Solved

Cannot add any features on Server 2012 R2 - "Access is denied. Error 0x80070005"

Posted on 2015-02-12
6
2,310 Views
Last Modified: 2015-03-03
Hello all:

I have a new Server 2012 R2 machine that has been promoted to a DC.

I am trying to add the Microsoft .NET Framework 3.5 Features but the installation always returned the same error:
 "The request to add or remove features on the specified server failed.  Installation of one or more roles, role services, or features failed.  Access is denied.  Error 0x80070005"

Upon further testing, I cannot add *ANY* features (e.g. "Windows Server Backup"), and all attempts at adding features returns the same "Access is denied.  Error 0x80070005" error.

I have tried restarting the server and examining the Windows Update and CBS logs but cannot find which components access is denied to.

Have any other EE members encountered this error and been able to find a resolution?
0
Comment
Question by:ajkjmspe
  • 4
  • 2
6 Comments
 
LVL 53

Expert Comment

by:Will Szymkowski
ID: 40607048
Based on the error message it is definitly a permission issue. have you checked the logs on the server to get more info? Also, you said this is a domain controller, do you have proper access to this machine after it has been added as a Domain Controller?

Will.
0
 

Accepted Solution

by:
ajkjmspe earned 0 total points
ID: 40627076
After thinking about the problem long and hard a week ago, I realized several applications had been installed.

The applications included:
   1) Hitman Pro Alert - to monitor the server for crypto-malware such as CryptoLocker or CryptoWall
   2) The WatchGuard Software Suite for WatchGuard Firebox devices
           Incl. the WatchGuard System Manager, Log Server, and Report Server

After manually uninstalling all of the above and rebooting the server, I was able to add all the desired features.

Thank you to all who read and assisted!
0
 
LVL 53

Expert Comment

by:Will Szymkowski
ID: 40627109
So those applications must have been blocking access/permissions when they were installed?

Will.
0
PRTG Network Monitor: Intuitive Network Monitoring

Network Monitoring is essential to ensure that computer systems and network devices are running. Use PRTG to monitor LANs, servers, websites, applications and devices, bandwidth, virtual environments, remote systems, IoT, and many more. PRTG is easy to set up & use.

 

Author Comment

by:ajkjmspe
ID: 40627117
So it would seem.

I highly suspect the crypto-malware blocker "Hitman Pro Alert" for the reason below.

I had no more problems installing roles, features (.NET Framework 3.5 included), and programs.  In fact, I reinstalled the WatchGuard software suite and was able to continue installing more programs afterwards that were giving me trouble before.
0
 

Author Comment

by:ajkjmspe
ID: 40627133
But thank you very much for taking the time to assist.

This problem even stumped Microsoft's technicians.

Literally a whole day was spent on the phone and watching them do miscellaneous things on the server remotely (none of which did anything to resolve the problem).
0
 

Author Closing Comment

by:ajkjmspe
ID: 40641483
After uninstalling the mentioned programs, installation of roles, features, and programs proceeded without any errors.
0

Featured Post

Microsoft Certification Exam 74-409

Veeam® is happy to provide the Microsoft community with a study guide prepared by MVP and MCT, Orin Thomas. This guide will take you through each of the exam objectives, helping you to prepare for and pass the examination.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

This script can help you clean up your user profile database by comparing profiles to Active Directory users in a particular OU, and removing the profiles that don't match.
This article outlines the process to identify and resolve account lockout in an Active Directory environment.
This tutorial will walk an individual through the process of transferring the five major, necessary Active Directory Roles, commonly referred to as the FSMO roles to another domain controller. Log onto the new domain controller with a user account t…
This tutorial will walk an individual through the process of configuring their Windows Server 2012 domain controller to synchronize its time with a trusted, external resource. Use Google, Bing, or other preferred search engine to locate trusted NTP …

839 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question