Microsoft deployment toolkit 2010 failure message

▲
1
▼

I am having a problem with the deployment of Windows 7 from a server with Microsoft Toolkit 2010.

When deployment has finished I get a Windows error report which shows following message.

FAILURE (Er): 70: CreateObject(Microsoft.BDD.Utility) - Permission denied
Litetouch deployment failed, Return Code = - 2147023589 0x8007051B

I don't get it what Microsoft.BDD.Utility is exactly and when this utility is used (Tasksequence?) ?

Can anyone help me on this problem?

mdt-2010
permissions
asked on Server Fault Dec 22, 2009 by elhombre • edited Dec 23, 2009 by elhombre

3 Answers

▲
1
▼

BDD 2007 is the older version of the Microsoft Deployment Toolkit 2010 (which is what you should be using to deploy Windows 7). Make sure you are running MDT 2010 instead of BDD 2007 (download here: http://www.microsoft.com/downloads/details.aspx?FamilyId=3BD8561F-77AC-4400-A0C1-FE871C461A89&displaylang=en)

answered on Server Fault Dec 22, 2009 by Sean Earp
▲
1
▼

I'm not familiar with this tool, but error 0x8007051B means the following:

ERROR_INVALID_OWNER                                           winerror.h
# This security ID may not be assigned as the owner of this
# object.

My guess is this is related to user rights and somebody needs the SE_RESTORE_NAME privilege, but on what, I don't know.

answered on Server Fault Dec 24, 2009 by jlupolt
▲
0
▼

This happened to be because User Account Control (UAC) was enabled for the local Administrator account.

To fix:

  1. Click Start, then type: gpedit.msc
  2. In the search results, click on "gpedit". Confirm the UAC prompt.
  3. Navigate to: Local Computer Policy > Computer Configuration > Windows Settings > Security Settings > Local Policies > Security Options
  4. In the center, double-click on "User Account Control: Admin Approval Mode for the Built-in Administrator account". Select the "Disabled" radio button and click OK.
  5. Reboot the computer.

This setting is common when the Microsoft Security Baselines have been applied. If the original system was Windows 8 or newer and deployed using MDT, MDT will also turn UAC on for the local administrator account - it does this so that the local admin account can be used to access Universal/Modern/Metro applications.

answered on Server Fault Apr 22, 2015 by Frank Lesniak • edited Jun 5, 2015 by Frank Lesniak

User contributions licensed under CC BY-SA 3.0