Microsoft Passport Container access denied. No MS suggested fix works.

Yes, I have confirmed that I have full control permissions at HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\NgcCtnrSvc, and verified this in Effective Access. System owns the setting, yet Passport Container Service still denies access with Error 0x800700005. SFC /scannow doesn't fix the problem, nor do any of the troubleshooters. 

The problem began with the November update to Windows 10, and has triggered an avalanche of related errors in Microsoft Store, Cortana and elsewhere, and the inability to change users. Attempting to do so through lusrmgr.msc resulted in Windows stalling on launch — nothing but the whirling circle of dots. The default account finally opened after numerous failed restarts, but it's the only one that will. Under "Accounts/Your email and accounts" and "Accounts/Sign-in options" nothing happens but a parade of dots. "Accounts/Family & other users" is similarly unresponsive.   

Here are the NgcCtnrSvc settings. Anything wrong here? I'm baffled. 

* Please try a lower page number.

* Please enter only numbers.

* Please try a lower page number.

* Please enter only numbers.

Everything looks fine to me
A.D.

1 person found this reply helpful

·

Was this reply helpful?

Sorry this didn't help.

Great! Thanks for your feedback.

How satisfied are you with this reply?

Thanks for your feedback, it helps us improve the site.

How satisfied are you with this reply?

Thanks for your feedback.

Drat! I'd hoped for a simple fix. I've exhausted all the options I've discovered online, and really don't want to start from scratch by wiping my PC clean of programs and codecs after seeing the chaos Windows 10's November update caused doing that.

Any other ideas? Anyone?

I'd be most grateful for some help. 

Was this reply helpful?

Sorry this didn't help.

Great! Thanks for your feedback.

How satisfied are you with this reply?

Thanks for your feedback, it helps us improve the site.

How satisfied are you with this reply?

Thanks for your feedback.

Clean boot your PC. Does this fix it??
A.D.

Was this reply helpful?

Sorry this didn't help.

Great! Thanks for your feedback.

How satisfied are you with this reply?

Thanks for your feedback, it helps us improve the site.

How satisfied are you with this reply?

Thanks for your feedback.

A clean boot made no difference whatsoever. Any other ideas?

How difficult can it be to give Microsoft Passport Container the permissions it craves, especially since I'm the only person and the only administrator who's ever used this PC? It's absurd. 

Was this reply helpful?

Sorry this didn't help.

Great! Thanks for your feedback.

How satisfied are you with this reply?

Thanks for your feedback, it helps us improve the site.

How satisfied are you with this reply?

Thanks for your feedback.

I've now just done an in-place repair, then a fresh crack at sfc /scannow in PowerShell with admin privileges, neither of which resolved the issue.  Microsoft Passport Container depends on RPC Endpoint Mapper and DCOM Server Process Launcher, both of which are running. I'm out of ideas. 

What else could be causing this lockout? 

Who else can I ask?


2 people found this reply helpful

·

Was this reply helpful?

Sorry this didn't help.

Great! Thanks for your feedback.

How satisfied are you with this reply?

Thanks for your feedback, it helps us improve the site.

How satisfied are you with this reply?

Thanks for your feedback.

Try setting the "FailureActions" all to 00
A.D.

Was this reply helpful?

Sorry this didn't help.

Great! Thanks for your feedback.

How satisfied are you with this reply?

Thanks for your feedback, it helps us improve the site.

How satisfied are you with this reply?

Thanks for your feedback.

A very logical notion, Alex. 

But alas...

Also tried DISM -Online -Cleanup-Image, -RestoreHealth, -ScanHealth and -CheckHealth in an elevated Power Shell. No problems found. WSReset.exe, launched as a Run command apparently did its job, self-closing then opening the Windows Store — but didn't resolve the issue. 

Was this reply helpful?

Sorry this didn't help.

Great! Thanks for your feedback.

How satisfied are you with this reply?

Thanks for your feedback, it helps us improve the site.

How satisfied are you with this reply?

Thanks for your feedback.

Set the Start parameter to 1
A.D.

Was this reply helpful?

Sorry this didn't help.

Great! Thanks for your feedback.

How satisfied are you with this reply?

Thanks for your feedback, it helps us improve the site.

How satisfied are you with this reply?

Thanks for your feedback.

Done. The Passport Container service now displays System as its Startup Type, but even though the container appears to have momentarily launched on boot, something shut it down. From Event Viewer...

Error 7023: The Microsoft Passport Container service terminated with the following error: 
General access denied error.

I've researched the role of Group Policy on this, but find it's applicable only for Passport At Work, and all the group settings for it are not configured. I did find this at https://adsecurity.org/?p=1535

"Microsoft Passport involves a user logging onto the Windows 10 computer with multi-factor (PIN, face, iris, fingerprint, etc) and either creating a new account or associating an existing account with an IDentity Provider (IDP). Windows generates a public/private key pair with the private key stored securely outside of the Windows 10 OS. The public key is associated with the account so that a challenge can be sent that can only correctly respond to the IDP. Another key point to the Microsoft Passport credential system is that the user needs to enroll every device used to access the service (IDP)."

I could be falling down the proverbial rabbit hole, but if this is a credentialing issue, I'm using neither a PIN nor a password since I'm the sole user of this PC, so I assume there's no IDP. And, I don't use the MS cloud. Sorry if this is a red herring. I'm exploring every angle I can.

Thanks for your continuing help. The rest of the registry settings...

Was this reply helpful?

Sorry this didn't help.

Great! Thanks for your feedback.

How satisfied are you with this reply?

Thanks for your feedback, it helps us improve the site.

How satisfied are you with this reply?

Thanks for your feedback.

uhhh... I don't see anything wrong. Try creating another user, and see if that works
A.D.

Was this reply helpful?

Sorry this didn't help.

Great! Thanks for your feedback.

How satisfied are you with this reply?

Thanks for your feedback, it helps us improve the site.

How satisfied are you with this reply?

Thanks for your feedback.

* Please try a lower page number.

* Please enter only numbers.

* Please try a lower page number.

* Please enter only numbers.

 
 

Question Info


Last updated January 11, 2024 Views 4,024 Applies to: