Problem:

I am trying to create Bootable media using the Task Sequence Media Wizard. I run the wizard and select the destination, boot image and DP. The wizard runs but then fails with the following error:

Error creating media. Error message is : Access is denied.. Please refer to CreateTsMedia.log to get details.

If I look in the CreateTsMedia.log it shows:

Failed to create media (0x80070005)

If I also look in the wmiprov.log (c:\windowssystem32\wbem\Logs) I see:

Impersonation failed - Access denied

I’ve found other people that have had this issue and resolved it by granting Everyone the Local Launch permission in the DcomCnfg console as well as granting Special permissions to Creator owner at C:\WINDOWS\SYSTEM32\WBEM but neither of these have worked.

I’m also not using a disk encryption program which I know has also been known to cause the issue.

Resolution:

In this particular case the problem was being caused by McAfee which had been configured to block AUTORUN.INF. The clue was by looking in the Application Log which showed an Event ID 257 with the following text:

Blocked by access protection rule.  Access to object 
C:\DOCUME~1\<user_ID>\LOCALS~1\Temp\_tsmedia_2036\stage\AUTORUN.INF was blocked by 
rule User-defined Rules:autorun block - in place in response to…

Looking at McAfee’s On-Access Scan Statistics, under the Access Protection Statistics section it showed two File actions blocked: In the last hour.

Looking at the AccessProtectionLog.txt it showed:

Blocked by Access Protection rule  C:\WINDOWS\system32\mmc.exe
C:\DOCUME~1\<user_ID>\LOCALS~1\Temp\_tsmedia_1940\stage\AUTORUN.INF
User-defined Rules:autorun block - in place in response to  Action blocked : Create

As the lines above indicates, when you create Bootable media it stages everything locally before it copies it to the destination including an AUTORUN.INF that gets created in the following subdirectory:

C:\DOCUME~1\<user_ID>\LOCALS~1\Temp\_tsmedia_\stage

Obviously as soon as McAfee sees this file it blocks it which trips up the Task Sequence Media wizard.

Disabling McAfee and re-running the wizard resolved the issue (if you need to do this don’t forget to re-enable McAfee as soon as you’ve created the media).

m4s0n501