Metro apps crash on startup, driver or permissions issue?

18

9

After installing Win8 x64 RC, Metro apps worked correctly, but desktop OpenGL apps were slow and unresponsive. I installed the latest Win8 nVidia drivers, and the OpenGL apps started working correctly. At the same time, because of annoying permission messages, I changed the C:\ drive and all its files ownerships to my user, and gave it full permission.

I restarted my pc after installing the drivers, and now Metro apps only show the splash screen, then crash.

I tried installing other versions of the nVidia drivers, with the same result.

My GPU is a GeForce GTX275.

Is this a known problem with nVidia drivers? Or maybe changing the ownership of C:\ is the real problem?

Thank you.


More information (after looking in the event viewer)

I've managed to find the problem and the error in the Event Viewer. I still cannot solve it. Here's the information I found by opening the Mail app and letting it crash:

Log Name:      Microsoft-Windows-TWinUI/Operational
Source:        Microsoft-Windows-Immersive-Shell
Date:          07/06/2012 15.54.17
Event ID:      5961
Task Category: (5961)
Level:         Error
Keywords:      
User:          VEE-PC\Vittorio
Computer:      vee-pc
Description:
Activation of the app microsoft.windowscommunicationsapps_8wekyb3d8bbwe!Microsoft.WindowsLive.Mail for the Windows.Launch contract failed with error: The app didn't start..
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="Microsoft-Windows-Immersive-Shell" Guid="{315A8872-923E-4EA2-9889-33CD4754BF64}" />
    <EventID>5961</EventID>
    <Version>0</Version>
    <Level>2</Level>
    <Task>5961</Task>
    <Opcode>0</Opcode>
    <Keywords>0x4000000000000000</Keywords>
    <TimeCreated SystemTime="2012-06-07T13:54:17.472416600Z" />
    <EventRecordID>6524</EventRecordID>
    <Correlation />
    <Execution ProcessID="3008" ThreadID="6756" />
    <Channel>Microsoft-Windows-TWinUI/Operational</Channel>
    <Computer>vee-pc</Computer>
    <Security UserID="S-1-5-21-2753614643-3522538917-4071044258-1001" />
  </System>
  <EventData>
    <Data Name="AppId">microsoft.windowscommunicationsapps_8wekyb3d8bbwe!Microsoft.WindowsLive.Mail</Data>
    <Data Name="ContractId">Windows.Launch</Data>
    <Data Name="ErrorCode">-2144927141</Data>
  </EventData>
</Event>

Found other stuff, this is another error that appears when opening a Metro app:

Log Name:      Application
Source:        ESENT
Date:          07/06/2012 16.01.00
Event ID:      490
Task Category: General
Level:         Error
Keywords:      Classic
User:          N/A
Computer:      vee-pc
Description:
svchost (1376) SRUJet: An attempt to open the file "C:\Windows\system32\SRU\SRU.log" for read / write access failed with system error 5 (0x00000005): "Access is denied. ".  The open file operation will fail with error -1032 (0xfffffbf8).
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="ESENT" />
    <EventID Qualifiers="0">490</EventID>
    <Level>2</Level>
    <Task>1</Task>
    <Keywords>0x80000000000000</Keywords>
    <TimeCreated SystemTime="2012-06-07T14:01:00.000000000Z" />
    <EventRecordID>11854</EventRecordID>
    <Channel>Application</Channel>
    <Computer>vee-pc</Computer>
    <Security />
  </System>
  <EventData>
    <Data>svchost</Data>
    <Data>1376</Data>
    <Data>SRUJet: </Data>
    <Data>C:\Windows\system32\SRU\SRU.log</Data>
    <Data>-1032 (0xfffffbf8)</Data>
    <Data>5 (0x00000005)</Data>
    <Data>Access is denied. </Data>
  </EventData>
</Event>

After changing permissions again (adding Everyone and Creator Owner to System32), the "access denied to sru.log" error disappears, but this one appears in its place:

Log Name:      Application
Source:        Microsoft-Windows-Immersive-Shell
Date:          07/06/2012 16.16.34
Event ID:      2486
Task Category: (2414)
Level:         Error
Keywords:      (64),Process Lifetime Manager
User:          VEE-PC\Vittorio
Computer:      vee-pc
Description:
App microsoft.windowscommunicationsapps_8wekyb3d8bbwe!Microsoft.WindowsLive.Mail did not launch within its allotted time.
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="Microsoft-Windows-Immersive-Shell" Guid="{315A8872-923E-4EA2-9889-33CD4754BF64}" />
    <EventID>2486</EventID>
    <Version>0</Version>
    <Level>2</Level>
    <Task>2414</Task>
    <Opcode>0</Opcode>
    <Keywords>0x2000000000000042</Keywords>
    <TimeCreated SystemTime="2012-06-07T14:16:34.616499600Z" />
    <EventRecordID>11916</EventRecordID>
    <Correlation />
    <Execution ProcessID="3008" ThreadID="6996" />
    <Channel>Application</Channel>
    <Computer>vee-pc</Computer>
    <Security UserID="S-1-5-21-2753614643-3522538917-4071044258-1001" />
  </System>
  <EventData>
    <Data Name="ApplicationId">microsoft.windowscommunicationsapps_8wekyb3d8bbwe!Microsoft.WindowsLive.Mail</Data>
  </EventData>
</Event>

