Cannot get Network Access on Vista

what version of Firepass software are you running? Ideally you need to be on 6.0.3 & latest HF or 6.1.0 for maximum Vista compatibility - check the release notes. It can also be permissions on the client machine, thanks to UAC on Vista the FIrepass might not be able to install necessary components....

We suddenly started getting this problem out of the blue on Windows 7 computers where we are not local admins this week. The last thing I did was install a Process checker in my prelogon sequence. The error seems to be that urxhost.cab (written as "[1]urxhost.cab[1]" in the error message cannot be saved or opened due to access restrictions in the OS. Our message actually says "Error downloading components: Ingen tilgang", which is Norwegian for Access Denied, and means this is a message from the operating system (which is in Norwegian).

 

 

 

I have a log message which goes like this:

 

 

 

Thu Jan 14 12:33:40 2010 GMT (SUPERHOST:6064,5660) log level has been changed to 0

 

Thu Jan 14 12:33:40 2010 GMT (SUPERHOST:6064,5660) SGetRegistryAsString() - RegQueryValueEx(80000002, "SOFTWARE\Microsoft\Windows NT\CurrentVersion", "CSDVersion") error=183

 

Thu Jan 14 12:33:40 2010 GMT (SUPERHOST:6064,5660) Request to install/update control (clsid="{E0FF21FA-B857-45C5-8621-F120A0C17FF2}", codebase="https://firepass.tine.no/vdesk/terminal/urxhost.cabversion=6031,2009,1010,304")

 

Thu Jan 14 12:33:40 2010 GMT (SUPERHOST:6064,5292) ***USmartUpdateEx::RunObjectProc() - requested versions 395249625 66191664 https://firepass.tine.no/vdesk/terminal/urxhost.cabversion=6031,2009,1010,304

 

Thu Jan 14 12:33:40 2010 GMT (SUPERHOST:6064,5292) ***USmartUpdateEx::RunObjectProc() - URL="https://firepass.tine.no/vdesk/terminal/urxhost.cab" OutFileName=

 

Thu Jan 14 12:33:40 2010 GMT (SUPERHOST:6064,5292) ***USmartUpdateEx::RunObjectProc() - rights flag bIsEnoughForActiveX = 0, m_bUseInstallerService = 1

 

Thu Jan 14 12:33:40 2010 GMT (SUPERHOST:6064,5292) srvGetServiceVersion() - CallNamedPipe() failed, GetLastError = 2

 

Thu Jan 14 12:33:40 2010 GMT (SUPERHOST:6064,5292) ***USmartUpdateEx::RunObjectProc() - service version:0.0 service flag:0

 

Thu Jan 14 12:33:40 2010 GMT (SUPERHOST:6064,5292) ***USmartUpdateEx::RunObjectProc() - not enough rights in current user account

 

Thu Jan 14 12:33:40 2010 GMT (SUPERHOST:6064,5292) StartUserModeService() - enter

 

Thu Jan 14 12:33:40 2010 GMT (SUPERHOST:6064,5292) srvGetServiceVersion() - CallNamedPipe() failed, GetLastError = 2

 

Thu Jan 14 12:33:40 2010 GMT (INST_HELPER:5508,5680) log level has been changed to 0

 

Thu Jan 14 12:33:40 2010 GMT (INST_HELPER:5508,5680) CInstHelper::Start() - !IsWinVistaOrHigher() 0x00002000

 

Thu Jan 14 12:33:40 2010 GMT (SUPERHOST:6064,5292) SmartUpdateEx::StartUserModeService() - pHelper->Start err=0x80004005

 

Thu Jan 14 12:33:40 2010 GMT (SUPERHOST:6064,5292) ***USmartUpdateEx::RunObjectProc() - can't StartUserModeService.

 

Thu Jan 14 12:33:40 2010 GMT (SUPERHOST:6064,5292) USmartUpdateEx::RunObjectProc() - StartUserModeService() faied - quit

 

Thu Jan 14 12:33:40 2010 GMT (SUPERHOST:6064,5660) CURSuperHost::Failed: Error downloading required components

 

Ingen tilgang.

 

 

 

(we use an ActiveX Installer to help install the ActiveXs when the user doesnt have local admin access)

 

This is the log from another computer, totally win7 vanilla, with a normal user with no admin privileges. I entered the Admin password after clicking on Network Access, but it still says "Error downloading components: Ingen tilgang".

 

We are running Firepass 6.0.3, build URM-6.10-20091009, with following HFs:

 

HF-132177-1

 

HF-89820-1

 

HF-131623-1

 

HF-134290-1

 

 

client is Windows 7 Enterprise 32-bit on an Acer Aspire One, under local User with no admin privileges, Admin password was entered several times to install components.

 

 

Thu Jan 14 12:50:35 2010 GMT (INST_HELPER:2304,868) log level has been changed to 0

 

Thu Jan 14 12:50:35 2010 GMT (INST_HELPER:2304,868) CInstHelper::Start() - !IsWinVistaOrHigher() 0x00002000

 

Thu Jan 14 12:50:36 2010 GMT (Win32SystemCheck:3176,3512) log level has been changed to 0

 

Thu Jan 14 12:50:37 2010 GMT (Win32SystemCheck:3176,3512) CPA_FileCheck::get_FileVersion: C:\WINDOWS\system32\wtsmpfltNotObj.dll GetFileVersionInfoSize() fail

 

Thu Jan 14 12:50:37 2010 GMT (Win32SystemCheck:3176,3512) CPA_FileCheck::get_MD5: CreateFile() fail

 

