Re: Normal user login now logs off immediately [w/o administrator



"WTC" wrote:

> "Darmdorf" <darmdorf@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote in message
> news:268CC54E-54E8-4E83-BA58-E53DB7B02CFF@xxxxxxxxxxxxxxxx
> > My normal user account under XP Pro SP2 (which has no administrator
> > rights)
> > is no longer able to login. The login begins in a normal fashion:
> > preferences
> > are loaded, there is disk activity for a while, the background image is
> > displayed, but before any icons or toolbar entries appear a logout
> > suddenly
> > occurs. If I try again the logout is immediate. While trying to diagnose
> > the
> > problem I happened to give my normal user account administrator rights,
> > which
> > then strangely allows a normal login. Very spooky. Removing admin rights
> > brings the problem back again.
> >
> > Judging from the system logs, evidently an NTFS error was logged just
> > before
> > the problem began. The very next normal start automatically included a
> > chkdsk
> > run, repairing many problems on my C: drive (file truncations, orphan
> > clusters, etc.). Nothing to really worry about. After about a minute into
> > the
> > actual start a single DCOM server error
> > {73E709EA-5D93-4B2E-BBB0-99B7938DA9E4} was logged because of an "incorrect
> > application configuration".
> >
> > I've tried everything I can think of to repair the damage. Chkdsk shows no
> > errors, and I also haven't been able to spot any errors with Regedit. The
> > security profiles also appear to be correct when compared with another XP
> > Pro
> > system. I've browsed here extensively for similar problems and not found
> > anything applicable. I don't have the typical userinit /
> > wsaupdaterregistry
> > problem with the registry winlogon entry. I also went back to a check
> > point
> > previous to the problem, but that didn't change the behavior either. I'm
> > sure
> > I don't have a malware problem, as I have AD-Watch active, use Spybot
> > regularly, and have a decent Kaspersky Internet Security package.
> >
> > It must be something during the login procedure which is directly affected
> > by administrator rights, but what? Any ideas? It would probably be
> > helpful,
> > if one could somehow protocol the logon progress to find out what is
> > actually
> > going awry. I really hate to have to leave administrator rights enabled
> > for
> > my normal work, as that's inviting trouble. As an ex-computer expert, I
> > must
> > admit that I've never seen XP have problems of this kind after a minor
> > disk
> > problem. I'd really appreciate any help in the matter.
>
>
> Could you post back with all the permissions that allow or denied on this
> key in the registry?
>
> [HKLM\System\MountedDevices]
>
> Right click on MountedDevices and select "Permissions". I just have a hunch
> that the permissions may be incorrect.
>
> --
> William Crawford
> MS-MVP Windows Shell/User
>
Thanks for the reply WTC. I plowed into regedit and pulled up the things you
requested for [HKLM\System\MountedDevices], I hope.

Groups or Usernames Permissions Apply to:

Admin (User) Special Permissions Just this key
Administrators (Group) Full Access/Read This key & subs
Users (Group) Read This key & subs
CREATOR-OWNER (Group) Special Permissions Just sub-keys
Main Users (Group) Read This key & subs
SYSTEM (Group) Read This key & subs


There were no explicit "denies".

I also happened to look at the key directly above
[HKLM\System\MountedDevice1]. It is of "almost" the same content, but
interestingly different. It contains 21 "Volume" entries & DosDevices, where
as \MountedDevice contains 27 "Volume" entries & DosDevices. The entries look
a bit "hodge-podge" for my taste. Does that help?

Oh yes, my "problem" user is just a normal User with no special permissions,
ie. read only.
.

Relevant Pages

  • Re: Windows Server 2003 Auto connect printers;
    ... I removed the NT Authentication but then the user's don't have enough ... then for a normal basic user to login to a TS without having NT ... Isn't some form of admin rights required for a non admin user ... >> You do this by granting only those permissions that are ...
    (microsoft.public.win2000.termserv.apps)
  • Re: permissions not working
    ... I imagine that there is some unexpected rights that your user has that you ... I understand that this is a Windows login you are testing. ... have this login as a member?" ... and have created some new roles and assigned permissions to the ...
    (microsoft.public.sqlserver.security)
  • Re: IIS Access Problems
    ... Make sure all the permissions and user right are correct as per folllowing ... This posting is provided "AS IS" with no warranties, and confers no rights. ... > tries to login to the site they get the error below. ... > The authenication is set to Windows Authenication with no anonymous ...
    (microsoft.public.inetserver.iis)
  • Re: Security .mdw - how to add myself to list of users
    ... In that case, you'd need to have a valid username/password to login, and that login would need the appropriate ... permissions to change the user list. ... You don't need to open the MDW file in MS Access. ... This *may* allow you to assign the necessary rights to your user. ...
    (microsoft.public.access.security)
  • Re: Normal user login now logs off immediately [w/o administrator righ
    ... > My normal user account under XP Pro SP2 (which has no administrator ... The login begins in a normal fashion: ... > problem I happened to give my normal user account administrator rights, ...
    (microsoft.public.windowsxp.general)