Windows Error Code 0x800F0954

KB ID 0001626

Problem

Seen when attempting to add a Windows Optional Feature;

Windows couldn’t complete the required changes.
The changes could not be completed. Please reboot your computer and try again
Error code: 0x800F0954

Solution

Typically you see this error if your machine is set to get its updates from WSUS. You can change the way Windows operates to get the ‘Feature addition’ files directly from Microsoft with a group policy.

  • For Local Policy: Windows Key+R > gpedit.msc {Enter}
  • For Domain Policy: (On a domain controller) > Windows Key+R > gpmc.msc {Enter} > Create a new policy or edit one that’s linked to computer objects.

Navigate to;

[box]

Configuration > Administrative Templates > System 

[/box]

Locate ‘Specify Settings for optional component installation and component repair‘.

Set to Enabled > Tick ‘Download repair content and optional features directly from Windows Update instead of Windows Server Update Services (WSUS) > Apply > OK > Close the policy editor.

Then either wait or Windows – Forcing Domain Group Policy

Related Articles, References, Credits, or External Links

NA

Event ID 36888

KB ID 0000634 

Problem

This was driving me nuts on my Windows 7 x64 Laptop.

Log Name: System
Source: Schannel
Event ID: 36888
Task Category: None
Level: Error
User: SYSTEM
Description:
The following fatal alert was generated: 10. The internal error state is 10.

I was getting a dozen of these an hour!

Solution

This error is caused (from what I can gather) by an error in certificate negotiation, your machine is trying to initiate communications with another machine/server using a certificate and TLS and the process is producing this error TLS1_ALERT_UNEXPECTED_MESSAGE (10).

1. If your browser is the cause of the problem, then simply open Internet Options > Advanced > Untick all the TLS options > Apply.

2. However this DID NOT WORK for me, so something is programmatically chatting from my laptop using TLS. The bottom line is, this problem is probably not even on your machine, so I’m simply going to disable SCHANNEL logging.

Note: If your Error does NOT say “The following fatal alert was generated: 10. The internal error state is 10“. then I would suggest NOT doing this.

3. In the search run box type regedit and navigate to the following key;

[box]
HKEY_LOCAL_MACHINE > System > CurrentControlSet > Control > SecurityProviders > SCHANNEL
[/box]

Change the EventLogging value from 1 to 0 (that’s a zero).

Related Articles, References, Credits, or External Links

NA

Event ID 3085

KB ID 0000129

Problem

Error – 1601 occurred while generating an outgoing replication message.  Type 0x4″

Solution

There’s corruption in your public folder store, I see this during Exchange 2003 to 2007 Migrations, quite often some folders will replicate fine and other will not, and there is no rhyme or reason as to why. Then you see this error in the event log, essentially a couple of corrupt messages/items are stopping an entire folder from replicating.

There’s going to be some downtime to your public folders (sorry)

1. On the Exchange 2003 Server, launch the Exchange System Manager > Drill down to the public folder store > Right click > Dismount > Yes.
2. Now you need to run the isinteg tool, it in the exchsrvr directory in the sub folder called “bin” > Start > Run > cmd {Enter} > cd “c:program filesexchsrvrbin” {enter}.

Note: The path to your bin folder might be different.

3. Take note of your exchange server name in the example below its CTC-EX2, execute the following command,

isinteg -s CTC-EX2 -fix -test alltests

4. Select the offline database that your public folders are in, (in the example below that’s 2).

5. Press Y {enter} to confirm.

4. This will perform 11 different tests, each one will tell you,

x number of errors
x number of warnings
x number of fix(es)
x number of rows <—- ignore this figure its not important.

5. Continue to execute the SAME command until one of two things happens,

a. You get 0 errors, 0 warnings, and 0 fix(es) for everything.
OR
b. You get the same result on one or more tests THREE TIMES IN A ROW.

6. When done, go back to the Exchange System Manager and re-mount the store, apply the cup of coffee rule and check replication.

Related Articles, References, Credits, or External Links

Credit to Debasis at Microsoft for his help.

Nero Install Error: ‘The Installation process cannot be resumed…’

KB ID 0000294 

Problem

Seen while installing Nero Burning ROM, at various points along the install it will fail with the following error,

Error:
The Installation process cannot be resumed. A rollback of the failed component will be performed. Some applications have been installed successfully and can be used, Do you want these applications to be uninstalled?

Solution

1. Click “Yes” to uninstall.

2. Download and run the cleanup tool.

3. Select “Clean” > Even if it says it can’t find anything, select “Yes” to continue.

4. Open Windows explorer, and navigate to c:program filescommon files > Delete the “Nero” folder, If it says some files cannot be deleted because the are in use, download and use “unlocker” on them, then delete them.

