Re: Going crazy over this one!

Tech-Archive recommends: Repair Windows Errors & Optimize Windows Performance

From: David Everett [MSFT] (deverett_at_online.microsoft.com)
Date: 03/24/04


Date: Wed, 24 Mar 2004 16:02:41 -0600

1. Highlight HKEY_LOCAL_MACHINE\SOFTWARE\Install Options
2. click Edit > Permissions
3. click the Advanced button
4. uncheck "Allow inheritable permissions from the parent to propagate to
this object and on all child..." and click COPY and Apply.
5. Place a check on "Allow inheritable permissions from the parent to
propagate to this object and on all child..." and click APPLY.
6. Place a check on "Replace permissions entries on all child objects with
entries shown here that apply to child objects" and click OK, OK again and
exit regedit.

-- 
David Everett
Microsoft Corporation
This posting is provided "AS IS" with no warranties, and confers no rights.
"Marc" <anyone@anyplace.now> wrote in message
news:O9q4SVeEEHA.3576@TK2MSFTNGP12.phx.gbl...
>
> OK, got it... Thanks for the info! Now back to your previous points:
>
> >
> > Here are some other things you could try:
> > 1.  Open HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon
> > and
> > verify that logonui.exe is the only file being called.
> >
>
> Under UIHost, I have %SystemRoot%\system32\logonui.exe.
> Under Userinit, I see C:\WINDOWS\system32\userinit.exe.
> Under Shell, I see Explorer.exe.
> Under VmApplet, I see  rundll32 shell32,Control_RunDLL "sysdm.cpl".
>
> >
> > 2.  Locate Logonui.exe on the file system and verify the Version is
> > 6.0.3790.0 and from Microsoft Corporation.
> >
>
> That's the version I have alright...
>
> >
> > 3.  If you have TS Roaming Profiles verify there are not scripts in
> > the Startup folder of those profiles.
> >
>
> No, I don't believe I have any of that...
>
> >
> > The only thing about secedit I might question is the invalid
> > structure on
> > HKLM\software\Install Options.  Do you have an "Install Options" key
> > under HKLM\software and can you view the Permissions on this key?
> >
>
> Yes, I do. There are three items listed, one with the icon showing "ab" in
> red, type REG_SZ, and (value not set) under Data. The next one's name is
> Options5, in blue, type REG_BINARY. The final one's name is Options5.2,
> is also in blue, and is of the same type. I can't see anything that makes
> sense to me when I double-click on any of these.
>
> >
> > If you can view the Advanced security of this key see if it is
> > inheriting
> > from above.  I'm not sure that this key would affect RDP logon but
> > you could try the following:
> > If it is Inheriting from above get a System state backup
> > Uncheck this Inherit from above setting on this key and select Copy
> > and Apply
> > Check the Inherit from above again and click Apply.
> > Click the Propagate to all child objects box and click Apply again.
> >
>
> Well, unfortunately, I don't see anything like "Advanced" on the items
> that I can see under My Computer\HKEY_LOCAL_MACHINE\SOFTWARE\Install
Options...
>
> Cheers,
>
> --Marc
>
>
>
> > > > > > -- 
> > > > > > David Everett
> > > > > > Microsoft Corporation
> > > > > >
> > > > > > This posting is provided "AS IS" with no warranties, and confers
no
> > > > rights.
> > > > > >
> > > > > > "Marc" <anyone@anyplace.now> wrote in message
> > > > > > news:eAJES6aEEHA.2408@TK2MSFTNGP10.phx.gbl...
> > > > > > >
> > > > > > > Hi David,
> > > > > > >
> > > > > > > >
> > > > > > > > If you walk up to the console of the server and log in, not
> > through
> > > > RDP
> > > > > > > > session, do you stay logged in?
> > > > > > > >
> > > > > > >
> > > > > > > Yes, I do!
> > > > > > >
> > > > > > > >
> > > > > > > > If you do, check TS Configuration under RDP-Tcp Properties >
> > > > Environment
> > > > > > and
> > > > > > > > see if the check box for "Override settings from user
profile
> > and
> > > > Remote
> > > > > > > > Desktop Connection or Terminal Services Client" is checked.
> > > > > > > >
> > > > > > >
> > > > > > > No, it's not checked...
> > > > > > >
> > > > > > > >
> > > > > > > > Run RSOP.MSC and on the console of the Terminal Server and
see
> > if a
> > > > the
> > > > > > > > policy option "Sets a time limit for active Terminal
Services
> > > > sessions"
> > > > > > is
> > > > > > > > Enabled and set to one minute.  Also, verify the policy
setting
> > > > > > "Terminal
> > > > > > > > session when time limits are reached" is Not Configured.
> > > > > > > >
> > > > > > >
> > > > > > > Strange, I can't seem to find either policy option -- where
are
> > they?
> > > > :-0
> > > > > > > I'll keep looking though...
> > > > > > >
> > > > > > > >
> > > > > > > > You may want to reapply basic security to the server.  If it
is
> > just
> > > > a
> > > > > > > > member server the commands to reapply default security are:
> > > > > > > >
> > > > > > > > 1.  cd %systemroot%\security\templates
> > > > > > > > 2.  secedit /configure /cfg "setup security.inf" /db ss.sdb
/log
> > > > ss.log
> > > > > > > > /verbose
> > > > > > > >
> > > > > > >
> > > > > > > I just tried this -- twice -- and I got the following error
> > message:
> > > > "An
> > > > > > extended
> > > > > > > error has occurred. The task has completed with an error. See
log
> > > > > > C:\...\ss.log
> > > > > > > for detail info." There I found the following error messages:
> > > > > > >
> > > > > > >         ----Configure Registry Keys...
> > > > > > >         Configure users\.default.
> > > > > > >         Configure users\.default\software\microsoft\netdde.
> > > > > > >         Configure machine\software.
> > > > > > >         Warning 1336: The access control list (ACL) structure
is
> > > > invalid.
> > > > > > >         Error setting security on machine\software\Install
> > Options.
> > > > > > >
> > > > > > >         Configuration of Registry Keys was completed with one
or
> > more
> > > > > > errors.
> > > > > > >
> > > > > > > I also get LOTS of errors to the effect that "the system
cannot
> > find
> > > > the
> > > > > > > file specified". The list is very long, but on the \system32
> > folder,
> > > > it
> > > > > > > starts with appverif.exe and goes up to w95upgnt.dll.
> > > > > > >
> > > > > > > Many thanks for your help, David!
> > > > > > >
> > > > > > > Cheers,
> > > > > > >
> > > > > > > --Marc
> > > > > > >
> > > > > > >
> > > > > > >
> > > > > > >
> > > > > > >
> > > > > > >
> > > > > > >
> > > > > > >
> > > > > > >
> > > > > > >
> > > > > > > > David Everett
> > > > > > > > Microsoft Corporation
> > > > > > > >
> > > > > > > > This posting is provided "AS IS" with no warranties, and
confers
> > no
> > > > > > rights.
> > > > > > > >
> > > > > > > > "Marc" <anyone@anyplace.now> wrote in message
> > > > > > > > news:u8X3FYGEEHA.1544@TK2MSFTNGP11.phx.gbl...
> > > > > > > > >
> > > > > > > > > Hi,
> > > > > > > > >
> > > > > > > > > If this is what you mean, yes, I do get precisely the same
> > > > behavior if
> > > > > > I
> > > > > > > > try
> > > > > > > > > "Remote Desktop Connection" to the server from the console
> > > > itself...
> > > > > > As to
> > > > > > > > > the event logs, please see my reply to Vera's posting...
> > Thanks!
> > > > > > > > >
> > > > > > > > > Cheers,
> > > > > > > > >
> > > > > > > > > --Marc
> > > > > > > > >
> > > > > > > > >
> > > > > > > > >
> > > > > > > > >
> > > > > > > > > "Mike Silverman" <Noah.Body@nowhere.ca> wrote in message
> > > > > > > > news:OAvZE7FEEHA.1240@TK2MSFTNGP10.phx.gbl...
> > > > > > > > > > Can you log on at the console and have the same
behaviour
> > occur?
> > > > > > What,
> > > > > > > > > > if anything, do the event logs say?
> > > > > > > > > >
> > > > > > > > > > Mike.
> > > > > > > > > >
> > > > > > > > > > Marc wrote:
> > > > > > > > > > > I kept the Symantec W32.Blaster.Worm Fix Tool 1.0.6.1
> > > > > > > > > > > running on my system. After a looong scan of all my
> > > > > > > > > > > hard drives, it came out with the following message:
> > > > > > > > > > >
> > > > > > > > > > > W32.Blaster.Worm has not been found on your computer
> > > > > > > > > > >
> > > > > > > > > > > Therefore, there must be another answer -- which I am
> > > > > > > > > > > DESPERATELY in need of at this point!!! Will anybody
> > > > > > > > > > > help, PLEASE??? Thanks so much!!!
> > > > > > > > > > >
> > > > > > > > > > > --Marc
> > > > > > > > > > >
> > > > > > > > > > >
> > > > > > > > > > >
> > > > > > > > > > >
> > > > > > > > > > >>-----Original Message-----
> > > > > > > > > > >>
> > > > > > > > > > >>Hmm... Seems unlikely to me, since I have Symantec
Anti-
> > > > > > > > > > >>virus Corporate Edition running on this server, with
> > > > > > > > > > >>automated updates, and I haven't been prompted by this
> > > > > > > > > > >>program about any virus or trojans (yet)... However,
> > > > > > > > > > >
> > > > > > > > > > > I'll
> > > > > > > > > > >
> > > > > > > > > > >>give this the benefit of the doubt, and will let you
> > > > > > > > > > >
> > > > > > > > > > > guys
> > > > > > > > > > >
> > > > > > > > > > >>know what I find once I take a closer look -- thanks!
> > > > > > > > > > >>
> > > > > > > > > > >>Cheers,
> > > > > > > > > > >>
> > > > > > > > > > >>--Marc
> > > > > > > > > > >>
> > > > > > > > > > >>
> > > > > > > > > > >>
> > > > > > > > > > >>>-----Original Message-----
> > > > > > > > > > >>>Sounds like Blaster Worm to me.
> > > > > > > > > > >>>
> > > > > > > > > > >>>Check Anti Virus sites for removal tools.
> > > > > > > > > > >>>
> > > > > > > > > > >>>--
> > > > > > > > > > >>>
> > > > > > > > > > >>>HTH
> > > > > > > > > > >>>
> > > > > > > > > > >>>Cheers
> > > > > > > > > > >>>Lewis Knight
> > > > > > > > > > >>>MCSE, MCT
> > > > > > > > > > >>>Perth
> > > > > > > > > > >>>OZ
> > > > > > > > > > >>>
> > > > > > > > > > >>>
> > > > > > > > > > >>>
> > > > > > > > > > >>>"Marc" <anonymous@discussions.microsoft.com> wrote in
> > > > > > > > > > >>
> > > > > > > > > > >>message
> > > > > > > > > > >>
> > > > > > > > > > >>>news:1066601c40e0a$d5ff59c0$a401280a@phx.gbl...
> > > > > > > > > > >>>
> > > > > > > > > > >>>>Greetings,
> > > > > > > > > > >>>>
> > > > > > > > > > >>>>My problem is: no one can maintain a remote session
on
> > > > > > > > > > >>>>this computer for more than a few seconds anymore.
> > > > > > > > > > >
> > > > > > > > > > > That
> > > > > > > > > > >
> > > > > > > > > > >>>>is, the person remotely logs on, but after a second
or
> > > > > > > > > > >>>>two, a window shows up saying "saving your
settings",
> > > > > > > > > > >>>>and the user is kicked off! What should I do???
> > > > > > > > > > >
> > > > > > > > > > > HELP!!!
> > > > > > > > > > >
> > > > > > > > > > >>>>I've been fighting this one all day, already
> > > > > > > > > > >
> > > > > > > > > > > uninstalled
> > > > > > > > > > >
> > > > > > > > > > >>>>and reinstalled terminal services and licensing, but
> > > > > > > > > > >
> > > > > > > > > > > to
> > > > > > > > > > >
> > > > > > > > > > >>>>no avail...
> > > > > > > > > > >>>
> > > > > > > > > > >>>
> > > > > > > > > > >>>.
> > > > > > > > > > >>>
> > > > > > > > > > >>
> > > > > > > > > > >>.
> > > > > > > > > > >>
> > > > > > > > > >
> > > > > > > > >
> > > > > > > > >
> > > > > > > >
> > > > > > > >
> > > > > > >
> > > > > > >
> > > > > >
> > > > > >
> > > > >
> > > > >
> > > >
> > > >
> > >
> > >
> >
> >
>
>


Relevant Pages

  • Re: Lost all security permissions.
    ... Display/Modify File permissions ... Mask can be a letter-coded permissions string or an Hexadecimal mask ... Let's first define "inheriting": ... Minimum Access for saving an open file is Rr on parent and RrRepW on file ...
    (microsoft.public.windows.server.general)
  • Re: ADPREP /forestprep fails
    ... Attributes Tab says "No information is available for this object" The ... Security Tab brings up the Security box "You do not have ... Set the "Allow inheritable permissions from parent object to propagate ... > {This object is protected from inheriting permissions from the> parent} ...
    (microsoft.public.windows.server.migration)
  • ADPREP /forestprep fails
    ... ADPREP is failing near the end of the process, ... Effective Permissions on this object are: ... All Everyone SPECIAL ACCESS ... {This object is protected from inheriting permissions from the parent} ...
    (microsoft.public.windows.server.migration)
  • Re: Access Denied for Admin on a Users Profile Help.
    ... Could this be the initial permissions that you are either setting up on the ... share or the permissions that the directory is inheriting from a parent ... permissions to the parent directory... ... when i go to access this folder it says Access is denied? ...
    (microsoft.public.windows.server.general)
  • Re: Something about mailbox rights
    ... if you are looking at the Mailbox Rights and USERS has Full ... Mailbox Access permissions and the checkbox is gray, ... way up to find out where the account is inheriting permissions from. ... Server (also can do this in Exchange System Manager) - if inherited at that ...
    (microsoft.public.exchange.admin)