daknetworks.com

WINDOWS 10 is having trouble installing software. This is a complex issue but basically some software won't install (or updates won't install) because of an ERROR 1603. More specifically: ErrorCode: 1603(0x643).

Turning on VERBOSE logging (check another article but it puts the logs in %user%\appdata\local\temp) for the install, it shows that the actual error is: CAInitSPPTokenStore.x86: Error: Failed to initialize the SPP Token store. HResult: 0x80070057. Hmmm... What to do?

• -click START > RUN > REGEDIT
• -navigate to: hkey_local_machine/software/microsoft/windows nt/currentversion/profilelist

Nested underneath, you will see SID's. Somthing like:

• s-1-5-18
• s-1-5-19
• s-1-5-20
• s-1-5-21-...1000
• s-1-5-21-...1003
• s-1-5-82

To see what SID's corrospond to actual accounts.

• -type: wmic useraccount get name,sid

You'll see something like:

• 1000 owner
• 1003 tempfix

Notice that s-1-5-18, s-1-5-19, s-1-5-20 do not show. So what's up? Well, this is because these are system-accounts that are not be used/seen. This is what we are concerned about. They are as follows:

• s-1-5-18 is SYSTEM
• s-1-5-19 is LOCAL SERVICE
• s-1-5-20 is NETWORK SERVICE

Next, go back to regedit to: hkey_users

A DEFAULT NORMAL INSTALL has something like:

• S-1-5-18
• s-1-5-19
• s-1-5-20
• s-1-5-21-...1215
• s-1-5-21-...1216
• s-1-5-21-...1217

What we are seeing is that some of the upgrades to WINDOWS 10 are BROKEN and has the following:

• s-1-5-18
• s-1-5-19
• s-1-5-21-...1000
• s-1-5-21-...1003

So, it is missing s-1-5-20. Here's how to fix:

• -start > all-programs> accessories
• -right click COMMAND-PROMPT > run-as-administrator
• -type ren C:\Windows\ServiceProfiles\NetworkService\NTUSER.DAT *.OLD
• -xcopy /h "C:\Users\Default\NTUSER.DAT" "C:\Windows\ServiceProfiles\NetworkService\NTUSER.DAT"
• -in explorer travel to C:\Windows\ServiceProfiles\NetworkService\NTUSER.DAT
• -right-click > properties > security > edit > add
• -type: NETWORK SERVICE
• -give NETWORK SERVICE full-control
• -reboot

Now, upon reboot, open REGEDIT again and go to HKEY_USERS. You should now see that s-1-5-20 is added back in. Let's add the correct permissions:

• -right-click on S-1-5-20
• -click permissions > add
• -type: network service
• -click OK
• -checkmark FULL CONTROL
• -click OK

I do not have a good explanation of why this happens. It could be a corrupt file. It could be a failed upgrade. It could be some type of antivirus. I do not know. What I know is that this took a few days to figure out and the software will now install successfully!!!!

NOTES:
-https://support.microsoft.com/en-us/kb/243330-https://blogs.technet.microsoft.com/odsupport/2010/12/30/troubleshooting-office-installation-failures/