Hello,

We finally found out what causes this problem but we can't find a solution.

When a user logs on with the normal user name, in my case dcools, no problems. But we found out that several people are also using logon with username@domain and they are using it as follows: dcools@ogt013.nl. They must use this way (username@ogt013.nl) for the Office 365 web logon when at home or when SSO doesn't work. When and when not do we get the bundle error:


  1. Turn on workstation, logon with dcools@ogt013.nl -> We get the bundle error
  2. Sign out and logon again with dcools@ogt013.nl -> it works
  3. Reboot workstation and logon with dcools@ogt013.nl -> bundle error
  4. Sign out and logon again with dcools@ogt013.nl -> it works
  5. Sign out and logon again with dcools@ogt013.nl -> it works
  6. Sign out and logon again with dcools@ogt013.nl -> it works
  7. Sign out and logon again with another username; T_dcools@ogt013.nl -> bundle error
  8. Sign out and logon again with T_dcools@ogt013.nl -> it works
  9. Turn off workstation and get some drinks. . .


Username without the @ogt013.nl always works without bundle problems.

Systems and version#:

Windows 8.1 Enterprise Dutch workstations
ZENworks Configuration Management Version: 11.4.3
ZENworks Agent 11.4.0 and 11.4.3
Windows Domain: intern.local


The error and warnings in the following bundle logs is about literally one registry value that has to be set:

Code:
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\2]
"2500"=dword:3
But all bundles with registry settings do not work! Also bundles with scripts / "Define your own script" give the same error about the file right settings.

The message "There was an error setting file rights" isn't completely right. While a user with this problem is logged in I remotely logged on to the workstations with PowerShell and command Enter-PSSession and there I see that folder C:\Users\dcools\AppData\Local\Temp\917eebba-acd9-4da7-9647-6ff410c7c783 has the correct rights (ACL) (with PowerShell command Get-ACL) also the file e374c4adc2b4f77ac9d244a0fac5cee6-Registry_Edit-319098Input.xml has the correct rights.

From dutch to english translations from logs; "Ongeldige waarde" = "Invalid value"

On the workstation in log file "C:\Program Files (x86)\Novell\ZENworks\logs\LocalStore\zmd-messages.log" we find the following entries (For readability every [] is split on new lines:

[TRACE]
[07/21/2017 08:51:28.112]
[804]
[ZenworksWindowsService]
[56]
[]
[ZenCommon]
[]
[Failed to find sid in local accounts. Looking in AD accounts]
[]
[]
[]
[ZENworks Agent]

[WARN]
[07/21/2017 08:51:30.893]
[804]
[ZenworksWindowsService]
[56]
[dcools]
[StandaloneHandler]
[ActionMan.SetFileRightsException]
[There was an error setting file rights for C:\Users\dcools\AppData\Local\Temp\917eebba-acd9-4da7-9647-6ff410c7c783\e374c4adc2b4f77ac9d244a0fac5cee6-Registry_Edit-319098Input.xml on Ongeldige waarde.
Parameternaam: sddlForm.]
[]
[e374c4adc2b4f77ac9d244a0fac5cee6]
[]
[ZENworks Agent]

[ERROR]
[07/21/2017 08:51:30.955]
[804]
[ZenworksWindowsService]
[56]
[dcools]
[BundleManager]
[ActionMan.ErrorGeneratingInputFile]
[Error generating input file for Registry Edit Action.]
[]
[e374c4adc2b4f77ac9d244a0fac5cee6]
[]
[ZENworks Agent]



The Windows Event Log also shows these log entries:



Logboeknaam: Application
Bron: Novell.Zenworks.Logger
Datum: 21-7-2017 08:51:30
Gebeurtenis-id:0
Taakcategorie: Geen
Niveau: Waarschuwing
Trefwoorden: Klassiek
Gebruiker: n.v.t.
Computer: PD-99995.intern.local
Beschrijving:
Category: StandaloneHandler
ActionMan.SetFileRightsException: There was an error setting file rights for C:\Users\dcools\AppData\Local\Temp\917eebba-acd9-4da7-9647-6ff410c7c783\e374c4adc2b4f77ac9d244a0fac5cee6-Registry_Edit-319098Input.xml on Ongeldige waarde.
Parameternaam: sddlForm.
Gebeurtenis-XML:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
<System>
<Provider Name="Novell.Zenworks.Logger" />
<EventID Qualifiers="0">0</EventID>
<Level>3</Level>
<Task>0</Task>
<Keywords>0x80000000000000</Keywords>
<TimeCreated SystemTime="2017-07-21T06:51:30.000000000Z" />
<EventRecordID>3187</EventRecordID>
<Channel>Application</Channel>
<Computer>PD-99995.intern.local</Computer>
<Security />
</System>
<EventData>
<Data>Category: StandaloneHandler
ActionMan.SetFileRightsException: There was an error setting file rights for C:\Users\dcools\AppData\Local\Temp\917eebba-acd9-4da7-9647-6ff410c7c783\e374c4adc2b4f77ac9d244a0fac5cee6-Registry_Edit-319098Input.xml on Ongeldige waarde.
Parameternaam: sddlForm.
</Data>
</EventData>
</Event>

Logboeknaam: Application
Bron: Novell.Zenworks.Logger
Datum: 21-7-2017 08:51:30
Gebeurtenis-id:0
Taakcategorie: Geen
Niveau: Fout
Trefwoorden: Klassiek
Gebruiker: n.v.t.
Computer: PD-99995.intern.local
Beschrijving:
Category: BundleManager
ActionMan.ErrorGeneratingInputFile: Error generating input file for Registry Edit Action.
Gebeurtenis-XML:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
<System>
<Provider Name="Novell.Zenworks.Logger" />
<EventID Qualifiers="0">0</EventID>
<Level>2</Level>
<Task>0</Task>
<Keywords>0x80000000000000</Keywords>
<TimeCreated SystemTime="2017-07-21T06:51:30.000000000Z" />
<EventRecordID>3189</EventRecordID>
<Channel>Application</Channel>
<Computer>PD-99995.intern.local</Computer>
<Security />
</System>
<EventData>
<Data>Category: BundleManager
ActionMan.ErrorGeneratingInputFile: Error generating input file for Registry Edit Action.
</Data>
</EventData>
</Event>



And last, the message log of the bundle in ZCC:



Full Message: Error generating input file for Registry Edit Action.
Additional Information: None
Severity: Error
Date: July 21, 2017 8:51:30 AM
Acknowledged Date: None
Source: /Devices/Workstations/Desktops/PD-99995
Message ID: ActionMan.ErrorGeneratingInputFile
Probable Cause URL: None
Log ID: 569f38dbfffbdfa75927126924da1faa
Related Objects: /Bundles/Applicaties/_ICT/Zenworks Configuratie Management

Full Message: There was an error setting file rights for C:\Users\dcools\AppData\Local\Temp\917eebba-acd9-4da7-9647-6ff410c7c783\e374c4adc2b4f77ac9d244a0fac5cee6-Registry_Edit-319098Input.xml on Ongeldige waarde. Parameternaam: sddlForm.
Additional Information: None
Severity: Warning
Date: July 21, 2017 8:51:30 AM
Acknowledged Date: None
Source: /Devices/Workstations/Desktops/PD-99995
Message ID: ActionMan.SetFileRightsException
Probable Cause URL: None
Log ID: f136d722d58c1da7015cdddf295fbf0a
Related Objects: /Bundles/Applicaties/_ICT/Zenworks Configuratie Management




Best regards,
Diederick Cools