According to foreign media reports, Microsoft recently stated that pirated Windows 7 RTM can be converted into genuine legal software, but the premise is that the platform is originally genuine. It is understood that Microsoft has provided users with a total of two measures to restore pirated Windows 7 to genuine software.
Microsoft said that some time ago, some Windows 7 users reported that after they logged in to Windows 7, they received a Windows activation window containing the following message: "Windows is not genuine, and your computer may not be able to run pirated Windows. 0x80070005."
Before the release of Windows 7 RTM, the author downloaded the RC version of Windows 7 Ultimate through an MSDN account for trial use, and obtained a genuine product key from Microsoft. Later, my Windows system experienced the situation described by Microsoft: the computer desktop background changed to pure black, and the following error message appeared on the lower right corner of the screen: "This Windows is not genuine."
When the author looks at the system properties (Control Panel/System and Security/System), he will receive the following message: You must activate Winodws, activate Windows immediately. When I used slmgr.vbs /dlv to check the permission status, I received the following message: "Error: 0x80070005 Access denied: The requested operation requires elevated privileges."
In fact, Microsoft is well aware of the problem of Windows 7 changing from genuine to pirated, and has recorded it in Microsoft Support. However, from the author's perspective, Windows 7 spontaneously changed from genuine to pirated. After installing Windows 7 RC, I did not install any new applications, mess with the registry, or play with Group Policy, but upon startup I found that I was running a non-genuine copy of Windows 7.
In this regard, Microsoft explained that the problem occurred because of the lack of permissions in the registration key HKUS-1-5-20. Microsoft said that network service accounts must have full control over the registration key and permission to read the key. This situation may be the result of applying a Plug and Play Group Policy Object (GPO).
Computer Configuration/Policies/Windows Settings/Security Settings/System Services/Plug and Play (Startup Mode: Automatic). Apparently, the licensing service uses "plug and play" to grab the hardware's ID information to bind the license to the computer. Microsoft said that this setting may turn the original activated Windows 7 into a pirated one.
Currently, Microsoft has not released an update to address this issue or even provided a fix. However, consumers affected by this issue can resolve the issue by taking one of the following steps:
Method A: Disable Plug and Play policy
1. Determine the source of the strategy:
a: If you encounter an activation error on the client, click Start, Run, and enter the rsop.msc command to run the policy wizard;
b: Access the following location: Computer Configuration/Policies/Windows Settings/Security Settings/System Services;
If the Plug and Play service is configured through a Group Policy setting, you will see the Group Policy using this setting.
2. Disable the group policy settings and reapply the group policy:
a. Edit the group policy in step 1, change the setting to "Not Defined", and add the permissions required for the network service account;
b. Reapply the group policy gpupdate /force;
Method B: Modify group policy permissions
Open the Group Policy in step 1 of method A and open the corresponding group policy settings;
2. Click the Edit Security button, then click the Advanced button;
3. In the Plug and Play window of Advanced Security Settings, click Add, then add the service account, and finally click OK;
4. Select the following permissions in the allowed area, and then click OK:
Query template
Query status
Enumerate slave units
user defined control
Read permission
Note: The original permissions are the minimum permissions required
5. After applying the previous permissions in the group policy settings, run gpupdate /force;
6. Confirm that the appropriate permissions are applied using the following command: sc sdshow plugplay;
The following are the permissions in the SDDL Plug and Play service:
D:(A;;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;SY)
(A;;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;BA)
(A;;CCLCSWLOCRRC;;;IU)
(A;;CCLCSWLOCRRC;;;SU)
S:(AU;FA;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;WD)
(A;;CC LC SW LO CR RC ;;;SU is an Access Control Entry (ACE) that allows the following rights to "SU" (SDDL_SERVICE – Service logon user)
A: Access Allowed
CC: Create Child
LC: List Children (list children)
SW: Self Write
LO: List Object (list object)
CR: Control Access
RC: Read Control
SU: Service Logon User (service login user)
After completing the above operations, start the Registry Editor, right-click the registry key HKEY_USERSS-1-5-20, and then select Permissions. If the network service does not exist, click Add, enter the object name to select Type Network Service, then click View Name and OK. Select the network service, grant full control and read permissions, and restart the computer. After restarting, the system may need to be activated. After the activation is completed, the original pirated Windows 7 will be restored to the genuine version.