Now I'm stuck. It tells me "Activation of app microsoft.windowscommunicationsapps_8wekyb3d8bbwe!Microsoft.WindowsLive.Mail failed with error: The app didn't start. See the Microsoft-Windows-TWinUI/Operational log for additional information." but I can't find the Microsoft-Windows-TWinUI/Operational log.

I'm starting a bounty.


I found the TWinUI/Operational log. It only tells me:

Log Name:      Microsoft-Windows-TWinUI/Operational
Source:        Microsoft-Windows-Immersive-Shell
Date:          07/06/2012 16.28.57
Event ID:      5961
Task Category: (5961)
Level:         Error
Keywords:      
User:          VEE-PC\Vittorio
Computer:      vee-pc
Description:
Activation of the app microsoft.windowscommunicationsapps_8wekyb3d8bbwe!Microsoft.WindowsLive.Mail for the Windows.BackgroundTasks contract failed with error: The app didn't start..
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="Microsoft-Windows-Immersive-Shell" Guid="{315A8872-923E-4EA2-9889-33CD4754BF64}" />
    <EventID>5961</EventID>
    <Version>0</Version>
    <Level>2</Level>
    <Task>5961</Task>
    <Opcode>0</Opcode>
    <Keywords>0x4000000000000000</Keywords>
    <TimeCreated SystemTime="2012-06-07T14:28:57.238140800Z" />
    <EventRecordID>6536</EventRecordID>
    <Correlation />
    <Execution ProcessID="3008" ThreadID="2624" />
    <Channel>Microsoft-Windows-TWinUI/Operational</Channel>
    <Computer>vee-pc</Computer>
    <Security UserID="S-1-5-21-2753614643-3522538917-4071044258-1001" />
  </System>
  <EventData>
    <Data Name="AppId">microsoft.windowscommunicationsapps_8wekyb3d8bbwe!Microsoft.WindowsLive.Mail</Data>
    <Data Name="ContractId">Windows.BackgroundTasks</Data>
    <Data Name="ErrorCode">-2144927141</Data>
  </EventData>
</Event>

I need to go deeper. I found a forum thread that told me to look for "DCOM" errors. I found this one related to the app crash

"The server Microsoft.WindowsLive.Mail.wwa did not register with DCOM within the required timeout."

Log Name:      System
Source:        Microsoft-Windows-DistributedCOM
Date:          07/06/2012 16.46.45
Event ID:      10010
Task Category: None
Level:         Error
Keywords:      Classic
User:          VEE-PC\Vittorio
Computer:      vee-pc
Description:
The server Microsoft.WindowsLive.Mail.wwa did not register with DCOM within the required timeout.
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="Microsoft-Windows-DistributedCOM" Guid="{1B562E86-B7AA-4131-BADC-B6F3A001407E}" EventSourceName="DCOM" />
    <EventID Qualifiers="0">10010</EventID>
    <Version>0</Version>
    <Level>2</Level>
    <Task>0</Task>
    <Opcode>0</Opcode>
    <Keywords>0x8080000000000000</Keywords>
    <TimeCreated SystemTime="2012-06-07T14:46:45.586943800Z" />
    <EventRecordID>2763</EventRecordID>
    <Correlation />
    <Execution ProcessID="804" ThreadID="2364" />
    <Channel>System</Channel>
    <Computer>vee-pc</Computer>
    <Security UserID="S-1-5-21-2753614643-3522538917-4071044258-1001" />
  </System>
  <EventData>
    <Data Name="param1">Microsoft.WindowsLive.Mail.wwa</Data>
  </EventData>
</Event>

Vittorio Romeo

Posted 2012-06-05T12:03:59.083

Reputation: 403

Where was the TWin Operational Logs??? – Adam Plocher – 2016-04-03T10:59:42.243

@pratnala the web is full of such nonsense answers. sfc /scannow does not check file permissions. It can't help. Period. – Mahmoud Al-Qudsi – 2018-05-19T22:04:57.080

The first step would be to do a checksum on the iso you downloaded. If you downloaded it with something else than IE, there's a chance it's corrupt.

