Re: Security Policy screwed up????What to do???

From: Doug Knox MS-MVP (dknox_at_mvps.org)
Date: 02/18/04


Date: Tue, 17 Feb 2004 23:08:38 -0500

Bill,

I was unable to reproduce your situation. I did run across a couple of things that I thought might cause it, but didn't in my testing.

1) When you copy the text from the PDF, you not only have to contend with the line breaks, you also have to contend with the individual page numbers from the PDF file. 101 winds up at the end of:

MACHINE\System\CurrentControlSet\Services\AFD\Parameters\MaximumDynamicBacklog,4,%MaximumDynamicBacklog%,3,10000|%MaximumDynamicBacklog0%,15000|%MaximumDynamicBacklog1%,20000|%MaximumDynamicBacklog2%,40000|%MaximumDynamicBacklog3%,80000|%MaximumDynamicBacklog4%,160000|%MaximumDynamicBacklog5%

And 101 and 102 wind up as individual lines in the Strings section.

However, I tried it both ways, with and without, and re-registering the SCECLI.DLL each time. The only thing that did happen was the description entries in the right pane of GPEDIT had some errors.

2) The other thought was the SCEREGVL.PNF file, being present. This is like a pre-compiled INF file, and at times, the presence of a matching PNF file can over-ride the changes in the INF file. So, I left it in place, re-registered the DLL, deleted it, re-registered the DLL, with no change.

-- 
Doug Knox, MS-MVP Windows XP/ Windows Smart Display
Win 95/98/Me/XP Tweaks and Fixes
http://www.dougknox.com
--------------------------------
Per user Group Policy Restrictions for XP Home and XP Pro
http://www.dougknox.com/xp/utils/xp_securityconsole.htm
--------------------------------
Please reply only to the newsgroup so all may benefit.
Unsolicited e-mail is not answered.
 
"Doug Knox MS-MVP" <dknox@mvps.org> wrote in message news:eUxAi4R9DHA.2460@TK2MSFTNGP09.phx.gbl...
I'll post my findings here, Bill.
-- 
Doug Knox, MS-MVP Windows XP/ Windows Smart Display
Win 95/98/Me/XP Tweaks and Fixes
http://www.dougknox.com
--------------------------------
Per user Group Policy Restrictions for XP Home and XP Pro
http://www.dougknox.com/xp/utils/xp_securityconsole.htm
--------------------------------
Please reply only to the newsgroup so all may benefit.
Unsolicited e-mail is not answered.
 
"BillMadison@nospam.com" <anonymous@discussions.microsoft.com> wrote in message news:10faf01c3f512$36ea0a30$a301280a@phx.gbl...
> Doug,
> 
> That would be great, I have again tested it and used the 
> old inf file I had from one of my earlier ghosts and used 
> this on my current XP and again all settings are a noshow 
> so there must be something else going wrong since the inf 
> file cannot be corrupt.
> 
> Maybe the scecli.dll has been corrupted or something or 
> maybe NTFS rights come into play,...
> 
> How do I know what your test results will be from virtual 
> PC? Will you post it on this board or do you need my 
> email?
> 
> Sincerely,
> B
> 
> 
> >-----Original Message-----
> >I don't have an answer for you, at this point, Bill.  I 
> have downloaded the documentation, and I'll set up a Pro 
> install under Virtual PC and see if I can duplicate your 
> findings.  It'll be tomorrow before I can get to it 
> though.
> >
> >-- 
> >Doug Knox, MS-MVP Windows XP/ Windows Smart Display
> >Win 95/98/Me/XP Tweaks and Fixes
> >http://www.dougknox.com
> >--------------------------------
> >Per user Group Policy Restrictions for XP Home and XP Pro
> >http://www.dougknox.com/xp/utils/xp_securityconsole.htm
> >--------------------------------
> >Please reply only to the newsgroup so all may benefit.
> >Unsolicited e-mail is not answered.
> > 
> >"BillMadison@nospam.com" 
> <anonymous@discussions.microsoft.com> wrote in message 
> news:11b9901c3f50e$ad503d10$a501280a@phx.gbl...
> >> Hi Doug,
> >> 
> >> Well, I told you I was no newbie,...when I copied the 
> >> text I made sure that each line had no pagebreaks and 
> >> used del to make sure that each line of text that 
> needed 
> >> to be on one line was so.
> >> I did that in notepad, afterwards I copied and pasted 
> the 
> >> correct text in the inf file. (no word wrap enabled so 
> I 
> >> could check)
> >> So that still leaves me wondering and even so if in 
> the 
> >> faintest remote possibility that that was the case 
> then 
> >> why doesnt the old inf file bring back my settings?
> >> 
> >> Aaaah, the mysteries of windows I suppose.
> >> 
> >> Sincerely,
> >> Bill
> >> 
> >> 
> >> >-----Original Message-----
> >> >Bill, 
> >> >
> >> >My first impression is that when you did the copy and 
> >> paste from the PDF into the INF file, you had one or 
> more 
> >> line breaks, in the wrong place, since when pasting 
> into 
> >> Notepad, it appears there, exactly as it does in the 
> PDF 
> >> file.  
> >> >
> >> >The instructions say to make sure there are no page 
> >> breaks, but it doesn't warn about line wraps, and 
> >> virtually every line in the sections to be copied is 
> >> wrapped.  So, unless you went through and "un-wrapped" 
> >> each and every line, this is likely your problem.
> >> >
> >> >-- 
> >> >Doug Knox, MS-MVP Windows XP/ Windows Smart Display
> >> >Win 95/98/Me/XP Tweaks and Fixes
> >> >http://www.dougknox.com
> >> >--------------------------------
> >> >Per user Group Policy Restrictions for XP Home and XP 
> Pro
> >> 
> >http://www.dougknox.com/xp/utils/xp_securityconsole.htm
> >> >--------------------------------
> >> >Please reply only to the newsgroup so all may benefit.
> >> >Unsolicited e-mail is not answered.
> >> > 
> >> >"BillMadison@nospam.com" 
> >> <anonymous@discussions.microsoft.com> wrote in message 
> >> news:118ee01c3f503$f04e0da0$a601280a@phx.gbl...
> >> >> Hi All,
> >> >> 
> >> >> I was reading up on the windows security guide for 
> XP 
> >> >> (http://www.microsoft.com/downloads/details.aspx?
> >> >> FamilyID=2d3e25bc-f434-4cc6-a5a7-
> >> >> 09a8a229f118&DisplayLang=en ) and came across some 
> >> >> additional settings for the sceregvl.inf file. 
> (page 
> >> >> 92/additional registry settings)
> >> >> 
> >> >> After I adjusted my inf file and reregistered it I 
> >> came 
> >> >> upon a major problem. When I opened the MMC editor 
> and 
> >> >> went to the security options snap in I didn't see 
> any 
> >> >> listings anymore. The whole list had just vanished.
> >> >> Since I know I didn't do anything wrong I would 
> most 
> >> >> definitely like to know why it didnt work and why 
> it 
> >> >> doesnt show any settings anymore.
> >> >> Since I already used this before on my 2000 box and 
> >> never 
> >> >> encountered any problems like this I am blaming 
> buggy 
> >> XP 
> >> >> for this.
> >> >> 
> >> >> Even unregistering the dll and reregistering it 
> with 
> >> the 
> >> >> old inf file I backed up doesnt bring back the list 
> >> and 
> >> >> still shows up empty. (WHAT THE F... is up with 
> that, 
> >> the 
> >> >> logic defies me)
> >> >> 
> >> >> GRRRRRRRRRRRRRRRRRRRRRRRRrrr, what the @#%$# is 
> going 
> >> on 
> >> >> here. Seems like MS should have stayed with the 
> good 
> >> old 
> >> >> 2000 code.
> >> >> I've been working with windows for over 15 years 
> now 
> >> and 
> >> >> consider myself not to be a newbie anymore so I 
> know 
> >> that 
> >> >> I did everything by the book.
> >> >> 
> >> >> Exporting and importing the registry doesn't work 
> >> since 
> >> >> crappy XP keeps nagging about keys in use so I 
> don't 
> >> >> really know what part of the registry he did in 
> fact 
> >> re-
> >> >> import so that also didn't help much.
> >> >> 
> >> >> Anyone out there who knows how I can make these 
> >> settings 
> >> >> reappear and why this has happened?
> >> >> 
> >> >> Sincerely,
> >> >> Bill
> >> >> 
> >> >> 
> >> >> 
> >> >> 
> >> >.
> >> >
> >.
> >


Relevant Pages

  • Re: Security Policy screwed up????What to do???
    ... and I'll set up a Pro install under Virtual PC and see if I can duplicate your findings. ... MS-MVP Windows XP/ Windows Smart Display ... > correct text in the inf file. ... >>> additional settings for the sceregvl.inf file. ...
    (microsoft.public.windowsxp.general)
  • Re: Security Policy screwed up????What to do???
    ... this on my current XP and again all settings are a noshow ... >Per user Group Policy Restrictions for XP Home and XP Pro ... >> I did that in notepad, ... >> correct text in the inf file. ...
    (microsoft.public.windowsxp.general)
  • Re: Security Policy screwed up????What to do???
    ... correct text in the inf file. ... the mysteries of windows I suppose. ... >> additional settings for the sceregvl.inf file. ... >> doesnt show any settings anymore. ...
    (microsoft.public.windowsxp.general)
  • Re: Security Policy screwed up????What to do???
    ... My first impression is that when you did the copy and paste from the PDF into the INF file, you had one or more line breaks, in the wrong place, since when pasting into Notepad, it appears there, exactly as it does in the PDF file. ... MS-MVP Windows XP/ Windows Smart Display ... > additional settings for the sceregvl.inf file. ...
    (microsoft.public.windowsxp.general)
  • Re: OT: Widescreen Resolution etc.
    ... The CD says there is an INF file on ... so tips on a gaming card that is comparable to the 9800 Pro? ... I have one running a duel monitor setup ... with my dell set to 1680x1050. ...
    (comp.sys.ibm.pc.games.action)