Author Topic: can't do "ranas testadmin cmd" 112: There is not enough space on the disk  (Read 17197 times)

0 Members and 1 Guest are viewing this topic.

Offline garegin

  • Jr. Member
  • **
  • Join Date: Nov 2014
  • Posts: 85
  • Karma: 1
    • View Profile
I think Windows is confusing the volumes or whatnot. I can't create new users and running

`runas  /user:uslap200\testadmin powershell`

caused the following error

`RUNAS ERROR: Unable to run - powershell`

`112: There is not enough space on the disk.`

running with `/noprofile` works

In procmon I  see accesses to the ESP volume. I don't understand why Windows is trying to access that during runas

`5:56:03.7124886 PM   lsass.exe   904   CreateFile   \Device\HarddiskVolume1\EFI\Microsoft\Boot\Policies\UnlockToken.pol   PATH NOT FOUND   Desired Access: Read Attributes, Synchronize, Disposition: Open, Options: Synchronous IO Non-Alert, Non-Directory File, Attributes: n/a, ShareMode: Read, Delete, AllocationSize: n/a`

Why is it trying to find this `UnlockToken.pol.` Googling links it with SCCM, but we don't use SCCM here.

I'm linking the procmon log here.

[https://drive.google.com/file/d/1qnuFY5j9xqg7PsNBTGqzP5qR4bMM4Bj1/view?usp=sharing](https://drive.google.com/file/d/1qnuFY5j9xqg7PsNBTGqzP5qR4bMM4Bj1/view?usp=sharing)

Offline Boggin

  • Global Moderator
  • Hero Member
  • *****
  • Join Date: Jul 2014
  • Posts: 10182
  • Location: UK
  • Karma: 122
    • View Profile
When you get the there isn't enough free space, it usually refers to the Temp folder being over populated.

Go Start - type %temp% and press enter.

Press CTRL and a together to highlight then CTRL and d together to delete then follow the prompts and try to do what you were trying to do.

Don't forget to empty your recycle bin.

Offline garegin

  • Jr. Member
  • **
  • Join Date: Nov 2014
  • Posts: 85
  • Karma: 1
    • View Profile
%temp% is per user account, right. Are there other temp folders? I cleared it, still the same error
I'm thinking that the runas error would somehow show up in procmon, no?

Offline garegin

  • Jr. Member
  • **
  • Join Date: Nov 2014
  • Posts: 85
  • Karma: 1
    • View Profile
I ran "ranas" multiple times and it seems to trigger "\Device\HarddiskVolume1\EFI\Microsoft\Boot\Policies\UnlockToken.pol " every run. Why you think that is?

also when running gpupdate /force it thinks I had an MDM. Even though the laptop was removed from MDM

Code: [Select]
Windows failed to apply the MDM Policy settings. MDM Policy settings might have its own log file. Please click on the "More information" link.
User Policy update has completed successfully.

For more detailed information, review the event log or run GPRESULT /H GPReport.html from the command line to access information about Group Policy results.
« Last Edit: May 18, 2022, 07:37:20 am by garegin »

Offline Boggin

  • Global Moderator
  • Hero Member
  • *****
  • Join Date: Jul 2014
  • Posts: 10182
  • Location: UK
  • Karma: 122
    • View Profile
I've found this article which may help with that error -

https://www.diskpart.com/articles/efi-microsoft-boot-bcd-error-5740i.html

You can create a system repair disk to boot up with by following the instructions in this article -

https://recoverit.wondershare.com/partition-tips/create-windows-10-system-repair-disk-or-boot-drive.html
« Last Edit: May 19, 2022, 02:13:13 am by Boggin, Reason: Typo »