– Derethus – 2012-06-07T15:36:09.040

Checksum is fine. Also, Metro apps worked properly before I messed with permissions. – Vittorio Romeo – 2012-06-07T15:45:06.237

Are you using Avast? – pratnala – 2012-11-02T08:50:07.563

2Instead of changing permissions, I would recommend running sfc /scannow in an elevated command prompt to check for any corrupted system files – pratnala – 2012-11-02T08:50:50.447

Answers

5

I fixed it myself!

I added "ALL APPLICATION PACKAGES" to the C:\ security options, and gave it full control. Now Metro apps work fine. :D

https://dl.dropbox.com/u/3724424/fix.png

Vittorio Romeo

Posted 2012-06-05T12:03:59.083

Reputation: 403

14What sort of security implications does this have? – Feckmore – 2012-09-06T20:46:12.983

@Traples I have no idea. I don't use my computer with other accounts/in a local network so I don't think it will be a problem. – Vittorio Romeo – 2012-09-14T15:45:14.463

5There's more to permissions than other user accounts and local network accounts. Different pieces of Windows run under different accounts with different permissions. You've just given every Application Package permissions to everything on your C drive. Aside from virus/security issues, what if a poorly written packages behaves differently because sloppy code was relying on permissions to keep them in check? What if a package cleans up after itself with a lazy, recursive delete command, that now deletes more than it should? – Tanner Faulkner – 2012-12-26T21:06:48.967

2Because of the security implications I strongly suggest to use the approach @Kory Sarnelli described below (that is to only modify the permissions of the path %USERPROFILE%\AppData\Local\Microsoft\Windows\WER – tobsen – 2013-01-05T13:27:15.283

8

OK, it took me forever to solve this problem so hopefully this helps someone. I had changed permissions on my user folder (like I always do) to only allow my user and SYSTEM. Unfortunately this broke some Metro/Modern apps including Weather, News, Finance, Netflix, etc.

The only permissions that 'ALL_APPLICATION_PACKAGES' needs in order for all Metro/Modern apps to work are:

  1. File - %USERPROFILE%\AppData\Local\Temporary Internet Files\counters.dat - Read & Execute, Read - (You'll need to uncheck 'Hide protected operating system files' in Folder Options to see the Temporary Internet Files folder)

(if you cannot find in the above location try %USERPROFILE%\AppData\Local\Microsoft\Windows\Temporary Internet Files\counters.dat)

  1. Folder - %USERPROFILE%\AppData\Local\WER - Special: List folder/read data, Create folders/append data

(if you cannot find in the above location try %USERPROFILE%\AppData\Local\Microsoft\Windows\WER)

It does not need full access to your C: drive or even access to the Packages folder as previous answers suggested.

You can either reboot after making the above permission changes or kill the appropriate processes.

Kory

Posted 2012-06-05T12:03:59.083

Reputation: 81

%LOCALAPPDATA%\Microsoft\Windows\WER (slightly shorter path) – Adam Plocher – 2016-04-03T11:01:12.627

Finally managed to fix my broken Calculator App and Windows Store. Thanks a lot. – Cyber-Logic – 2017-01-18T14:54:33.643

Hmm, I don't see these. Even with the hide protected setting turned off. – paulwhit – 2012-11-20T04:54:55.393

1On my vanilla Windows 8 Pro only the folder %USERPROFILE%\AppData\Local\Microsoft\Windows\WERis there. I can confirm that the special permissions for ALL_APPLICATION_PACKAGES are indeed "List folder/read data" and "Create folders/append data" – tobsen – 2013-01-05T13:25:16.147

Note that to do this you should be logged in as a different administrator account; otherwise you will not see the "counters.dat" file in Temporary Internet Files folder. – Achal Dave – 2013-01-25T09:40:29.307

That file is a junction (Windows symlink): dir /a: <JUNCTION> Temporary Internet Files [C:\Users\Chloe
AppData\Local\Microsoft\Windows\Temporary Internet Files]
– Chloe – 2013-03-07T22:06:30.930

3

In my case it was Avast. I had to disable all shields to get it working.

An update of Avast to the newest version fixed it!

Geoff

Posted 2012-06-05T12:03:59.083

Reputation: 39

3

The one thing I would add is that it is only necessary to add the "ALL APPLICATION PACKAGES" role to the "Packages" directory in the Local\AppData directory of the current user (e.g. C:\Users\Vee\AppData\Local\Packages). This way, you don't run the risk of giving the keys to the kingdom to an ill-behaved Windows app.

user168550

Posted 2012-06-05T12:03:59.083

Reputation: 31

1ALL APPLICATION PACKAGES does not have any permissions on the "Packages" directory when I installed windows 8. Are you sure it is the right one? – joon – 2012-12-22T20:22:39.937

3

This Question is showing up high in Google, so here's what worked for me, without having to give permissions to whole system drive like the accepted answer does.

