• We have updated our Community Code of Conduct. Please read through the new rules for the forum that are an integral part of Paradox Interactive’s User Agreement.
XBOX

XENONXELL

Recruit
82 Badges
Jan 20, 2016
9
1
  • Crusader Kings II: Charlemagne
  • Stellaris: Synthetic Dawn
  • Tyranny - Tales from the Tiers
  • Magicka
  • Crusader Kings II: Sword of Islam
  • Crusader Kings II: Sunset Invasion
  • Crusader Kings II: The Republic
  • Crusader Kings II
  • Crusader Kings II: Legacy of Rome
  • Crusader Kings II: The Old Gods
  • Crusader Kings II: Sons of Abraham
  • Crusader Kings II: Rajas of India
  • Stellaris: Galaxy Edition
  • Stellaris
  • Stellaris: Galaxy Edition
  • Hearts of Iron IV: Cadet
  • Crusader Kings II: Reapers Due
  • Europa Universalis IV: Rights of Man
  • Tyranny: Archon Edition
  • Tyranny: Archon Edition
  • Tyranny: Gold Edition
  • Stellaris: Digital Anniversary Edition
  • Stellaris: Leviathans Story Pack
  • Cities: Skylines - Natural Disasters
  • Hearts of Iron IV: Together for Victory
  • Crusader Kings II: Monks and Mystics
  • Stellaris - Path to Destruction bundle
  • Cities: Skylines - Mass Transit
  • Crusader Kings Complete
  • Europa Universalis IV: Third Rome
  • Hearts of Iron IV: Death or Dishonor
  • Europa Universalis IV: El Dorado
  • Hearts of Iron IV: No Step Back
  • Europa Universalis IV: Call to arms event
  • Europa Universalis IV
  • Teleglitch: Die More Edition
  • Victoria 2
  • Victoria 2: A House Divided
  • Victoria 2: Heart of Darkness
  • Cities: Skylines
  • Cities: Skylines Deluxe Edition
  • Stellaris: Galaxy Edition
  • Magicka: Wizard Wars Founder Wizard
  • Crusader Kings II: Way of Life
  • Magicka 2
  • Europa Universalis IV: Common Sense
  • Crusader Kings II: Horse Lords
  • Cities: Skylines - After Dark
  • Crusader Kings II: Conclave
  • Cities: Skylines - Snowfall
Scope: Windows Store, XBOX Game Pass Edition (all)
Problem 1: RW access to the executables for the xbox-app / win-store version, it is not possible to manually add the rule w/o cmd
Problem 2: Running application reports namespace back, fw cannot translate provided namespace = path invalid
Issue: Connection to Server not possible
Impact: High, Multiplayer not possible

#1 Workaround: Set Windows Firewall with Advanced Security Settings to allow outbound connections that do not match a rule by default / Temporarily disable Third-Party Security Provider (Firewall) **NOT RECOMMENDED

#2 Workaround: For the ease of access to Mods, to Mod, to play Multiplayer acquire the Game on Steam.

Following the official Microsoft TechNet guidelines to configurate, add or apply specific firewall settings do not work as the folder/sub-folders have different file-permission settings and cannot be applied or created / added to pre-defined rules. Adding a new firewall without the selection of the package has no effect. The package cannot be selected because it is not registered.


----------------------------------------------------------------------
System Info
Windows 10 Version 2004 (Build 19041.450)
XBOX App Ver. 2008.1001.11.0
CK3 Version XGP
Windows Firewall (Local), Network Firewall Appliance (no issues)
----------------------------------------------------------------------
Windows Firewall Configuration (Domain, Private, Public):
State ON
Firewall Policy BlockInbound,BlockOutbound
LocalFirewallRules N/A (GPO-store only)
LocalConSecRules N/A (GPO-store only)
InboundUserNotification Enable
RemoteManagement Disable
UnicastResponseToMulticast Disable
LogAllowedConnections Enable
LogDroppedConnections Enable
----------------------------------------------------------------------
Windows Defender Configuration
AMRunningMode : Normal
AMServiceEnabled : True
AntispywareEnabled : True
AntivirusEnabled : True
BehaviorMonitorEnabled : True
ComputerState : 0
IoavProtectionEnabled : True
IsTamperProtected : True
IsVirtualMachine : True
NISEnabled : True
OnAccessProtectionEnabled : True
RealTimeProtectionEnabled : True
----------------------------------------------------------------------
IP / WinSock Configuration
pushd interface ipv4
set global icmpredirects=enabled taskoffload=disabled mldlevel=none
add route prefix=0.0.0.0/0 interface="Ethernet" nexthop=192.168.XX.XX publish=Yes
set interface interface="Ethernet (Kernel Debugger)" forwarding=enabled advertise=enabled nud=enabled ignoredefaultroutes=disabled
set interface interface="Ethernet 2" forwarding=enabled advertise=enabled nud=enabled ignoredefaultroutes=disabled
set interface interface="Ethernet 4" forwarding=enabled advertise=enabled nud=enabled ignoredefaultroutes=disabled
set interface interface="Ethernet" forwarding=enabled advertise=enabled nud=enabled ignoredefaultroutes=disabled
set interface interface="vEthernet (Eth0)" forwarding=enabled advertise=enabled nud=enabled ignoredefaultroutes=disabled
set interface interface="vEthernet (Eth1)" forwarding=enabled advertise=enabled nud=enabled ignoredefaultroutes=disabled
add address name="Ethernet" address=192.168.XX.XX mask=255.255.255.0
add address name="vEthernet (Eth0)" address=192.168.XX.XX mask=255.255.240.0
add address name="vEthernet (Eth1)" address=172.23.XX.XX mask=255.255.240.0
DHCP Disable
NetBIOS Disable
----------------------------------------------------------------------
App-Package reset not working
App-Package repair not working
App-Package Uninstall / Install not working
Configure Windows Firewall with Advanced Security by Using an Answer File not working
Netsh advfirewall firewall add rule not working (no file access / namespaces)
Different Device-1 same issue (XBGP)
Steam Edition: Running
Cookie Edition: Running
PsExec set RW access for CK3.exe, ckpatch.exe, paradox launcher.exe to user context (with condition) works temp. / until NTtrustedinstaller
----------------------------------------------------------------------
The game will be started with a conditional setting, to run the app-package "ParadoxInteractive.ProjectTitus_1.0.66.0_x64__zfnrdv2de78ny" that the SYSAPPID must be contain Conditional Value. Is that the case u have Read / Execute Permission.

