Win 7 Pro x64 stating copy isn't genuine 0x8004fe22

thesitbr · Nov 4, 2015

I have some computers running Windows 7 Professional 64bits that are showing a popup window stating "This computer is not running genuine Windows", with the "0x8004fe22" error code. The computers were activated using their own OEM license.

The strange issue is that Admin user doesn't show the message and MGDIAG log is OK, but for an user without Admin privileges the error appears. I've tried to give Admin privileges to an user, putting it on ADM group, but the MGDIAG didn't changed.

The computers are from the same vendor.

I'm attaching the MGDIAG logs for Admin and User.

ADMIN MGDIAG

Code:

Diagnostic Report (1.9.0027.0):
-----------------------------------------
Windows Validation Data-->

Validation Code: 0
Cached Online Validation Code: 0x0
Windows Product Key: *****-*****-6DC8F-7TRQ4-C8KVY
Windows Product Key Hash: QYKanR2htRvL/X3ij59jPH2SAp0=
Windows Product ID: 00371-OEM-9373661-58383
Windows Product ID Type: 8
Windows License Type: COA SLP
Windows OS version: 6.1.7601.2.00010100.1.0.048
ID: {E816AE33-2F3B-4A3F-93DD-C0047FA60135}(1)
Is Admin: Yes
TestCab: 0x0
LegitcheckControl ActiveX: N/A, hr = 0x80070002
Signed By: N/A, hr = 0x80070002
Product Name: Windows 7 Professional
Architecture: 0x00000009
Build lab: 7601.win7sp1_gdr.150316-1654
TTS Error:
Validation Diagnostic:
Resolution Status: N/A

Vista WgaER Data-->
ThreatID(s): N/A, hr = 0x80070002
Version: N/A, hr = 0x80070002

Windows XP Notifications Data-->
Cached Result: N/A, hr = 0x80070002
File Exists: No
Version: N/A, hr = 0x80070002
WgaTray.exe Signed By: N/A, hr = 0x80070002
WgaLogon.dll Signed By: N/A, hr = 0x80070002

OGA Notifications Data-->
Cached Result: N/A, hr = 0x80070002
Version: N/A, hr = 0x80070002
OGAExec.exe Signed By: N/A, hr = 0x80070002
OGAAddin.dll Signed By: N/A, hr = 0x80070002

OGA Data-->
Office Status: 109 N/A
OGA Version: N/A, 0x80070002
Signed By: N/A, hr = 0x80070002
Office Diagnostics: 025D1FF3-364-80041010_025D1FF3-229-80041010_025D1FF3-230-1_025D1FF3-517-80040154_025D1FF3-237-80040154_025D1FF3-238-2_025D1FF3-244-80070002_025D1FF3-258-3

Browser Data-->
Proxy settings: 10.3.2.55:3128
User Agent: Mozilla/4.0 (compatible; MSIE 8.0; Win32)
Default Browser: C:\Program Files\Internet Explorer\iexplore.exe
Download signed ActiveX controls: Prompt
Download unsigned ActiveX controls: Disabled
Run ActiveX controls and plug-ins: Allowed
Initialize and script ActiveX controls not marked as safe: Disabled
Allow scripting of Internet Explorer Webbrowser control: Disabled
Active scripting: Allowed
Script ActiveX controls marked as safe for scripting: Allowed

File Scan Data-->

Other data-->
Office Details: <GenuineResults><MachineData><UGUID>{E816AE33-2F3B-4A3F-93DD-C0047FA60135}</UGUID><Version>1.9.0027.0</Version><OS>6.1.7601.2.00010100.1.0.048</OS><Architecture>x64</Architecture><PKey>*****-*****-*****-*****-C8KVY</PKey><PID>00371-OEM-9373661-58383</PID><PIDType>8</PIDType><SID>S-1-5-21-3587231783-1477937849-1801536511</SID><SYSTEM><Manufacturer>Daten Tecnologia Ltda</Manufacturer><Model>DT02-BV1</Model></SYSTEM><BIOS><Manufacturer>Daten Tecnologia Ltda.</Manufacturer><Version>F2Q DZ</Version><SMBIOSVersion major="2" minor="7"/><Date>20131227000000.000000+000</Date></BIOS><HWID>18D43507018400FE</HWID><UserLCID>0416</UserLCID><SystemLCID>0416</SystemLCID><TimeZone>Hora oficial do Brasil(GMT-03:00)</TimeZone><iJoin>1</iJoin><SBID><stat>3</stat><msppid></msppid><name></name><model></model></SBID><OEM><OEMID>daten</OEMID><OEMTableID>DT02</OEMTableID></OEM><GANotification/></MachineData><Software><Office><Result>109</Result><Products/><Applications/></Office></Software></GenuineResults> 

Spsys.log Content: 0x80070002

Licensing Data-->
Versão do serviço de licença do software: 6.1.7601.17514

Nome: Windows(R) 7, Professional edition
Descrição: Windows Operating System - Windows(R) 7, OEM_COA_SLP channel
Identificação da Ativação: da22eadd-46dc-4056-a287-f5041c852470
Identificação da Aplicação: 55c92734-d682-4d71-983e-d6ec3f16059f
PID estendido: 00371-00186-736-658383-02-1046-7601.0000-2802015
Identificação da Instalação: 019110833623404151922632720806561923613442877563258262
URL do Certificado do Processador: http://go.microsoft.com/fwlink/?LinkID=88338
URL do Certificado da Máquina: http://go.microsoft.com/fwlink/?LinkID=88339
URL da Licença de Uso: http://go.microsoft.com/fwlink/?LinkID=88341
URL do Certificado da Chave do Produto (Product Key): http://go.microsoft.com/fwlink/?LinkID=88340
Chave do Produto (Product Key) Parcial: C8KVY
Status da Licença: Licenciado
Contagem de rearmação restante do Windows: 3
Hora confiável: 28/10/2015 13:29:12

Windows Activation Technologies-->
HrOffline: 0x00000000
HrOnline: N/A
HealthStatus: 0x0000000000000000
Event Time Stamp: N/A
ActiveX: Registered, Version: 7.1.7600.16395
Admin Service: Registered, Version: 7.1.7600.16395
HealthStatus Bitmask Output:


HWID Data-->
HWID Hash Current: KgAAAAEAAQABAAEAAAABAAAAAQABAAEA6GHkEc64cu4G9ijT9AE0CpZj

OEM Activation 1.0 Data-->
N/A

OEM Activation 2.0 Data-->
BIOS valid for OA 2.0: yes
Windows marker version: 0x20001
OEMID and OEMTableID Consistent: yes
BIOS Information:
  ACPI Table Name    OEMID Value    OEMTableID Value
  APIC            daten        DT02
  FACP            daten        DT02
  HPET            daten        DT02
  MCFG            daten        DT02
  SLIC            daten        DT02
  SSDT            SataRe        SataTabl
  SSDT            SataRe        SataTabl
  SSDT            SataRe        SataTabl
  DMAR            INTEL         SNB
  ASF!            INTEL          HCG

------------------------------------------------------

USER MGDIAG

Code:

Diagnostic Report (1.9.0027.0):
-----------------------------------------
Windows Validation Data-->

Validation Code: 0x8004FE22
Cached Online Validation Code: 0x0
Windows Product Key: *****-*****-6DC8F-7TRQ4-C8KVY
Windows Product Key Hash: QYKanR2htRvL/X3ij59jPH2SAp0=
Windows Product ID: 00371-OEM-9373661-58383
Windows Product ID Type: 8
Windows License Type: COA SLP
Windows OS version: 6.1.7601.2.00010100.1.0.048
ID: {459E30A9-FF30-40C7-9A7F-ED1F1CEDDFE9}(2)
Is Admin: No
TestCab: 0x0
LegitcheckControl ActiveX: N/A, hr = 0x80070002
Signed By: N/A, hr = 0x80070002
Product Name: Windows 7 Professional
Architecture: 0x00000009
Build lab: 7601.win7sp1_gdr.150316-1654
TTS Error:
Validation Diagnostic:
Resolution Status: N/A

Vista WgaER Data-->
ThreatID(s): N/A, hr = 0x80070002
Version: N/A, hr = 0x80070002

Windows XP Notifications Data-->
Cached Result: N/A, hr = 0x80070002
File Exists: No
Version: N/A, hr = 0x80070002
WgaTray.exe Signed By: N/A, hr = 0x80070002
WgaLogon.dll Signed By: N/A, hr = 0x80070002

OGA Notifications Data-->
Cached Result: N/A, hr = 0x80070002
Version: N/A, hr = 0x80070002
OGAExec.exe Signed By: N/A, hr = 0x80070002
OGAAddin.dll Signed By: N/A, hr = 0x80070002

