Help!!! I get "Access Denied" message .........

Hello all!
My problem is I get an "Access Denied" message that further states "Please
login with administrator privileges and try again". I AM THE ADMINISTRATOR!
I can't go any higher. I have all rights and privleges enabled under my user
account. I even went so far as to go into safe mode, login as
"administrator" and double check and of course it has my account as having
full control and administrative rights. I just recently installed XP Home's
SP2 and after I did that it started doing this "Access Denied" B.S.! It
acually doesn't effect much and has only happened a few, completely different
times but with a non-stop consistancy. Once when I went to install a program
(SIMS 2) it wouldn't let me but after I logged in to the actual
"administrator" account (in safe mode)and I double checked that I had full
privledges and I did, I logged back into my origional account (my account is
considered a "User/Owner" account with full administrative privledges) and
the game installed fine. And yesterday when I installed Microsoft's own Rise
of Nations game and go to play it I get another stupid "Access Denied"
message that I wrote earlier. I'm getting fed up with this after 10 or so
hours of searching the MS's KB and tinkering with settings and reading fourms
and various trouble shooting just to play a game!
Usually I can figure out the problem on my own but this is....well a
problem that has stumped me (for now) and you guys/gals seem to be on top of
this game. Could you all help?

The system is a newer Dell laptop and I just reformatted and reinstalled
Windows Xp Home and am currently tring to reload all my applications and
games. I've run various tests on the hardware and hard drive just incase it
might have been a hardware issue but everything checks out. Like I said this
all happened after I installed SP2. Thanks

I would check the security settings on home xp to see if your user account
has full control of the folder or drive, and see if that helps.
Jacob

I did
It didn't
thanks though I appreciate any and all help

"Jacob P" wrote:

> I would check the security settings on home xp to see if your user account
> has full control of the folder or drive, and see if that helps.
> Jacob
>
>
>

"chetttyson" <chetttyson@discussions.microsoft.com> wrote in message
news:949B9D1B-82CE-4D25-9ACB-BA037275E119@microsoft.com...
> Hello all!
> My problem is I get an "Access Denied" message that further states "Please
> login with administrator privileges and try again". I AM THE
> ADMINISTRATOR!
> I can't go any higher.

Did you install XP on top of a previous operating system without doing an
official "upgrade"? If so, it's possible that you're seeing *previous* files
have permissions related to the old OS machine ID: I've seen this when I
reinstall my operating system and access D: drive files.

In any case, it may be helpful to find out just *which* files are being
denied: running the (free) Filemon application from SysInternals will let
you watch the system while it runs, showing each file that it tries to open.
You'll see "ACCESS DENIED", and you may be able to take ownership of the
file(s) in question if you know which ones they are.

http://www.sysinternals.com/ntw2k/source/filemon.shtml

Fantastic tool (but you have to be admin to run it!)

And if, when you're editing the permissions on the files, you see things
like S-1-5-21-1123561945-884357618-682003330-513 (either with an ACL or an
owner), it's leftover from a previous system.

Steve
--
Steve Friedl -- Tustin, California USA -- www.unixwiz.net
Unix Wizard -- Microsoft MVP/Security -- I speak for me only

See the following link to see more information and I'll think about
installing more freeware (I've developed a phobia when it comes to installing
some freeware becasue of really bad past problems but we'll see) to get you
the answers you need.

http://www.microsoft.com/windowsxp/...44-6dd5602190a2




"Steve Friedl [MVP/Security]" wrote:

> "chetttyson" <chetttyson@discussions.microsoft.com> wrote in message
> news:949B9D1B-82CE-4D25-9ACB-BA037275E119@microsoft.com...
> > Hello all!
> > My problem is I get an "Access Denied" message that further states "Please
> > login with administrator privileges and try again". I AM THE
> > ADMINISTRATOR!
> > I can't go any higher.
>
> Did you install XP on top of a previous operating system without doing an
> official "upgrade"? If so, it's possible that you're seeing *previous* files
> have permissions related to the old OS machine ID: I've seen this when I
> reinstall my operating system and access D: drive files.
>
> In any case, it may be helpful to find out just *which* files are being
> denied: running the (free) Filemon application from SysInternals will let
> you watch the system while it runs, showing each file that it tries to open.
> You'll see "ACCESS DENIED", and you may be able to take ownership of the
> file(s) in question if you know which ones they are.
>
> http://www.sysinternals.com/ntw2k/source/filemon.shtml
>
> Fantastic tool (but you have to be admin to run it!)
>
> And if, when you're editing the permissions on the files, you see things
> like S-1-5-21-1123561945-884357618-682003330-513 (either with an ACL or an
> owner), it's leftover from a previous system.
>
> Steve
> --
> Steve Friedl -- Tustin, California USA -- www.unixwiz.net
> Unix Wizard -- Microsoft MVP/Security -- I speak for me only
>
>
>

"chetttyson" <chetttyson@discussions.microsoft.com> wrote in message
news:E4423F72-90C8-4BA0-8B91-0EC1F722A749@microsoft.com...
> See the following link to see more information and I'll think about
> installing more freeware (I've developed a phobia when it comes to
> installing
> some freeware because of really bad past problems but we'll see) to get
> you
> the answers you need.

