Remote Registry won't start

Question

_{Tuesday, May 16, 2017 12:55 PM}

I am sure many of you have already seen this post before. I think I have read them all as well, but I am still not finding my solution. I used a gpo to automatically start the remote registry service. I have seen two methods for doing this and neither works.

1. Define the policy under System Services under Security settings as automatic
2. From Preferences, Control Panel Settings, then Services I created a service entry using the NT AUTHORITY\Local Service (also tried Network Service for kicks).

I know the policy is getting applied because on test machines the service changes from disabled to automatic, but does not start. The event viewer shows an ID 7000 The account specified for this service is different from the account specified for other services running in the same process.  Same message but error 1079 when I try to manually start.

Here's the rub...if I open the service properties on the test machine, wipe out the password, close and start, then it works; even after another reboot. Obviously I am trying to use group policy so I don't have to visit 200 machines. So why isn't my gpo doing this properly?

All replies (5)

_{Tuesday, May 16, 2017 1:01 PM}

Hi,

Here is your solution

https://www.petenetlive.com/KB/Article/0000488

Merci de marquer comme réponse les sujets qui vous ont permis d'avancer afin que cela puisse être bénéfique aux personnes qui rencontrent le même problème.

_{Tuesday, May 16, 2017 1:12 PM}

Thanks for the quick response. However, I'm sorry to say that's not my solution. I tried that, mentioned in step 1 of my original post. I had also read that same article in my initial search because TrendMicro is exactly what started my adventure down this rabbit hole.

_{Tuesday, May 16, 2017 1:18 PM}

OK, what version of windows 10 are you using ? Can you give the result of winver pls ?

_{Tuesday, May 16, 2017 1:29 PM}

• "Did you find the reason of the local account so ?"

          I'm not sure what your asking here. Can you elaborate

• "If you disable your AV same result ?"

           There is no AV installed. That's what I am trying to get installed by starting the remote registry.

• "your test computer is clean ? (new device ? )"

            New and old machines, same results.

_{Wednesday, May 17, 2017 12:40 PM}

I also noticed, after investigating the dependency services, the RPC and DCOM each log in with different credentials. So what gives with the 1079 message?