OGA Data-->
Office Status: 109 N/A
OGA Version: N/A, 0x80070002
Signed By: N/A, hr = 0x80070002
Office Diagnostics: 025D1FF3-364-80041010_025D1FF3-229-80041010_025D1FF3-230-1_025D1FF3-517-80040154_025D1FF3-237-80040154_025D1FF3-238-2_025D1FF3-244-80070002_025D1FF3-258-3

Browser Data-->
Proxy settings: N/A
User Agent: Mozilla/4.0 (compatible; MSIE 8.0; Win32)
Default Browser: C:\Program Files\Internet Explorer\iexplore.exe
Download signed ActiveX controls: Prompt
Download unsigned ActiveX controls: Disabled
Run ActiveX controls and plug-ins: Allowed
Initialize and script ActiveX controls not marked as safe: Disabled
Allow scripting of Internet Explorer Webbrowser control: Disabled
Active scripting: Allowed
Script ActiveX controls marked as safe for scripting: Allowed

File Scan Data-->

Other data-->
Office Details: <GenuineResults><MachineData><UGUID>{459E30A9-FF30-40C7-9A7F-ED1F1CEDDFE9}</UGUID><Version>1.9.0027.0</Version><OS>6.1.7601.2.00010100.1.0.048</OS><Architecture>x64</Architecture><PKey>*****-*****-*****-*****-C8KVY</PKey><PID>00371-OEM-9373661-58383</PID><PIDType>8</PIDType><SID>S-1-5-21-3587231783-1477937849-1801536511</SID><SYSTEM><Manufacturer>Daten Tecnologia Ltda</Manufacturer><Model>DT02-BV1</Model></SYSTEM><BIOS><Manufacturer>Daten Tecnologia Ltda.</Manufacturer><Version>F2Q DZ</Version><SMBIOSVersion major="2" minor="7"/><Date>20131227000000.000000+000</Date></BIOS><HWID>18D43507018400FE</HWID><UserLCID>0416</UserLCID><SystemLCID>0416</SystemLCID><TimeZone>Hora oficial do Brasil(GMT-03:00)</TimeZone><iJoin>1</iJoin><SBID><stat>3</stat><msppid></msppid><name></name><model></model></SBID><OEM><OEMID>daten</OEMID><OEMTableID>DT02</OEMTableID></OEM><GANotification/></MachineData><Software><Office><Result>109</Result><Products/><Applications/></Office></Software></GenuineResults> 

Spsys.log Content: 0x80070002

Licensing Data-->
Versão do serviço de licença do software: 6.1.7601.17514

Nome: Windows(R) 7, Professional edition
Descrição: Windows Operating System - Windows(R) 7, OEM_COA_SLP channel
Identificação da Ativação: da22eadd-46dc-4056-a287-f5041c852470
Identificação da Aplicação: 55c92734-d682-4d71-983e-d6ec3f16059f
PID estendido: 00371-00186-736-658383-02-1046-7601.0000-2802015
Identificação da Instalação: 019110833623404151922632720806561923613442877563258262
URL do Certificado do Processador: http://go.microsoft.com/fwlink/?LinkID=88338
URL do Certificado da Máquina: http://go.microsoft.com/fwlink/?LinkID=88339
URL da Licença de Uso: http://go.microsoft.com/fwlink/?LinkID=88341
URL do Certificado da Chave do Produto (Product Key): http://go.microsoft.com/fwlink/?LinkID=88340
Chave do Produto (Product Key) Parcial: C8KVY
Status da Licença: Licenciado
Contagem de rearmação restante do Windows: 3
Hora confiável: 28/10/2015 13:21:45

Windows Activation Technologies-->
HrOffline: 0x8004FE22
HrOnline: N/A
HealthStatus: 0x0000000000000800
Event Time Stamp: N/A
ActiveX: Registered, Version: 7.1.7600.16395
Admin Service: Registered, Version: 7.1.7600.16395
HealthStatus Bitmask Output:
Tampered File: %systemroot%\system32\slui.exe|slui.exe.mui|COM Registration


HWID Data-->
HWID Hash Current: KgAAAAEAAQABAAEAAAABAAAAAQABAAEA6GHkEc64cu4G9ijT9AE0CpZj

OEM Activation 1.0 Data-->
N/A

OEM Activation 2.0 Data-->
BIOS valid for OA 2.0: yes
Windows marker version: 0x20001
OEMID and OEMTableID Consistent: yes
BIOS Information:
  ACPI Table Name    OEMID Value    OEMTableID Value
  APIC            daten        DT02
  FACP            daten        DT02
  HPET            daten        DT02
  MCFG            daten        DT02
  SLIC            daten        DT02
  SSDT            SataRe        SataTabl
  SSDT            SataRe        SataTabl
  SSDT            SataRe        SataTabl
  DMAR            INTEL         SNB
  ASF!            INTEL          HCG

I already checked the registry keys below and it seems to be ok.

