Microsoft KB Archive/931063

= You cannot execute Profile Maker with elevated permissions on a client computer that has Windows XP SP2 installed and you receive an error message: &quot;Failure (0x800706ba) to install client service&quot; =

Article ID: 931063

Article Last Modified on 2/9/2007

-

APPLIES TO


 * Profile Maker Professional 8.0

-



SYMPTOMS
When you install Microsoft Windows XP Service Pack 2 (SP2) on a client computer, you cannot execute Profile Maker with elevated permissions. Additionally, you receive the following error message:

Failure (0x800706ba) to install client service. The RPC server is unavailable.



CAUSE
This problem occurs because the Profile Maker Secondary Service cannot copy the client service to a client computer that is running Windows XP SP2.

Windows XP SP2 has a new service called Windows Firewall. This new service replaces the Internet Connection Firewall (ICF). By default, Windows Firewall is enabled on all interfaces and disallows communication among Windows XP SP2-based computers where Windows Firewall is enabled.

When Profile Maker is executed with elevated permissions, it must copy the client service to the client computers and then start the service. To do this, the Profile Maker Secondary Service logon accounts must have access to the &quot;File and Print Sharing&quot; service on the client computers that are running Windows XP SP2. However, Windows Firewall blocks communication between the Profile Maker Secondary Service and the client computers.



RESOLUTION
To resolve this problem, you must apply Windows Firewall exceptions to the &quot;File and Print Sharing&quot; service on the client computer. To do this, follow these steps:
 * 1) Click Start, click Run, type gpedit.msc, and then click OK.
 * 2) In the console tree, expand Computer Configuration, expand Administrative Templates, expand Network, expand Network Connections, expand Windows Firewall, and then click Domain Profile.
 * 3) In the results pane, right-click Windows Firewall: Allow file and printer sharing exception and then click Properties.
 * 4) On the Setting tab, click Enabled.
 * 5) Under Allow unsolicited incoming messages from, add the IP address for each Profile Maker Secondary Service, and then click OK.

Note Use commas to separate each Profile Maker Secondary Service IP address.

This policy can be distributed by adding the new Windows XP SP2 System.adm template to the Administrative Templates in a Group Policy object (GPO) that is applied to the applicable computers.

Keywords: kbtshoot kbexpertiseinter kbprb KB931063

-

[mailto:TECHNET@MICROSOFT.COM Send feedback to Microsoft]

© Microsoft Corporation. All rights reserved.