Smart card stops functioning or you cannot access the local registry when you upgrade from Windows 2000 Server to Windows XP SP 1 or earlier (832082)


The information in this article applies to:

  • Microsoft Windows XP Professional
  • Microsoft Windows XP Home Edition
OfficeNet

SYMPTOMS

Assume a scenario where you upgrade a computer that is running Microsoft Windows 2000 Service Pack 4 (SP4) or a later version of Windows 2000 to one of the following:
  • Microsoft Windows XP Professional Edition Service Pack 1 (SP1)
  • Microsoft Windows XP Home Edition SP1
  • an earlier version of Windows XP
In this scenario, one of the following problems may occur:
  • Your smart card may stop functioning.
  • You may not be able to access the local registry from a remote computer.


Additionally, any one of the following events may be logged in the application event log:

Event Type: Error
Event Source: SCardSvr
Event Category: None
Event ID: 201
Date: 9/25/2003
Time: 1:04:08 PM
User: N/A
Computer: Computer Name
Description: Failed to initialize Server Application: Access is denied.

Event Type: Error
Event Source: SCardSvr
Event Category: None
Event ID: 110
Date: 9/25/2003
Time: 1:04:08 PM
User: N/A
Computer: Computer Name
Description: Comm Responder could not create communications object.

Event Type: Error
Event Source: SCardSvr
Event Category: None
Event ID: 104
Date: 9/25/2003
Time: 1:04:08 PM
User: N/A
Computer: Computer Name
Description: Comm Responder could not access the Calais key: Access is denied.

Note This problem does not occur when you upgrade a computer that is running Windows 2000 Service Pack 3 or earlier. This problem also does not occur when you upgrade to Windows XP Service Pack 2 or a later version of Windows XP.

CAUSE

This problem occurs because a security template from the Dwup.inf file is not applied when you upgrade a computer that is running Windows 2000 SP4 or a later version of Windows 2000.

The smart card may not function correctly because the Local Service is not granted Read permission for the following registry subkey:

HKEY_LOCAL_MACHINE/SOFTWARE/Microsoft/Cryptography/Calais/Current

Remote registry access may not function correctly because the Local Service is not granted Read permission for the following registry subkey:

HKEY_LOCAL_MACHINE/SYSTEM/CurrentControlSet/Control/SecurePipeServers/winreg

RESOLUTION

Service pack information

To resolve this problem, obtain the latest service pack for Microsoft Windows XP. For additional information, click the following article number to view the article in the Microsoft Knowledge Base:

322389 How to obtain the latest Windows XP service pack

Hotfix information

There are several resolution scenarios for this problem.

If you know about this problem before you upgrade to Windows XP SP2 from Windows 2000 SP4 or a later version of Windows 2000, you can type the Spdwnw2k.exe /test command at a command prompt in Windows 2000 SP4 or in a later version of Windows 2000. The Spdwnw2k.exe file is located on the Windows 2000 SP4 CD-ROM in the i386\update folder.

If you know about this problem after you upgrade to Windows XP SP1 from Windows 2000 SP4 or a later version of Windows 2000, you must install this hotfix to resolve this problem.

A supported hotfix is now available from Microsoft, but it is only intended to correct the problem that is described in this article. Only apply it to systems that are experiencing this specific problem. This hotfix may receive additional testing. Therefore, if you are not severely affected by this problem, we recommend that you wait for the next Windows XP service pack that contains this hotfix.

To resolve this problem immediately, contact Microsoft Product Support Services to obtain the hotfix. For a complete list of Microsoft Product Support Services phone numbers and information about support costs, visit the following Microsoft Web site:

http://support.microsoft.com/contactus/?ws=support

Note In special cases, charges that are ordinarily incurred for support calls may be canceled if a Microsoft Support Professional determines that a specific update will resolve your problem. The usual support costs will apply to additional support questions and issues that do not qualify for the specific update in question.

The English version of this hotfix has the file attributes (or later) that are listed in the following table. The dates and times for these files are listed in coordinated universal time (UTC). When you view the file information, it is converted to local time. To find the difference between UTC and local time, use the Time Zone tab in the Date and Time tool in Control Panel.
   Date         Time   Version            Size    File name        Platform
   ------------------------------------------------------------------------
   31-Mar-2004  00:06  5.1.2600.1361     667,648  Lsasrv.dll       x86
   31-Mar-2004  00:06  5.1.2600.1360     171,008  Scecli.dll       x86
   31-Mar-2004  00:06  5.1.2600.1360     297,472  Scesrv.dll       x86
   10-Jan-2004  04:11  5.2.3790.32        17,408  Spupdsvc.exe     x86
   09-Mar-2004  00:23                    306,953  Xpupgfix.inf     x86
   31-Mar-2004  00:01  5.1.2600.1361   2,069,504  Lsasrv.dll       IA-64
   31-Mar-2004  00:01  5.1.2600.1360     494,080  Scecli.dll       IA-64
   31-Mar-2004  00:01  5.1.2600.1360     857,600  Scesrv.dll       IA-64
   09-Jan-2004  21:47  5.2.3790.32        30,208  Spupdsvc.exe     IA-64
   09-Mar-2004  00:24                    306,953  Xpupgfix.inf     IA-64
If you upgrade to Windows XP SP2 after you upgrade to Windows XP SP1 or after you upgrade to an earlier version of Windows XP, and this problem still occurs, you can manually apply the Xpupgfix.inf file that is included in this hotfix. To extract the Xpupgfix.inf file from this hotfix package, you must run the package with the /x switch at the command prompt. The package that is extracted will contain a file that is named WindowsXP-KB832082-x86-ENU.EXE or WindowsXP-KB832082-IA64-ENU.EXE. Extract this file with the /x switch again. Then type the following command at the command prompt to update the computer that is running Windows XP SP2 or a later version of Windows XP with the Xpupgfix.inf file:

%systemroot%\system32\secedit.exe /configure /cfg xpupgfix.inf /db %systemroot%\security\Database\update.sdb

If you upgrade a computer that is running Windows 2000 SP4 or a later version of Windows 2000 to a slipstreamed version of Windows XP SP2, no additional steps are necessary, because this hotfix is scheduled to be included in Windows XP SP2.

STATUS

Microsoft has confirmed that this is a problem in the Microsoft products that are listed in the "Applies to" section. This problem was first corrected in Microsoft Windows XP Service Pack 2.

MORE INFORMATION

For additional information, click the following article number to view the article in the Microsoft Knowledge Base:

824684 Description of the standard terminology that is used to describe Microsoft software updates

Modification Type:MinorLast Reviewed:10/28/2005
Keywords:kbHotfixServer kbQFE kbQFE kbWinXPsp2fix kbUpgrade kbSmartCard kbnetwork kbWinXPpreSP2fix kbfix kbbug KB832082 kbAudITPRO
©2004 Microsoft Corporation. All rights reserved.