Guest Steven Avery Posted July 30, 2009 Share Posted July 30, 2009 Hi Folks, Greetings. Appreciate your tools and forum, new to them today. Normally my XP-SP3 puter has 2 users in addition to the Administrator, and there are to be no restrictions. Today: lots of .exe initiation problems Permissions - "windows cannot access the specified device path or file. you may not have the appropriate permission to access the item" UNLESS : Safe Mode and Administrator signon. (Possibly Safe Mode and regular sign-ons are ok, I have not tested, Administrator signon outside safe mode hits the same problems.) This seemed to arise after last nights Windows IE8 hotfix (Note: before this, in general my IE8 does not want to open, simply flashes up and down, which doesn't bother me normally as I use the other browsers). Somehow I had the puter set to automatic updates. System Restore I don't have up at this time. In a super-pinch I can always reformat, losing a couple of hours of time, however I would like to try to fix this permission thing, learning in the process. Malwarebytes runs a complete scan, finds the system clean. For my Avira scan to run fully I would have to return to Safe mode, since it is one of the .exes that is asleep (just the scan, the guard is up). I would do special testing (BitDefender, Panda, etc) looking for trojans in safe mode if I thought that were the root of the problem, or just as additional check. The fact of the 3AM Windows Update install though was confirmed in event viewer and an automatic update setting (since changed, plus put system restore back on for the future). (SIDENOTE: in safe mode the monitor or video driver doesn't load so the system is a bit balky around the edges of scrolling web pages, so I wonder if there is an easy way to load a video driver once you go into safe mode .. Dell monitor, I can find the driver location. Another funny thing is that the printer server did not want to load in safe mode, although it works fine in my regular mode). =============================================================== So I tried Dial-a-Fix in the "Permissions" thing. Gives two nice log files. secanalyze 500K and has lots of entries starting with stuff like: ----Reading Configuration Info... ----Analyze Group Membership... Analyze Replicator. Analyze Remote Desktop Users. Analyze Power Users. Analyze Network Configuration Operators. Analyze Guests. Not Configured - *S-1-5-32-546__Members. Analyze Backup Operators. Analyze Administrators. Not Configured - *S-1-5-32-544__Members. Analyze Users. Mismatch - *S-1-5-32-545__Members. That is curious. === 423 mismatches are found under machine. 2726 mismatches are found under c:\. Many of those mismatches are IE8 related. Stuff is a bit crytpic, so I will leave it like this for now. Can include the file or extract more. Then to secrepair.log. Here is some of the curious stuff. ----Configure User Rights... Configure S-1-5-21-1202660629-1364589140-682003330-1002. remove SeBatchLogonRight. remove SeDenyNetworkLogonRight. remove SeDenyInteractiveLogonRight. Configure S-1-5-19. Configure S-1-5-20. remove SeServiceLogonRight. Configure S-1-5-32-544. Configure S-1-5-32-551. Configure S-1-5-32-547. Configure S-1-5-32-545. Configure S-1-1-0. Configure S-1-5-4. Configure S-1-5-6. Configure S-1-5-21-1202660629-1364589140-682003330-501. Configure S-1-5-32-555. User Rights configuration was completed successfully. ----Configure Group Membership... Configure Users. remove DELL-PRECISION\Steven. remove DELL-PRECISION\OtherName. Group Membership configuration was completed successfully. The rest is all stuff like. Configure c:\windows\system32\inetcpl.cpl. With a few like this: Warning 2: The system cannot find the file specified. Error setting security on c:\windows\system32\ieencode.dll. File Security configuration was completed successfully. General Service configuration was completed successfully. The next section begins like this: ---Configure Security Policy... Configure password information. LSA anonymous lookup names setting : existing SD = D:(D;;0x800;;;AN)(A;;0xf1fff;;;BA)(A;;0x20801;;;WD)(A;;0x801;;;AN)(A;;0x1000;;;LS)(A;;0x1000;;;NS). Configure LSA anonymous lookup setting. Guest account is disabled. System Access configuration was completed successfully. Configure log settings. Audit/Log configuration was completed successfully. Configure machine\software\microsoft\windows nt\currentversion\setup\recoveryconsole\securitylevel. And the ending is: Configuration of Registry Values was completed successfully. ----Configure available attachment engines... Configuration of attachment engines was completed successfully. ----Un-initialize configuration engine... Any thoughts appreciated. When I was done, the permission problem appears unchanged. ====================================================== Note, no action on the D:\ where i have data only .. all my active programs are on the C:\ ============= OTHER IDEAS .exe file association corruption is another possbility - it looks like the Doug Knox tool may be the way to go to look into that. I have not tried that yet. Uninstalling the IE8 patch is another try, one that I haven't tried yet. ============= Your ideas and thoughts for an all-purpose way. Thanks Shalom, Steven Avery Link to comment Share on other sites More sharing options...
This topic is now archived and is closed to further replies.