Solved

Cannot add any features on Server 2012 R2 - "Access is denied. Error 0x80070005"

Posted on 2015-02-12
6
1,733 Views
Last Modified: 2015-03-03
Hello all:

I have a new Server 2012 R2 machine that has been promoted to a DC.

I am trying to add the Microsoft .NET Framework 3.5 Features but the installation always returned the same error:
 "The request to add or remove features on the specified server failed.  Installation of one or more roles, role services, or features failed.  Access is denied.  Error 0x80070005"

Upon further testing, I cannot add *ANY* features (e.g. "Windows Server Backup"), and all attempts at adding features returns the same "Access is denied.  Error 0x80070005" error.

I have tried restarting the server and examining the Windows Update and CBS logs but cannot find which components access is denied to.

Have any other EE members encountered this error and been able to find a resolution?
0
Comment
Question by:ajkjmspe
  • 4
  • 2
6 Comments
 
LVL 53

Expert Comment

by:Will Szymkowski
ID: 40607048
Based on the error message it is definitly a permission issue. have you checked the logs on the server to get more info? Also, you said this is a domain controller, do you have proper access to this machine after it has been added as a Domain Controller?

Will.
0
 

Accepted Solution

by:
ajkjmspe earned 0 total points
ID: 40627076
After thinking about the problem long and hard a week ago, I realized several applications had been installed.

The applications included:
   1) Hitman Pro Alert - to monitor the server for crypto-malware such as CryptoLocker or CryptoWall
   2) The WatchGuard Software Suite for WatchGuard Firebox devices
           Incl. the WatchGuard System Manager, Log Server, and Report Server

After manually uninstalling all of the above and rebooting the server, I was able to add all the desired features.

Thank you to all who read and assisted!
0
 
LVL 53

Expert Comment

by:Will Szymkowski
ID: 40627109
So those applications must have been blocking access/permissions when they were installed?

Will.
0
Top 6 Sources for Identifying Threat Actor TTPs

Understanding your enemy is essential. These six sources will help you identify the most popular threat actor tactics, techniques, and procedures (TTPs).

 

Author Comment

by:ajkjmspe
ID: 40627117
So it would seem.

I highly suspect the crypto-malware blocker "Hitman Pro Alert" for the reason below.

I had no more problems installing roles, features (.NET Framework 3.5 included), and programs.  In fact, I reinstalled the WatchGuard software suite and was able to continue installing more programs afterwards that were giving me trouble before.
0
 

Author Comment

by:ajkjmspe
ID: 40627133
But thank you very much for taking the time to assist.

This problem even stumped Microsoft's technicians.

Literally a whole day was spent on the phone and watching them do miscellaneous things on the server remotely (none of which did anything to resolve the problem).
0
 

Author Closing Comment

by:ajkjmspe
ID: 40641483
After uninstalling the mentioned programs, installation of roles, features, and programs proceeded without any errors.
0

Featured Post

How to run any project with ease

Manage projects of all sizes how you want. Great for personal to-do lists, project milestones, team priorities and launch plans.
- Combine task lists, docs, spreadsheets, and chat in one
- View and edit from mobile/offline
- Cut down on emails

Join & Write a Comment

If, like me, you have a lot of Dell servers in the estate you manage this article should save you a little time. When attempting to login to iDrac on any server I would be presented with two errors. The first reads "Do you want to run this applicati…
Experts-Exchange users below are the steps you can follow to upgrade your Lync server to latest CU's or cumulative updates. Note: Perform it during non-production hours.   Step 1: Backup your lync and SQL server database. Follow below article: h…
This tutorial will walk an individual through the process of transferring the five major, necessary Active Directory Roles, commonly referred to as the FSMO roles from a Windows Server 2008 domain controller to a Windows Server 2012 domain controlle…
This tutorial will walk an individual through the process of configuring their Windows Server 2012 domain controller to synchronize its time with a trusted, external resource. Use Google, Bing, or other preferred search engine to locate trusted NTP …

705 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

17 Experts available now in Live!

Get 1:1 Help Now