REG QUERY HKLM\SOFTWARE\Classes\Wow6432Node\TypeLib\{EE574957-4077-4AD6-8658-327C2C86C5AA} /S
REG QUERY HKLM\SOFTWARE\Classes\TypeLib\{EE574957-4077-4AD6-8658-327C2C86C5AA} /S
REG QUERY HKLM\SOFTWARE\Wow6432Node\Classes\TypeLib\{EE574957-4077-4AD6-8658-327C2C86C5AA} /S

Any Idea?

Thanks.

wben353 · Nov 4, 2015

Hi thesitbr & welcome to sevenforums.

Don't have any expertise in this area, but didn't want to leave you post unanswered. NoelDP will most likely need to chime in on this issue, he's the expert. If he doesn't post in a reasonable amount of time, you might want to give him a shout.

thesitbr · Nov 5, 2015

Thanks Wben353!

I'm looking for the solution and reading a lot of NoelDP posts, but until now without success to my problem.

NoelDP · Nov 5, 2015

Interesting - I haven't seen this behaviour before.
In the Standard user account, is UAC at the default level, or have you changed it?
Is there a password on the Admin level account?

What happens if you attempt Validation using Internet Explorer while in the Standard user account?
www.microaoft.com/genuine/validate

Once you've done that, please run the MGADiag again, and see what it reports.

thesitbr · Nov 5, 2015

Hi NoelDP,

Thanks for reply.

The UAC was changed to "Never notify".

The Admin level account has a password, and user account has a password too.

The validation using the microsoft.com/genuine/validate works with admin but fails with user. Our users can't install software.

Thanks again,

torchwood · Nov 5, 2015

The only other difference i see is that the standard user has no proxy set

Roy

NoelDP · Nov 6, 2015

'Never Notify' is a stupidly open level - and should NEVER be used in either Standard or Admin accounts. It isn't even possible to set a Standard User account to that level, so far as I'm aware, without hacking the HKCU registry.

I suggest that you review your policies in respect of permissions and elevation.

Standard Users are not allowed to install software - removing the notification removes the ability to elevate to Admin level for such tasks.

(thinking about it, it may be possible to set Standard Users to 'never notify' using Group Policy)

wben353 · Nov 6, 2015

I agree with NoelDP. You're asking for major issues

thesitbr · Nov 10, 2015

Hi NoelDP,

We have a "security system" that works on application level. It's the responsible of a lot of changes in Windows to improve, of course, security. But, It's the responsible for a lot of headaches too. The system works fine with Windows XP, 2003 Server and the company are a MS partner, so they claim that it works fine with Windows 7.

Before try here, I tried with them and they said that a lot of users are working without any issue, that is probably a proxy problem, or that is an license type problem. I tried the solutions to most common problems we have with it, like permissions and registry, but nothing worked.

So, I'm trying here, because I saw you helped a lot of people with the same issue, even without our "security system".

But now, I'll press them to a solution, because I really don't know what to do.

Thanks a lot.

NoelDP · Nov 11, 2015

Unfortunately, being an MS Partner means absolutely nothing about the competence level of the programmers of any given application - e.g. I am an MS Partner simply because I filled in the right form, and not because of any qualifications/skills I may or may not have.

Any user-level program which insists on reducing system security to this level should have been updated or scrapped years ago. I resigned from an MS Beta back in 2006/7 because it insisted on running inside an Administrators account for no good or valid reason, and MS refused to listen when I complained. I know they released the application later with the defect still in existence, but I don't know if it still does. Since the program was/is a finance-related one, I won't reveal details as it may encourage abuse.

Win 7 Pro x64 stating copy isn't genuine 0x8004fe22

New member

My Computer My Computer

At a glance

Banned

My Computer My Computer

At a glance

New member

My Computer My Computer

At a glance

Three-Toed Sloth

My Computer My Computer

At a glance

New member

My Computer My Computer

At a glance

Well-known member

My Computer My Computer

At a glance

Three-Toed Sloth

My Computer My Computer

At a glance

Banned

My Computer My Computer

At a glance

New member

My Computer My Computer

At a glance

Three-Toed Sloth

My Computer My Computer

At a glance

Similar threads

My Computer

My Computer

My Computer

My Computer

My Computer

My Computer

My Computer

My Computer

My Computer

My Computer