DeviceMetadataServiceURL Bad Certificate
-
So this ruined my weekend. Broke all of our printers. This was the registry entry I had to apply via GPO in order to fix it. We all assumed this was due to ransomware and it wasn't.
If the following registry value does not exist or is not configured as specified, this is a finding: Registry Hive: HKEY_LOCAL_MACHINE Registry Path: \SOFTWARE\Policies\Microsoft\Windows\Device Metadata\ Value Name: PreventDeviceMetadataFromNetwork Type: REG_DWORD Value: 1 -
Nice find - I did start running into this issue on one device on Friday, but was forced to abandon it at the time.
thanks.
@wirestyle22 can you add some tags.
-
Where is this error appearing? I looked at the linked post, but couldn't really tell.
-
-
@wrx7m said in DeviceMetadataServiceURL Bad Certificate:
Where is this error appearing? I looked at the linked post, but couldn't really tell.
\SOFTWARE\Policies\Microsoft\Windows\Device Metadata\DeviceMetaDataServiceURLYou'll see:
http://go.microsoft.com/fwlink/?LinkID=252669&clcid=0x409If you try to access that website it will give you a certificate error.
@Dashrender already posted the event log so I won't bother
-
OK. Sorry for not being clear enough. How does the error manifest itself? What problems were occurring that prompted an investigation into this?
-
@wrx7m said in DeviceMetadataServiceURL Bad Certificate:
OK. Sorry for not being clear enough. How does the error manifest itself? What problems were occurring that prompted an investigation into this?
What happens is your printers will have a black clock next to them. You'll lose the ability to right-click them or access the print server settings. You can't install new printers or remove printers already installed. The status of the printer will be "device setup in process" infinitely. This is due to it trying to pull the icons for the printers from an MS service that is not functional.
-
@wirestyle22 said in DeviceMetadataServiceURL Bad Certificate:
@wrx7m said in DeviceMetadataServiceURL Bad Certificate:
OK. Sorry for not being clear enough. How does the error manifest itself? What problems were occurring that prompted an investigation into this?
What happens is your printers will have a black clock next to them. You'll lose the ability to right-click them or access the print server settings. You can't install new printers or remove printers already installed. The status of the printer will be "device setup in process" infinitely. This is due to it trying to pull the icons for the printers from an MS service that is not functional.
Oh, wow. That would suck. I wonder if this is already happening here and I haven't heard about it yet.
-
@wrx7m said in DeviceMetadataServiceURL Bad Certificate:
@wirestyle22 said in DeviceMetadataServiceURL Bad Certificate:
@wrx7m said in DeviceMetadataServiceURL Bad Certificate:
OK. Sorry for not being clear enough. How does the error manifest itself? What problems were occurring that prompted an investigation into this?
What happens is your printers will have a black clock next to them. You'll lose the ability to right-click them or access the print server settings. You can't install new printers or remove printers already installed. The status of the printer will be "device setup in process" infinitely. This is due to it trying to pull the icons for the printers from an MS service that is not functional.
Oh, wow. That would suck. I wonder if this is already happening here and I haven't heard about it yet.
Yeah it legit ruined my weekend trying to figure it out. We got hit with ransomware and our group policy was affected so I thought it was related. Just really really bad luck.
-
@wirestyle22 said in DeviceMetadataServiceURL Bad Certificate:
@wrx7m said in DeviceMetadataServiceURL Bad Certificate:
@wirestyle22 said in DeviceMetadataServiceURL Bad Certificate:
@wrx7m said in DeviceMetadataServiceURL Bad Certificate:
OK. Sorry for not being clear enough. How does the error manifest itself? What problems were occurring that prompted an investigation into this?
What happens is your printers will have a black clock next to them. You'll lose the ability to right-click them or access the print server settings. You can't install new printers or remove printers already installed. The status of the printer will be "device setup in process" infinitely. This is due to it trying to pull the icons for the printers from an MS service that is not functional.
Oh, wow. That would suck. I wonder if this is already happening here and I haven't heard about it yet.
Yeah it legit ruined my weekend trying to figure it out. We got hit with ransomware and our group policy was affected so I thought it was related. Just really really bad luck.
Yeah, bad timing for sure. So this affects Windows 10 with shared printers?
-
@wrx7m said in DeviceMetadataServiceURL Bad Certificate:
@wirestyle22 said in DeviceMetadataServiceURL Bad Certificate:
@wrx7m said in DeviceMetadataServiceURL Bad Certificate:
@wirestyle22 said in DeviceMetadataServiceURL Bad Certificate:
@wrx7m said in DeviceMetadataServiceURL Bad Certificate:
OK. Sorry for not being clear enough. How does the error manifest itself? What problems were occurring that prompted an investigation into this?
