Exchange Server 5.5 Service Pack Installation Stops with 'Access Is Denied' Error 0xC002005; Restarting Computer Generates Event ID 7028 (255181)

IMPORTANT: This article contains information about modifying the registry. Before you modify the registry, make sure to back it up and make sure that you understand how to restore the registry if a problem occurs. For information about how to back up, restore, and edit the registry, click the following article number to view the article in the Microsoft Knowledge Base:

256986 Description of the Microsoft Windows Registry

SYMPTOMS

When you attempt to install Microsoft Exchange Server 5.5 Service Pack 2 or Service Pack 3, the upgrade may stop and you may receive the following error message:

Processing file d:\sp2\eng\server\setup\i386\shared.ins at or near line 48
Access is denied
NT ID: 0xC002005

When you restart the Exchange Server computer, Event Viewer displays the following event in the Application log:

Event ID: 7028
Source: Service control manager
Description: The winreg registry key denied access to system account programs. The Service Control Manager took ownership of the registry key.

CAUSE

This behavior can occur when the Exchange Service Account and the Microsoft Windows NT System Account do not have Full Control access rights to the CurrentControlSet key under the registry key HKEY_LOCAL_MACHINE.

RESOLUTION

WARNING: If you use Registry Editor incorrectly, you may cause serious problems that may require you to reinstall your operating system. Microsoft cannot guarantee that you can solve problems that result from using Registry Editor incorrectly. Use Registry Editor at your own risk.

To resolve this behavior, modify the registry to give Full Control permissions to the Exchange Service Account and the Windows NT System Account:

Start Windows NT Registry Editor (Regedt32.exe), and locate the following registry key:
```
HKEY_LOCAL_MACHINE\System\CurrentControlSet
					
```
On the Security menu, click Permissions.
Click to select the Replace Permission On Existing Subkeys check box.
In the Name box, click System, and then click Full Control in the Type Of Access box.
In the Name box, click the Exchange Service Account, and then click Full Control in the Type Of Access box.
Click OK, and then quit Registry Editor.