As mentioned by Pratyush Nalam run the command sfc /scannow in an elevated command prompt. Next run a chkdsk c: /f, say y when ased if you wan to schedule and then restart.

These command combined will fix many issues with permissions and corrupt system files.

Richard Benson

Posted 2012-06-05T12:03:59.083

Reputation: 388

1sfc /scannow does not touch filesystem permissions. – Mahmoud Al-Qudsi – 2018-05-19T22:37:25.577

@MahmoudAl-Qudsi which is the point of the answer... "without having to give permissions to whole system drive" – Richard Benson – 2018-05-29T11:05:19.323

Richard, that makes no sense. Grammatically, that implies that it selectively gives the correct permissions where they need to be given rather than to the whole drive. Except it doesn’t do that. – Mahmoud Al-Qudsi – 2018-05-29T15:46:29.633

@MahmoudAl-Qudsi Context is important: Look at the accepted answer, which is a terrible idea and gives permissions to the whole system drive. This answer doesn't give permissions to the whole system drive...

I edited the answer to cease the "actually" brigade downvoting a 6 year old answer to make themselves feel superior. – Richard Benson – 2018-06-04T09:37:53.340

3

If all the other ideas don't work, try this: I have my users folder on a D drive HDD, and my C drive is SSD, so if you don't have a SSD use C:

Add the All_Application_Packages userID to this folder:

d:\Users\Brent\AppData\Local\Packages

And give it ALL but FULL control, which is read, list, create, write, etc. This is the trick that made all my Apps come back.

Do not add this userID to your C:\ or Windowy folders, as you are just asking for trouble from giving any app you download unrestricted access to your PC's contents.

Steelgate

Posted 2012-06-05T12:03:59.083

Reputation: 41

Better find out exactly what is complaining and why. Just changing permissions willy-nilly will cause problems later on. – vonbrand – 2013-01-22T10:49:28.320

@vonbrand, dude, there is no logging of this issue, the apps just don't open because they lose access to certain folders. In addition, it is not a willy-nilly change, its contained and thought through, as I am giving a very specific ACL change to a METRO APPs related folder that fixes this temporarily until MS can provide a fix for this common error. I'll add the disclaimer: Folks, do NOT make this change to your C:\ or \Windows !! – Steelgate – 2013-01-23T17:38:20.740

2

For me the answer was adding full access for ALL_APPLICATION_PACKAGES to the folder

%USERPROFILE%\AppData\Local\Packages

Derick Clark

Posted 2012-06-05T12:03:59.083

Reputation: 29

0

I know this is a bit old, but I recently ran in to this same problem.

My ultimate resolution was to delete the SRUDB.DAT file and let windows recreate it. My problems went away entirely after this was performed.

Kyle Miller

Posted 2012-06-05T12:03:59.083

Reputation: 17

No such file! Comments must be at least 15 characters in length. – Chloe – 2013-03-07T22:24:57.373

how did u delete this file ..? is that safe ..? This file is always in use – shashwat – 2013-09-25T15:33:21.460

-2

I have the same issue despite I have a fresh install since I just bought a new computer with Windows 8 pre-installed and it can't be that I have to refresh the installation again.

I checked all standard hints I found but everything was fine. Actually only the advanced apps like games or calculator didn't work but the simple apps like weather or maps worked.

I learned that the Metro apps have special access restrictions on Deskop PCs (x86) only. This is why tablet PCs or Smartphones don't experience this issue.

Finally only this hint worked for me:

add "ALL APPLICATION PACKAGES" to the C:\ security options and give it full control

However, it can't be that Metro apps have full control on system root "C:\" because this would open up a large security hole and thus I reverted this change and started checking on subfolders.

Fortunately one of the first subfolders I checked was "C:\Windows" and Bingo!

After I have added only "Read & Execute, List Folder Contents, Read" rights for the group "ALL APPLICATION PACKAGES" to the Windows root folder "C:\Windows" (same as %windir%) all Metro apps worked perfectly!

This security change is completely uncritical as actually everbody has such rights on the Windows root folder.

Btw somewhere on the MS web it says that these rights have to be set on "C:\Windows\system32" only (which is true as it was set with me) but it is not sufficient. It has to be the whole Windows root folder (which was not set with me initially).

I hope this helps all who were also almost there with Metro apps :-)

Silvio Turello

Posted 2012-06-05T12:03:59.083

Reputation: 1