Ok, here is the deal.
The problem happens because you have the "Plug and Play" service set by GPO. Sounds weird but have an explanation.
When you set the "Plug and Play" service by GPO, the service is set with default permissions:
Allow - BUILTIN\Administrators - Full Control
Allow - NT AUTHORITY\SYSTEM - Full Control
Allow - NT AUTHORITY\INTERACTIVE - Read
The permissions granted to the "Plug and Play" Service do not grant the Licensing Service (sppsvc) the appropiate rights to access the Plug and Play service.
So, you have 2 solutions
A- Disable the "Plug and Play" service by GPO and let the default configuration works instead the configuration set by GPO. After that, make "gpupdate /force /target:computer" to update the computer policy without restart.
B- Set the permissions in the "Plug and Play" service in the GPO to allow the activation. This issue happens in Windows Server 2008 R2 and Windows 7.
1- Open the Plug and Play service in the GPO. Go to Computer Configuration / Policies / Windows Settings / Security Settings / System Services.
2- Open the service and click in Edit Security.
3- Add the "SERVICE" user with the following allow permissions.
Query template
Query status
Enumerate dependents
Interrogate
User-defined control
Read permissions
Run "gpupdate /force /target:computer" to update the computer policy without restart.
Best Regards
本站仅提供存储服务，所有内容均由用户发布，如发现有害或侵权内容，请
点击举报。