Thu Jan 14 12:50:37 2010 GMT (Win32SystemCheck:3176,3512) CPA_FileCheck::get_FileSize: CreateFile() fail

 

Thu Jan 14 12:50:37 2010 GMT (Win32SystemCheck:3176,3512) CPA_FileCheck::get_LastModified: CreateFile() fail

 

Thu Jan 14 12:50:37 2010 GMT (Win32SystemCheck:3176,3512) log level has been changed to 0

 

Thu Jan 14 12:50:38 2010 GMT (Win32SystemCheck:3176,3512) CPA_FileCheck::get_FileVersion: c:\windows\downlo~1\urxhost.dll GetFileVersionInfoSize() fail

 

Thu Jan 14 12:50:38 2010 GMT (Win32SystemCheck:3176,3512) CPA_FileCheck::get_MD5: CreateFile() fail

 

Thu Jan 14 12:50:38 2010 GMT (Win32SystemCheck:3176,3512) CPA_FileCheck::get_FileSize: CreateFile() fail

 

Thu Jan 14 12:50:38 2010 GMT (Win32SystemCheck:3176,3512) CPA_FileCheck::get_LastModified: CreateFile() fail

 

Thu Jan 14 12:50:49 2010 GMT (SUPERHOST:3176,1320) log level has been changed to 0

 

Thu Jan 14 12:50:49 2010 GMT (SUPERHOST:3176,1320) SGetRegistryAsString() - RegQueryValueEx(80000002, "SOFTWARE\Microsoft\Windows NT\CurrentVersion", "CSDVersion") error=183

 

Thu Jan 14 12:50:49 2010 GMT (SUPERHOST:3176,1320) Request to install/update control (clsid="{E0FF21FA-B857-45C5-8621-F120A0C17FF2}", codebase="https://firepass.tine.no/vdesk/terminal/urxhost.cabversion=6031,2009,1010,304")

 

Thu Jan 14 12:50:49 2010 GMT (SUPERHOST:3176,1068) ***USmartUpdateEx::RunObjectProc() - requested versions 395249625 66191664 https://firepass.tine.no/vdesk/terminal/urxhost.cabversion=6031,2009,1010,304

 

Thu Jan 14 12:50:49 2010 GMT (SUPERHOST:3176,1068) ***USmartUpdateEx::RunObjectProc() - URL="https://firepass.tine.no/vdesk/terminal/urxhost.cab" OutFileName=C:\Windows\Downloaded Program Files\urxhost.dll

 

Thu Jan 14 12:50:49 2010 GMT (SUPERHOST:3176,1068) ***USmartUpdateEx::RunObjectProc() - rights flag bIsEnoughForActiveX = 0, m_bUseInstallerService = 1

 

Thu Jan 14 12:50:49 2010 GMT (SUPERHOST:3176,1068) srvGetServiceVersion() - CallNamedPipe() failed, GetLastError = 2

 

Thu Jan 14 12:50:49 2010 GMT (SUPERHOST:3176,1068) ***USmartUpdateEx::RunObjectProc() - service version:0.0 service flag:0

 

Thu Jan 14 12:50:49 2010 GMT (SUPERHOST:3176,1068) ***USmartUpdateEx::RunObjectProc() - not enough rights in current user account

 

Thu Jan 14 12:50:50 2010 GMT (SUPERHOST:3176,1068) StartUserModeService() - enter

 

Thu Jan 14 12:50:50 2010 GMT (SUPERHOST:3176,1068) srvGetServiceVersion() - CallNamedPipe() failed, GetLastError = 2

 

Thu Jan 14 12:50:50 2010 GMT (INST_HELPER:4088,2584) log level has been changed to 0

 

Thu Jan 14 12:50:50 2010 GMT (INST_HELPER:4088,2584) CInstHelper::Start() - !IsWinVistaOrHigher() 0x00002000

 

Thu Jan 14 12:50:50 2010 GMT (SUPERHOST:3176,1068) SmartUpdateEx::StartUserModeService() - pHelper->Start err=0x80004005

 

Thu Jan 14 12:50:50 2010 GMT (SUPERHOST:3176,1068) ***USmartUpdateEx::RunObjectProc() - can't StartUserModeService.

 

Thu Jan 14 12:50:50 2010 GMT (SUPERHOST:3176,1068) USmartUpdateEx::RunObjectProc() - StartUserModeService() faied - quit

 

Log on as admin from the start or use the F5 Service Installer package.

I know that workaround; if you make sure urxhost.dll is installed prior to logging it you simply skip the downloaD/install routine that fails.

 

 

But that's not practical for us with 3500 computers that need to continue working fine through future Firepass upgrades.

I doubt this will fix it but the first thing that I or f5 support would recommend is installing latest HF, which at time of writing is HF-603-5.1-1.

 

 

I don't believe that you currently have this installed.

 

Posted By Moonlit on 01/14/2010 7:25 AM

 

 

I know that workaround; if you make sure urxhost.dll is installed prior to logging it you simply skip the downloaD/install routine that fails.

 

 

But that's not practical for us with 3500 computers that need to continue working fine through future Firepass upgrades.

 

 

 

Then you need to install the service installer package on all your devices.

Mike, you rock!

 

 

I never considered that the component installer aids installation - all components installed silently when I just made sure the Component Installer was installed first. This solves the problem for our own computers.

 

 

That still leaves the problem of users now suddenly not being able to use Application Tunnels (for Citrix) from net cafes or other computers without local admin priveleges. This used to work, but they now get the error described above.

Good to hear, unfortunately you will probably have to use an application like filemon or something similar to figure out the problem. It will show you what is going on with each process and it will help in figuring out what the exact issue is.