The executable gives a invalid path / namespace back to work with "\device\harddiskvolume{value}\launcher\bin\paradox launcher.exe".

The firewall rule cannot be applied to the executable manually under the current file permission with ease of access
The name-space blob is invalid as fwrule.

Ref 1: previous-versions/windows/it-pro/windows-server-2008-R2-and-2008/cc771920(v=ws.10) Ref 2: windows-hardware/manufacture/desktop/configure-windows-firewall-with-advanced-security-by-using-an-answer-file Ref 3: powershell/module/netsecurity/?view=win10-ps&redirectedfrom=MSDN&viewFallbackFrom=winserverr2-ps Ref 4: XX Ref 5: /windows/win32/api/fileapi/nf-fileapi-getvolumepathnamew Ref 6: /windows/win32/fileio/naming-a-file
 

Attachments

  • mmc_jHlNH3dTHA.png
    mmc_jHlNH3dTHA.png
    12,8 KB · Views: 0
  • wfc_6yM61y8ugt.png
    wfc_6yM61y8ugt.png
    12,8 KB · Views: 0
  • wfc_ouMt2ugGYH.png
    wfc_ouMt2ugGYH.png
    40,5 KB · Views: 0
  • eventlog_wfas_wfc.7z
    5,4 KB · Views: 0
  • msinfo32-comp.txt
    62 KB · Views: 0
  • msinfo32-system.txt
    53 KB · Views: 0
  • DxDiag.txt
    81,3 KB · Views: 0
Last edited:
wait sorry yes its the MS Store version.... *ugh*

Do you have the xbox app installed? I've seen some issues where people got the game pass, but didnt download the xbox app, but rather went directly to the MS Store, that caused some problems.
 
wait sorry yes its the MS Store version.... *ugh*

Do you have the xbox app installed? I've seen some issues where people got the game pass, but didnt download the xbox app, but rather went directly to the MS Store, that caused some problems.

Acquired / Installed / Started through the Windows XBOX App. The issue is somewhere rooted in the manifest file for the app-package at deployment, the app-package permissions to the executables not within user scope or missing the correct conditions. After rewriting the 3 exe files with PsExec it works.
 
Last edited:
The rules do not work due to the file permission settings to the executables.
If you mean the game executables, MS are responsible for that as they handle the installation. Launcher executables I'm not so sure about.
 
The executable registers under the path / namespace back with "\device\harddiskvolume{value}\launcher\bin\paradox launcher.exe". That goes for CK3.exe and CPatch.exe too.

According to my feedback, there is nothing I could do except the "lol derp, turn off fw".
 
With Patch 1.1.1 not working.
- Reset Windows 10 (Keep Apps and Data) not working
- Reset Windows 10 (Fresh Install) not working
- The Device is not enrolled (Azure Domain)
- Device is not connected with a Workspace / Enterprise
- Reset GPO, Reset Win Defaults Settings
- Disabled Synch Settings / DISM conf

The people I connected with during the Ignite last week also pointed the finger at you guys and had to shrug. :O

Namespace "\device\harddiskvolume{value}\launcher\bin\paradox launcher.exe" (not a valid image path for fw) (cpatch, ck3, pdl)

//edit
additional note: CK2, Stellaris, Tyranny or any other Paradox product is working & XBOX Store Item / XBOX Beta Client
added additional attachments to the top post
 
Last edited: