User lockout / No desktop/ Tampered registry.

  • Thread starter Thread starter Guest
  • Start date Start date
G

Guest

A limited user needed greater access to registry so that his program would
function fully. So just to test i gave the user full access to all the
branches of the registry. (Was going to remove later so i know it is dumb to
give permanent acess like that)
However when i then tried to log on with the mentioned user account, it
didnt load the desktop. I could Ctrl+alt+del taskmanager and even run
programs from there, but no desktop.

Trying to solve the problem i could replicate the situation on another
machine (gave access to all branches with one try). However When I tried it
third time on third machine, giving access to the branches of the registry 1
at a time and trying to log on after each change, I ended up with full access
to entire registry (like first 2 computers) but still able to log on.

One more thing. I created a new low level user account on the problematic
machine to see if the problem is related with the users group or the specific
account, and the new user couldn't similarily get the desktop. Whenever i
raise the privileges of the mentioned users, they will get full desktop and
everything works.

At this point i am baffled as to what i should do. Maybe someone could give
me some insight? All 3 computers are:
Windows XP Proffessional SP2

Thanks in advance
 
Another note: Removing the access privileges from the mentioned registry
branches did not return the system to normal state
 
Try applying the default security template (for more info, open Help and
Support, search for security templates):

1. start, run, key mmc /a
2. press Enter
3. click File, Add/Remove Snap-in
4. click Add
5. from the snap-in list, select Security Configuration and Analysis; click
Add; click Close
6. click OK
7. right click on Security and Configuration Analysis in the left pane;
select Open database
8. navigate to any folder (the "database" may not be any use later, so any
"temporary" folder will do)
9. key any name you want for the "database"; click Open
10. on the Import Template panel, select the item called "setup
security.inf"; click Open
11. right click Security Configuration and Analysis in the left pane, select
Configure Computer Now
12. either accept the default log file path, or key the path and file name
of the log file you want the results to be logged in; click OK
 
This solved my problem.. I could log normally into XP with the user account.
Thank you very much Bruce.

Best regards,
Alphard
 
Back
Top