It is not unusual to see some errors when you run that command but as
long
as everything else was reset that is a good start - particularly user
rights
and NTFS permissions. If you have disabled simple file sharing you can
view
NTFS permissions to see how they look. By default administrators and
system
have full control to every folder with the possible exception that
administrators may not have any NTFS permissions to a user's profile
folder
that would be under documents and settings. Also you want to make sure
that
there are no "deny" permissions to general groups like users,
authenticated
users, or everyone since administrators are also included in that group.
I would also suggest that if you can open Local Security Policy enable
auditing of privilege user for failure only and then see if any failure
events are recorded when you attempt to do any tasks. You can also
install
the support tools from the install disk in the support/tools folder where
you will need to run the setup program there to run them and then use the
command whoami to find out more about your group memberships and user
rights. Below is an example on my computer for a user that is also
administrator [me]. Also as far as your Windows Installer problem I would
try to open local Group Policy [gpedit.msc] and go to computer
configuration/administratitive templates/Windows components/Windows
installer and set "disable Windows installer" to disabled and "prohibit
user
installs" to disabled. Also go to computer configuration/administrative
templates/Windows components/Windows installer and set "prevent removable
media for install" to be disabled. Since you are using XP Pro you can run
rsop.msc in the run box to see your current Group Policy settings which
may
be restricting you and as an administrator you can reverse the setting
[hopefully]. --- Steve
D:\Documents and Settings\Steve>whoami /all
[User] = "STEVE-XP\Steve"
S-1-5-21-1123561945-152049171-1343024091-1003
[Group 1] = "STEVE-XP\None"
S-1-5-21-1123561945-152049171-1343024091-513
[Group 2] = "Everyone" S-1-1-0
[Group 3] = "BUILTIN\Administrators" S-1-5-32-544
[Group 4] = "BUILTIN\Users" S-1-5-32-545
[Group 5] = "NT AUTHORITY\INTERACTIVE" S-1-5-4
[Group 6] = "NT AUTHORITY\Authenticated Users" S-1-5-11
[Group 7] = "LOCAL" S-1-2-0
(X) SeChangeNotifyPrivilege = Bypass traverse checking
(O) SeSecurityPrivilege = Manage auditing and security log
(O) SeBackupPrivilege = Back up files and directories
(O) SeRestorePrivilege = Restore files and directories
(O) SeSystemtimePrivilege = Change the system time
(O) SeShutdownPrivilege = Shut down the system
(O) SeRemoteShutdownPrivilege = Force shutdown from a remote system
(O) SeTakeOwnershipPrivilege = Take ownership of files or other
objects
(O) SeDebugPrivilege = Debug programs
(O) SeSystemEnvironmentPrivilege = Modify firmware environment values
(O) SeSystemProfilePrivilege = Profile system performance
(O) SeProfileSingleProcessPrivilege = Profile single process
(O) SeIncreaseBasePriorityPrivilege = Increase scheduling priority
(X) SeLoadDriverPrivilege = Load and unload device drivers
(O) SeCreatePagefilePrivilege = Create a pagefile
(O) SeIncreaseQuotaPrivilege = Adjust memory quotas for a process
(X) SeUndockPrivilege = Remove computer from docking station
(O) SeManageVolumePrivilege = Perform volume maintenance tasks
(X) SeCreateGlobalPrivilege = Create global objects
(X) SeImpersonatePrivilege = Impersonate a client after
authentication
Bob Zambenini said:
I have XP Pro. I tried the secedit again and here is the part of log
file
that showed errors:
--------
Error enumerating info for
machine\system\currentcontrolset\services\scarddrv.
Configure machine\system\currentcontrolset\services\scardsvr\security.
Configure machine\system\currentcontrolset\services\stisvc\security.
Configure machine\system\currentcontrolset\services\sysmonlog\log
queries.
Error 234: More data is available.
Error enumerating info for
machine\system\currentcontrolset\services\sysmonlog\log queries.
Configuration of Registry Keys was completed with one or more errors.
----Configure File Security...
Configure c:\.
File Security configuration was completed with one or more errors.
----------
My back up is a disk image but don't believe I have one back to where
this
started occuring. I will look some more on an external hdd.
Does these log file errors above play into the problem?
:
Hi Bob.
Are you using XP Home or XP Pro. If you are using XP Pro did you try
using
secedit to restore security settings to default defined levels as I
described earlier?? Can you access the command prompt, registry editor
[regedit], or Local Security Policy and gpedit.msc if using XP Pro at
least
in Safe Mode? Have you run your malware/spyware programs in Safe Mode.
What
does your disk image contain - just data or the whole operating system
from
a point in time when everything worked better??
A clean or pristine install would be booting from the install cdrom
for
XP
[slipstreamed disk would be fine if bootable] and selecting the option
to
install a new operating system and formatting [not quick] to system
drive/partition where the operating system lives which will destroy
everything on that drive/partition. Yes you would have to reinstall
all
of
your applications and I know that can be a bear which is why most want
to
avoid a clean install except as a last resort. I don't know if you
have
dial
up or not but you do not have to download/install updates one at a
time.
When I repaired my nephew's computer I downloaded and installed then
all
in
one batch though I have a cable modem. If you do get a new version of
the
operating system you surely do not want to do an upgrade install with
the
state of your computer. --- Steve
