RE: Access Denied for Event Viewer or Regedit
- From: "Smurfman" <smurfman@xxxxxxxxxxxxxx>
- Date: Thu, 1 Dec 2005 06:25:03 -0800
Hey Ken,
So rather than use the OEM file from another machine, I downloaded and
installed the "Windows XP Security Guide and Templates" package and use the
SetupSecurity.inf file in there to make the changes.
After doing so created the results I desired.
I would request that Microsoft look at the upgrade proceedure for windows
2000 to Windows XP, or at teh very least create a KB that helps admins to
resolve this issue. It is interesting that performing a google search
results in lots of people having this issue but nobody having a solution.
But there does appear to be an issue with the upgrade process, both from the
inf file standpoint, but also with the forum topic I opened with regard the
Help Assistant feature of Help and Support not working, of which we still do
not have a solution for.
Thanks Ken for your help. We can close this one out.
J
"Ken Zhao [MSFT]" wrote:
> Hello,
>
> Thanks for your detaled response!
>
> However, for your new related question, I am not sure if you can run the
> inf from the OEM working machine. You may test it.
>
> Thanks & Regards,
>
> Ken Zhao
>
> Microsoft Online Partner Support
> Get Secure! - www.microsoft.com/security
>
> =====================================================
> When responding to posts, please "Reply to Group" via your newsreader so
> that others may learn and benefit from your issue.
> =====================================================
> This posting is provided "AS IS" with no warranties, and confers no rights.
>
>
>
>
> --------------------
> | Thread-Topic: Access Denied for Event Viewer or Regedit
> | thread-index: AcX0QAiw5lFB95xvQluwL4JoQe+PPw==
> | X-WBNR-Posting-Host: 209.217.222.70
> | From: "=?Utf-8?B?U211cmZtYW4=?=" <smurfman@xxxxxxxxxxxxxx>
> | References: <6F225F11-01EE-4584-8F01-D52296F4C0F9@xxxxxxxxxxxxx>
> <f7Q5wwy7FHA.832@xxxxxxxxxxxxxxxxxxxxx>
> <3C39AFAB-2BF4-4DF5-881A-94C52CA4E0E5@xxxxxxxxxxxxx>
> <57xiUf$7FHA.4000@xxxxxxxxxxxxxxxxxxxxx>
> <A81687E5-9246-4A50-B024-F2B53B351E43@xxxxxxxxxxxxx>
> <F3wE7qM8FHA.3380@xxxxxxxxxxxxxxxxxxxxx>
> | Subject: RE: Access Denied for Event Viewer or Regedit
> | Date: Mon, 28 Nov 2005 09:20:31 -0800
> | Lines: 333
> | Message-ID: <5DD82C2E-77C8-4DF3-991B-98687FB64F1C@xxxxxxxxxxxxx>
> | MIME-Version: 1.0
> | Content-Type: text/plain;
> | charset="Utf-8"
> | Content-Transfer-Encoding: 7bit
> | X-Newsreader: Microsoft CDO for Windows 2000
> | Content-Class: urn:content-classes:message
> | Importance: normal
> | Priority: normal
> | X-MimeOLE: Produced By Microsoft MimeOLE V6.00.3790.0
> | Newsgroups: microsoft.public.windowsxp.help_and_support
> | NNTP-Posting-Host: TK2MSFTNGXA03.phx.gbl 10.40.2.250
> | Path: TK2MSFTNGXA02.phx.gbl!TK2MSFTNGP08.phx.gbl!TK2MSFTNGXA03.phx.gbl
> | Xref: TK2MSFTNGXA02.phx.gbl
> microsoft.public.windowsxp.help_and_support:602782
> | X-Tomcat-NG: microsoft.public.windowsxp.help_and_support
> |
> | ADDITIONAL INFO:
> |
> | I noted the two secsetup.inf files are a difference between 511kb on the
> | upgraded machine and 800kb on my OEM machine.
> |
> | I seached the upgraded secsetup.inf file for winreg and noted this line:
> |
> | 3e="machine\system\currentcontrolset\control\securepipeservers\winreg",
> 2,
> | "D:P(A;CI;GA;;;BA)(A;;GR;;;BO)"
> |
> | In my OEM secsetup.inf file, the same line read this way:
> |
> | 57="machine\system\currentcontrolset\control\securepipeservers\winreg",
> 2,
> | "D:P(A;CI;GA;;;BA)(A;;GR;;;BO)(A;CI;GR;;;LS)"
> |
> | The file date is 05/29/2002. I looked at another machine that was not
> | upgraded yet and this was the file version present there. It seems that
> | during the upgrade the secsetup files and database are not being created.
>
> | Keep in mind too that a windows 2000 %windir% is \WINNT and XP of course
> is
> | \WINDOWS.
> |
> | 08/09/2004 was the date of an OEM file.
> |
> | SO HERE IS MY NEW RELATED QUESTION....
> |
> | Can I copy the inf file from a working OEM machine and rerun the command?
> | Would I need the secsetup.sdb file, and were is this located that I may
> see
> | if this fixes other issues?
> |
> | J
> |
> | "Ken Zhao [MSFT]" wrote:
> |
> | > Hello,
> | >
> | > Thanks for your efforts and reply!
> | >
> | > At this time, if the winreg key has been added in the registry, on the
> | > Windows XP SP2, please add Local Service to the
> | >
> HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SecurePipeServers\winreg
> | > key with Read - Allow permissions, and then test this issue again.
> | >
> | > If this issue still exists, please refer to the following KB article to
> | > reset the security settings to the default, and test this issue again.
> | >
> | > 313222: How To Reset Security Settings Back to the Defaults
> | > http://support.microsoft.com/?id=313222
> | >
> | > In addition, I noticed you said "Also in one KB I noted that it
> suggested
> | > making sure the Permissions key was listed under the winreg key we
> started
> | > talking about...My machines do not have a permissions key...all of
> them.
> | > Is this normal? All I have is AllowedPaths...?" I am not sure what is
> the
> | > KB number? Is this a Microsoft knowledge article?
> | >
> | > Hope the suggestions help!
> | >
> | > Thanks & Regards,
> | >
> | > Ken Zhao
> | >
> | > Microsoft Online Partner Support
> | > Get Secure! - www.microsoft.com/security
> | >
> | > =====================================================
> | > When responding to posts, please "Reply to Group" via your newsreader
> so
> | > that others may learn and benefit from your issue.
> | > =====================================================
> | > This posting is provided "AS IS" with no warranties, and confers no
> rights.
> | >
> | >
> | >
> | >
> | > --------------------
> | > | Thread-Topic: Access Denied for Event Viewer or Regedit
> | > | thread-index: AcXwZ2EvAoQ7cZrjQneIPLoo59M5FQ==
> | > | X-WBNR-Posting-Host: 209.217.222.70
> | > | From: "=?Utf-8?B?U211cmZtYW4=?=" <smurfman@xxxxxxxxxxxxxx>
> | > | References: <6F225F11-01EE-4584-8F01-D52296F4C0F9@xxxxxxxxxxxxx>
> | > <f7Q5wwy7FHA.832@xxxxxxxxxxxxxxxxxxxxx>
> | > <3C39AFAB-2BF4-4DF5-881A-94C52CA4E0E5@xxxxxxxxxxxxx>
> | > <57xiUf$7FHA.4000@xxxxxxxxxxxxxxxxxxxxx>
> | > | Subject: RE: Access Denied for Event Viewer or Regedit
> | > | Date: Wed, 23 Nov 2005 11:52:05 -0800
> | > | Lines: 345
> | > | Message-ID: <A81687E5-9246-4A50-B024-F2B53B351E43@xxxxxxxxxxxxx>
> | > | MIME-Version: 1.0
> | > | Content-Type: text/plain;
> | > | charset="Utf-8"
> | > | Content-Transfer-Encoding: 7bit
> | > | X-Newsreader: Microsoft CDO for Windows 2000
> | > | Content-Class: urn:content-classes:message
> | > | Importance: normal
> | > | Priority: normal
> | > | X-MimeOLE: Produced By Microsoft MimeOLE V6.00.3790.0
> | > | Newsgroups: microsoft.public.windowsxp.help_and_support
> | > | NNTP-Posting-Host: TK2MSFTNGXA03.phx.gbl 10.40.2.250
> | > | Path: TK2MSFTNGXA02.phx.gbl!TK2MSFTNGXA03.phx.gbl
> | > | Xref: TK2MSFTNGXA02.phx.gbl
> | > microsoft.public.windowsxp.help_and_support:601402
> | > | X-Tomcat-NG: microsoft.public.windowsxp.help_and_support
> | > |
> | > | Hi Ken.
> | > | Well, regarding the KB, I confirmed that my GPO is being applied, by
> | > using
> | > | the Group Policy Results.
> | > |
> | > | Windows Firewall: Allow remote administration exception Enabled
> | > | Default Domain Firewall Policy
> | > | Allow unsolicited incoming messages from: 192.168.1.204,192.168.1.207
> | > |
> | > | ---
> | > |
> | > | In the mean time here is what I performed. I took my machine did a
> | > system
> | > | restore back to Monday Morning when I started the W2K upgrade...to XP
> | > Pro.
> | > | After the reboot, I noted that SP2 was still installed even after the
> | > system
> | > | restore. So I performed an Uninstall, which also removed all of my
> | > Updates
> | > | that I had made.
> | > |
> | > | I then rebooted, and tried my test again, but I still get the Access
> | > Denied
> | > | for Event Viewer and Regedit.
> | > |
> | > | I am re-applying SP2 and getting the machine to be in use again.
> | > |
> | > | The issue must have to do with the Upgrade from Windows 2000 to
> Windows
> | > XP.
> | > |
> | > | I am using my Windows XP Core CD as part of my Open License, and
> choosing
> | > | the Upgrade option when running under Windows 2000 and starting the
> | > install.
> | > |
> | > | I am not using a Windows XP Upgrade CD...I never received one and was
> | > told I
> | > | could use my Open CD to perform the same step. I use the CD Key from
> the
> | > | particular license that has the upgrades that I have specified. For
> | > example
> | > | Machines 1-5 are all on a particular license where I purchased 5
> upgrades
> | > | from Windows 2000 to XP. I then went and got the CD keys from the
> eOpen
> | > site
> | > | as usual, and performed the upgrade, it takes the keys. I am
> mentioning
> | > all
> | > | of this to make sure this is not the issue I am running into...?
> | > |
> | > | --
> | > |
> | > | Also in one KB I noted that it suggested making sure the Permissions
> key
> | > was
> | > | listed under the winreg key we started talking about...My machines do
> not
> | > | have a permissions key...all of them. Is this normal? All I have is
> | > | AllowedPaths...?
> | > |
> | > | Thanks
> | > | J
> | > |
> | > | "Ken Zhao [MSFT]" wrote:
> | > |
> | > | > Hello,
> | > | >
> | > | > Thanks for your reply and additional info!
> | > | >
> | > | > I am not sure if you have tried the other methods that described in
> | > | > KB840634. If not, I suggest you try the other two methods.
> | > | >
> | > | > If the problem persists, I will suggest you make the following test:
> | > | > Please upgrade from Windows 2000 to Windows XP and not apply the
> SP2 on
> | > a
> | > | > test machine. And then test the issue again. It will help us narrow
> | > down if
> | > | > the issue is related to SP2 applying.
> | > | >
> | > | > In addition, if the problem starts occurring recently, I also
> suggest
> | > you
> | > | > perform a System Restore to revert back to the initial status or
> other
> | > | > correct state.
> | > | >
> | > | > Note: If you have some important documents or files which are
> created
> | > after
> | > | > the restore point, please copy them to My Document. This is a
> | > precaution to
> | > | > take even if you are back to the initial status, files will still
> | > remain in
> | > | > My Documents.
> | > | >
> | > | > To restore your system to a previous state, we can use the
> following
> | > steps:
> | > | >
> | > | > 1. Before you start, please close all open files and close all open
> | > | > programs.
> | > | > 2. Click "Start"; Click "Programs or All Programs"; Click
> | > "Accessories";
> | > | > Click "System Tools"; Click "System Restore". The System Restore
> user
> | > | > interface should appear.
> | > | > 3. Select "Restore my computer to an earlier time" and click "Next".
> | > | > 4. From the restore points available, select an appropriate restore
> | > point
> | > | > when your system is working correctly and click "Next".
> | > | > 5. Click "Next" again. The restore process will run and your system
> | > will
> | > | > restart automatically.
> | > | > 6. After restarting, check whether your system functions correctly
> now.
> | > If
> | > | > not, you can undo your last restoration or select another restore
> point
> | > in
> | > | > System Restore user interface.
> | > | >
> | > | > 306084: How to restore the operating system to a previous state in
> | > Windows
> | > | > XP
> | > | > http://support.microsoft.com/default.aspx?scid=kb;en-us;306084
> | > | >
> | > | > Hope that helps!
> | > | >
> | > | > Thanks & Regards,
> | > | >
.
- Follow-Ups:
- RE: Access Denied for Event Viewer or Regedit
- From: Ken Zhao [MSFT]
- RE: Access Denied for Event Viewer or Regedit
- Prev by Date: RE: Help and Support - Windows 2000 Upgrade to XP
- Next by Date: Re: Problem - windows title bar becomes transparent
- Previous by thread: System Idle Process won't relinquish CPU
- Next by thread: RE: Access Denied for Event Viewer or Regedit
- Index(es):
Relevant Pages
|