5. Click Start > Run > type %temp% {enter} > this will open your temp directory, delete the nro.tmp folder and any other files relating to Nero or nro.

6. Reboot the PC and then retry the installation.

 

Related Articles, References, Credits, or External Links

NA

Windows and Cisco (IPSEC) VPN Client

KB ID 0000693 

Problem

I’d been running Windows 8 for a while now. But was the first time I needed to use my Cisco VPN Client software. So I was not happy when this happened.

Note: Using VPN Client version 5.0.07.0440

Secure VPN Connection terminated locally by the Client. Reason 442: Failed to enable Virtual Adapter.

Solution

As it turns out this is a known problem with Windows 8, and there is a work-around.

1. Press Windows Key+R to open the run prompt > regedit {enter}

2. Navigate to;

[box] HKEY_LOCAL_MACHINE>SYSTEM>CurrentControlSet>Services>CVirtA [/box]

Locate the DisplayName > Edit its value > Delete all the text to the LEFT of “Cisco Systems VPN Adapter for 64bit Windows.”

2. So it looks like this.

3. Then it should work as before.

 

Related Articles, References, Credits, or External Links

Download Cisco VPN Client Software

Exchange / Outlook – Security Alert – “The security certificate was issued by a company you have not chosen to trust”

KB ID 0000454

Problem

Out of the box Exchange 2007 and 2010 comes with a “Self Signed” digital certificate. That’s OK for getting you up and running but your Outlook clients may start to see the error below.

Error:
Security Alert
Information you exchange with this site cannot be viewed or changed by others. However, there is a problem with the sites security certificate.
The security certificate was issued by a company you have chosen not to trust. View the Certificate to determine whether you want to trust the certifying authority.

Solution

You have a number of options to stop this error.

Option 1 (This is WHAT YOU SHOULD DO!)

You should purchase a certificate signed by a trusted certification authority, these used to cost a fortune, but if you shop around you can pick them up very cheaply.

Obtaining, and Installing an Exchange Certificate.

Option 2 (Free, and handy if you don’t have a lot of clients)

It still amazes me that people with pay out for a new server, and Exchange, but then refuse to buy a certificate? But if your reading this then that might well be you. You can choose to trust the certificate that’s being presented to you. You carry out this procedure on each Outlook client. If you have a lot of Outlook clients then skip to options 3 and 4).

1. First, start up Outlook and get the error message on the screen.

2. Select “View Certificate” > Install Certificate > Next.

3.Selct “Place all certificates in the following store” > Browse > Select “Trusted Root Certification Authority > OK.

4. Finish.

5. Select yes to accept the certificate import> Restart Outlook.

Option 3 (Free, and handy if you have a lot of clients)

Install Certificates with Group Policy GPO

Option 4

Install your own certification authority, and sign your own Exchange certificate. Great if you already have a CA, though it’s a mess about just to solve this problem.

 

Related Articles, References, Credits, or External Links

NA

Microsoft Lync Install Error “Prerequisite installation failed: Wmf2008R2”

KB ID 0000513 

Problem

Seen Installing Lync Server 2010 on Windows Server 2008 R2, during the “Setup or Remove Lync Server Components” phase of the Deployment Wizard.

Error: Prerequisite installation failed: Wmf2008R2
Details
Type: PreInstallFailed

Solution

Thankfully this is a know problem and Microsoft has addressed it with KB 2522454

1. Drop to command line and issue the following command:

[box]%systemroot%system32dism.exe /online /add-package /packagepath:%windir%servicingPackagesMicrosoft-Windows-Media-Format-Package~31bf3856ad364e35~amd64~~6.1.7601.17514.mum /ignorecheck[/box]

2. Then reboot as instructed, and continue the installation.

Related Articles, References, Credits, or External Links

NA

Exchange – “This operation can only be performed by a manager of the group” Error

KB ID 0000603 

Problem

Seen On Exchange 2010 (SP1), when trying to add a user to a distribution group.

Add-DistributionGroupMember Failed
Error:
You don’t have sufficient permissions. This operation can only be performed by a manager of the group.

Solution

1. There a few reasons for this error, I’m assuming that there is no user set as the manager for this group? (Properties > Group Information > Managed By). In my case it’s a known bug in Exchange 2010 with SP1.

Microsoft Exchange Server Build Numbers

2. This was fixed in Rollup 3 for Service pack 1 (source), Simply run an update and the problem should cease.

Related Articles, References, Credits, or External Links

NA