lsass.exe error after uninstall of msi
Hi, I put together a msi using Admin Studio 8 for the IBM iSeries version 5 software. The msi works great but the uninstall is another story. If I reboot the pc after the uninstall the lsass.exe error message appears and I can’t log into the pc. I searched and found an old thread about this subject on another site. Some one recommended to remove any OS files or registry entries from the package. I’ve tried everything I can think of. Anyone have any ideas? Thanks for your help in advance.
Tony
Tony
0 Comments
[ + ] Show comments
Answers (14)
Please log in to answer
Posted by:
aogilmor
16 years ago
Posted by:
han891
16 years ago
Posted by:
aogilmor
16 years ago
I'm sorry to say but I think the MSI is screwed. start over from scratch. Not sure about Admin Studio 8 but Wise has a snapshot configuration where you can exclude files normally "touched" by normal logon/reboot activity. Run that if you haven't already.
Reboot between snapshots; look very carefully at anything under the hive hklm\system, as normal apps will rarely change those.
good luck, let us know how it goes.
Reboot between snapshots; look very carefully at anything under the hive hklm\system, as normal apps will rarely change those.
good luck, let us know how it goes.
Posted by:
jmcfadyen
16 years ago
i suspect you are using wise.
check for a component marked RegistryXXX (where XXX is a numeric value)
simple fix is mark it not to uninstall. in reality you should move HKLM components to a separate component.
generally this component contains dll registration Wise cannot associated to a file. As such it gets removed during uninstall as its not ref counted in anyway.
This is a long standing wise issue often caused through the use of MM's with wise.
check for a component marked RegistryXXX (where XXX is a numeric value)
simple fix is mark it not to uninstall. in reality you should move HKLM components to a separate component.
generally this component contains dll registration Wise cannot associated to a file. As such it gets removed during uninstall as its not ref counted in anyway.
This is a long standing wise issue often caused through the use of MM's with wise.
Posted by:
KPrinz
16 years ago
Posted by:
Chiun
16 years ago
Lsass.exe
The error is in
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\NetworkProvider\HwOrder]
"ProviderOrder"="Cwbnetnt,RDPNP,LanmanWorkstation,WebClient,hgfs"
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\NetworkProvider\Order]
"ProviderOrder"="Cwbnetnt,RDPNP,LanmanWorkstation,WebClient,hgfs"
Well it`s not an error, but if u try to remove these entrys from the package and then install it will work. Though they are probably usefull. I`m working on a solution round this problem.
Had the same problem. Got lsass.exe error during reboot after uninstall. But when i removed these entrys. Installed and uninstalled. Problem gone.
But as i said the application will probably not work correct with these missing.
Chiun
The error is in
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\NetworkProvider\HwOrder]
"ProviderOrder"="Cwbnetnt,RDPNP,LanmanWorkstation,WebClient,hgfs"
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\NetworkProvider\Order]
"ProviderOrder"="Cwbnetnt,RDPNP,LanmanWorkstation,WebClient,hgfs"
Well it`s not an error, but if u try to remove these entrys from the package and then install it will work. Though they are probably usefull. I`m working on a solution round this problem.
Had the same problem. Got lsass.exe error during reboot after uninstall. But when i removed these entrys. Installed and uninstalled. Problem gone.
But as i said the application will probably not work correct with these missing.
Chiun
Posted by:
anonymous_9363
16 years ago
Those keys list the preference order for network providers. It seems likely that your capture included the whole string, rather than the addition of the iSeries provider, 'Cwbnetnt'.
You need to write a Custom Action to remove JUST the 'Cwbnetnt' bit. Easy to do in VBS, especially as the string is ripe for converting to an array using the Split function. You can then loop through the array and re-write anything which ISN'T 'Cwbnetnt' back to a new string and, when you've completed the loop, write that string back to the registry key. Then repeat for the other key.
You need to write a Custom Action to remove JUST the 'Cwbnetnt' bit. Easy to do in VBS, especially as the string is ripe for converting to an array using the Split function. You can then loop through the array and re-write anything which ISN'T 'Cwbnetnt' back to a new string and, when you've completed the loop, write that string back to the registry key. Then repeat for the other key.
Posted by:
Chiun
16 years ago
Posted by:
anonymous_9363
16 years ago
Posted by:
Chiun
16 years ago
The Custom Action was waaay to complicated for me. Will have another look at that if the package doesnt work.
Workaround for the registry:
Go to:
Setup Editor:
Tables tab
Then:
Registry
Locate the key you wish to keep.
Two solutions here:
1. Ad a new key under the original (dummy key) and in the name just add +. This makes a new string in registry.
2.(This is the one i went for). I just renamed the name ProviderOrder to +
And now it works install and uninstall
Not sure if this will affect the use of the software.
Warning: This solution is at your own risk!
And please comment in any changes you think wont work! Open for solutions.
Link Dummy key at microsoft:
http://msdn2.microsoft.com/en-us/library/aa371168.aspx
Workaround for the registry:
Go to:
Setup Editor:
Tables tab
Then:
Registry
Locate the key you wish to keep.
Two solutions here:
1. Ad a new key under the original (dummy key) and in the name just add +. This makes a new string in registry.
2.(This is the one i went for). I just renamed the name ProviderOrder to +
And now it works install and uninstall
Not sure if this will affect the use of the software.
Warning: This solution is at your own risk!
And please comment in any changes you think wont work! Open for solutions.
Link Dummy key at microsoft:
http://msdn2.microsoft.com/en-us/library/aa371168.aspx
Posted by:
anonymous_9363
16 years ago
Your post reads as if you have renamed the ProviderOrder key. If you had read the MS article properly, you'd see that the thing to do is avoid the wholesale replacement of the entire value and instead just add the 'Cwbnetnt' string, using the ' [~]' suffix. Thus your registry entry would change from:
Key: HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\NetworkProvider\HwOrder
Value:ProviderOrder
Data:Cwbnetnt,RDPNP,LanmanWorkstation,WebClient,hgfs
to:
Key: HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\NetworkProvider\HwOrder
Value:ProviderOrder
Data:Cwbnetnt,[~]
Key: HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\NetworkProvider\HwOrder
Value:ProviderOrder
Data:Cwbnetnt,RDPNP,LanmanWorkstation,WebClient,hgfs
to:
Key: HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\NetworkProvider\HwOrder
Value:ProviderOrder
Data:Cwbnetnt,[~]
Posted by:
Chiun
16 years ago
Posted by:
anonymous_9363
16 years ago
Rating comments in this legacy AppDeploy message board thread won't reorder them,
so that the conversation will remain readable.
so that the conversation will remain readable.