Microsoft KB Archive/941915

= You cannot change the TCP/IP settings of an operating system that is built with the Windows XP Embedded runtime even if you belong to the Network Configuration Operators group =

Article ID: 941915

Article Last Modified on 9/5/2007

-

APPLIES TO


 * Microsoft Windows XP Embedded

-



SYMPTOMS
When you log on to an operating system that is built with the Microsoft Windows XP Embedded runtime, you cannot change the TCP/IP settings, even if you belong to the Network Configuration Operators group. You can only change the settings if you are the local administrator.

For example, after you change the IP address settings or the subnet mask settings, you are prompted to restart the operating system. However, after you restart the operating system, the changes do not take effect.

This problem does not occur in Windows XP Professional edition.



CAUSE
This problem occurs because of missing permission settings in the access control list for the related registry entries. The permission settings are handled differently in Windows XP Embedded than in Windows XP Professional.



WORKAROUND
The following file is available for download from the Microsoft Download Center:

Download the SubInACL.exe package now.

For more information about how to download Microsoft support files, click the following article number to view the article in the Microsoft Knowledge Base:

119591 How to obtain Microsoft support files from online services

Microsoft scanned this file for viruses. Microsoft used the most current virus-detection software that was available on the date that the file was posted. The file is stored on security-enhanced servers that help prevent any unauthorized changes to the file.

To work around this problem, you can use SubInACL, a security editor tool, to run a script file. To do this, follow these steps.   Create a script file that is used to assign appropriate permission in the access control list. To do this, create a .txt file, copy the following code to the .txt file, and then rename the file as .bat. subinacl /keyreg HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Tcpip\ /grant=&quot;Network Configuration Operators&quot;=QCEYA subinacl /keyreg HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Tcpip\Linkage\ /grant=&quot;Network Configuration Operators&quot;=QSCEYA subinacl /keyreg HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters\ /grant=&quot;Network Configuration Operators&quot;=QSCEYA subinacl /subkeyreg HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters\Adapters\ /grant=&quot;Network Configuration Operators&quot;=QSCEYA subinacl /subkeyreg HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters\DNSRegisteredAdapters\ /grant=&quot;Network Configuration Operators&quot;=QSCEYA subinacl /subkeyreg HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters\Interfaces\ /grant=&quot;Network Configuration Operators&quot;=QSCEYA subinacl /keyreg HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters\PersistentRoutes\ /grant=&quot;Network Configuration Operators&quot;=QSCEYA subinacl /keyreg HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters\Winsock\ /grant=&quot;Network Configuration Operators&quot;=QCEYA subinacl /keyreg HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Tcpip\Performance\ /grant=&quot;Network Configuration Operators&quot;=QCEYA subinacl /keyreg HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Tcpip\ServiceProvider\ /grant=&quot;Network Configuration Operators&quot;=QCEYA subinacl /keyreg HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Tcpip\Enum\ /grant=&quot;Network Configuration Operators&quot;=QCEYA subinacl /keyreg HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Tcpip\Security\ /grant=&quot;Network Configuration Operators&quot;=QCEYA subinacl /keyreg HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\DHCP\Configurations\ /grant=&quot;Network Configuration Operators&quot;=QSCEYAD subinacl /subkeyreg HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\DHCP\Parameters\ /grant=&quot;Network Configuration Operators&quot;=QEYA subinacl /keyreg HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\{GUID_OF_NIC}\Parameters\Tcpip\ /grant=&quot;Network Configuration Operators&quot;=QSCEYAD subinacl /subkeyreg HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\NetBT\ /grant=&quot;Network Configuration Operators&quot;=QCEYA subinacl /subkeyreg HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\NetBT\Parameters\ /grant=&quot;Network Configuration Operators&quot;=QSCEYA Note You must replace  in the fifteenth line of the code with the actual GUID of the network adapter on your device. You can find the GUID under the TCP/IP service registry key. For example, in the following resigtry entry, the GUID is AEA17CDF-5551-4DF7-90EE-73E0E595BC31:

 Download the SubInAcl.exe package. Install the SubInAcl tool. The default location of the SubInAcl.exe file is C:\Program Files\Windows Resource Kits\Tools. Copy the .bat file and the SubInAcl.exe file to the same temporary folder. At a command prompt, locate the temporary folder, and then run the .bat file.

After you follow these steps, you can successfully change the TCP/IP settings if you belong to the Network Configuration Operators group.

Keywords: kbexpertiseinter kbtshoot kbprb KB941915

-

[mailto:TECHNET@MICROSOFT.COM Send feedback to Microsoft]

© Microsoft Corporation. All rights reserved.