What happens is your printers will have a black clock next to them. You'll lose the ability to right-click them or access the print server settings. You can't install new printers or remove printers already installed. The status of the printer will be "device setup in process" infinitely. This is due to it trying to pull the icons for the printers from an MS service that is not functional.
Oh, wow. That would suck. I wonder if this is already happening here and I haven't heard about it yet.
Yeah it legit ruined my weekend trying to figure it out. We got hit with ransomware and our group policy was affected so I thought it was related. Just really really bad luck.
Yeah, bad timing for sure. So this affects Windows 10 with shared printers?
Yes, the printer will act like it's installing - and just stall there.
-
@Dashrender said in DeviceMetadataServiceURL Bad Certificate:
@wrx7m said in DeviceMetadataServiceURL Bad Certificate:
@wirestyle22 said in DeviceMetadataServiceURL Bad Certificate:
@wrx7m said in DeviceMetadataServiceURL Bad Certificate:
@wirestyle22 said in DeviceMetadataServiceURL Bad Certificate:
@wrx7m said in DeviceMetadataServiceURL Bad Certificate:
OK. Sorry for not being clear enough. How does the error manifest itself? What problems were occurring that prompted an investigation into this?
What happens is your printers will have a black clock next to them. You'll lose the ability to right-click them or access the print server settings. You can't install new printers or remove printers already installed. The status of the printer will be "device setup in process" infinitely. This is due to it trying to pull the icons for the printers from an MS service that is not functional.
Oh, wow. That would suck. I wonder if this is already happening here and I haven't heard about it yet.
Yeah it legit ruined my weekend trying to figure it out. We got hit with ransomware and our group policy was affected so I thought it was related. Just really really bad luck.
Yeah, bad timing for sure. So this affects Windows 10 with shared printers?
Yes, the printer will act like it's installing - and just stall there.
Even if it is already installed?
-
@wrx7m said in DeviceMetadataServiceURL Bad Certificate:
@Dashrender said in DeviceMetadataServiceURL Bad Certificate:
@wrx7m said in DeviceMetadataServiceURL Bad Certificate:
@wirestyle22 said in DeviceMetadataServiceURL Bad Certificate:
@wrx7m said in DeviceMetadataServiceURL Bad Certificate:
@wirestyle22 said in DeviceMetadataServiceURL Bad Certificate:
@wrx7m said in DeviceMetadataServiceURL Bad Certificate:
OK. Sorry for not being clear enough. How does the error manifest itself? What problems were occurring that prompted an investigation into this?
What happens is your printers will have a black clock next to them. You'll lose the ability to right-click them or access the print server settings. You can't install new printers or remove printers already installed. The status of the printer will be "device setup in process" infinitely. This is due to it trying to pull the icons for the printers from an MS service that is not functional.
Oh, wow. That would suck. I wonder if this is already happening here and I haven't heard about it yet.
Yeah it legit ruined my weekend trying to figure it out. We got hit with ransomware and our group policy was affected so I thought it was related. Just really really bad luck.
Yeah, bad timing for sure. So this affects Windows 10 with shared printers?
Yes, the printer will act like it's installing - and just stall there.
Even if it is already installed?
Yes
-
So, this is caused by cert expiration/url issues and not a windows update?
-
@wrx7m said in DeviceMetadataServiceURL Bad Certificate:
So, this is caused by cert expiration/url issues and not a windows update?
Yes
-
@wirestyle22 said in DeviceMetadataServiceURL Bad Certificate:
@wrx7m said in DeviceMetadataServiceURL Bad Certificate:
So, this is caused by cert expiration/url issues and not a windows update?
Yes
Did Ms fix it yet?
-
@Dashrender said in DeviceMetadataServiceURL Bad Certificate:
@wirestyle22 said in DeviceMetadataServiceURL Bad Certificate:
@wrx7m said in DeviceMetadataServiceURL Bad Certificate:
So, this is caused by cert expiration/url issues and not a windows update?
Yes
Did Ms fix it yet?
Nope
-
This is an easy line of questioning
-
@wirestyle22 said in DeviceMetadataServiceURL Bad Certificate:
This is an easy line of questioning
I wonder how their alerts can be missing this for days?
-
@Dashrender said in DeviceMetadataServiceURL Bad Certificate:
@wirestyle22 said in DeviceMetadataServiceURL Bad Certificate:
This is an easy line of questioning
I wonder how their alerts can be missing this for days?
