad7b-4476-ac95-f47682990ce7}C:/Users/User/AppData/Local/Temp/NLTmpMount01/Users/default/ntuser.dat, the client may still need it open. [HRESULT = 0x80070005 - E_ACCESSDENIED]

However these errors may just be a consequence of something else, such as the update being superseeded and no longer needed ... ?

Update3:

Code: 
2021-06-18 01:21:36, Info                  CBS    Plan: Skipping package since its start state and target state are both absent for package: Package_for_KB3125574_SP1~31bf3856ad364e35~amd64~~6.1.4.4, current: Staged, pending: Default, start: Absent, applicable: Installed, targeted: Absent, limit: Absent

Hmm..
 
Last edited:
There's definitely some wrong reporting going on, the large KB4534310 Monthly Rollup Update (last non-ESU) is mostly installing, individual packages that are already present are skipped but are a minority, while the NTLite GUI reports the whole thing as skipped.


mCiDxAk.png


8nm87ts.png


UPDATE:

Once I reloaded the Image, seems like all that could be is all staged and integrated, so far so good.
 
Last edited:
Btw, the registry permission errors seem unrelated to NTLite, maybe your user doesn't have the mentioned backup/restore privileges.
I did notice sometimes a similar situation where users on the domain had their privileges trimmed and it became difficult to process it.
Does not happen lately, could have been a Windows 7 thing.

If you see anything of this caused by the tool, let me know with a preset to test with.

Thanks.
 
You must log in or register to reply here.
Back
Top