Your caution to unknown freeware is very healthy, but this stuff from
SysInternals is as clean as it gets. It was written by a Microsoft MVP, and
Microsoft itself requently recommends this tool (and its sibling, regmon):

http://support.microsoft.com/kb/q286198/
http://support.microsoft.com/kb/q296647/
http://support.microsoft.com/defaul...kb;en-us;830761
http://support.microsoft.com/defaul...kb;en-us;198038

You'll need to check permissions on various files and registry keys, but
without knowing which files or keys are failing, it's hard to describe it
properly from a distance.

If it were me, I would follow the procedure in the first KB article I
mentioned and look for ACCDENIED errors: report back and we'll help you dig
further.

Steve
--
Steve Friedl -- Tustin, California USA -- www.unixwiz.net
Unix Wizard -- Microsoft MVP/Security -- I speak for me only

OK I used the App that you suggested and looked for "ACCESS DENIED" under the
results column and found 3 all dealing with the game that caused the error
message this is what the file is that reported the "ACCESS DENIED" result:
(don't know how this will look)

TIME PROCESS REQUEST PAT
----------------------------------------------------------------------------------------------------------------------------------------
12:12:07 AM aomx.exe:3980 CREATE C:\WINDOWS\system32\drivers\SECDRV.SYS
RESULT OTHER
-----------------------------------------------------------
ACCESS DENIED LAPTOP\CHETT


so what now?




"Steve Friedl [MVP/Security]" wrote:

> "chetttyson" <chetttyson@discussions.microsoft.com> wrote in message
> news:E4423F72-90C8-4BA0-8B91-0EC1F722A749@microsoft.com...
> > See the following link to see more information and I'll think about
> > installing more freeware (I've developed a phobia when it comes to
> > installing
> > some freeware because of really bad past problems but we'll see) to get
> > you
> > the answers you need.
>
> Your caution to unknown freeware is very healthy, but this stuff from
> SysInternals is as clean as it gets. It was written by a Microsoft MVP, and
> Microsoft itself requently recommends this tool (and its sibling, regmon):
>
> http://support.microsoft.com/kb/q286198/
> http://support.microsoft.com/kb/q296647/
> http://support.microsoft.com/defaul...kb;en-us;830761
> http://support.microsoft.com/defaul...kb;en-us;198038
>
> You'll need to check permissions on various files and registry keys, but
> without knowing which files or keys are failing, it's hard to describe it
> properly from a distance.
>
> If it were me, I would follow the procedure in the first KB article I
> mentioned and look for ACCDENIED errors: report back and we'll help you dig
> further.
>
> Steve
> --
> Steve Friedl -- Tustin, California USA -- www.unixwiz.net
> Unix Wizard -- Microsoft MVP/Security -- I speak for me only
>
>
>

Look at this post to see what Jimmy S. and I are doing so far.

http://www.microsoft.com/windowsxp/...140e&sloc=en-us



"Steve Friedl [MVP/Security]" wrote:

> "chetttyson" <chetttyson@discussions.microsoft.com> wrote in message
> news:E4423F72-90C8-4BA0-8B91-0EC1F722A749@microsoft.com...
> > See the following link to see more information and I'll think about
> > installing more freeware (I've developed a phobia when it comes to
> > installing
> > some freeware because of really bad past problems but we'll see) to get
> > you
> > the answers you need.
>
> Your caution to unknown freeware is very healthy, but this stuff from
> SysInternals is as clean as it gets. It was written by a Microsoft MVP, and
> Microsoft itself requently recommends this tool (and its sibling, regmon):
>
> http://support.microsoft.com/kb/q286198/
> http://support.microsoft.com/kb/q296647/
> http://support.microsoft.com/defaul...kb;en-us;830761
> http://support.microsoft.com/defaul...kb;en-us;198038
>
> You'll need to check permissions on various files and registry keys, but
> without knowing which files or keys are failing, it's hard to describe it
> properly from a distance.
>
> If it were me, I would follow the procedure in the first KB article I
> mentioned and look for ACCDENIED errors: report back and we'll help you dig
> further.
>
> Steve
> --
> Steve Friedl -- Tustin, California USA -- www.unixwiz.net
> Unix Wizard -- Microsoft MVP/Security -- I speak for me only
>
>
>

"chetttyson" <chetttyson@discussions.microsoft.com> wrote in message
news:2D863390-3460-4BF3-BF6F-B60A5747446B@microsoft.com...
> > TIME PROCESS REQUEST PATH
> ----------------------------------------------------------------------------------------------------------------------------------------
> 12:12:07 AM aomx.exe:3980 CREATE
> C:\WINDOWS\system32\drivers\SECDRV.SYS
> RESULT OTHER
> -----------------------------------------------------------
> ACCESS DENIED LAPTOP\CHETT

Ok, this is a security driver for game copy protection, and these have been
troublesome in the past. In addition to "the usual permissions issues" that
we sometimes run into, they often take many extra steps to be difficult, and
multiple installs of different games that use the same security driver
sometimes step on each other.

So: let's first pretend that it's just a regular permissions issue: use
Explorer and navigate down to look at the properties of the file. If the
file is there, click Properties and then the Security tab. If there is no
security tab, you'll have to enable it: in Explorer, click Tools:Folder
Options, click the View tab, and UNcheck the "Use simple file sharing" box.
Click OK to save it.

Ok, back to Security: there should be a list of users/groups, each of which
when selected will show a list of checkboxes with rights that this ACE
enables. You should see "Administrators" in there with "Full control". If
not, this may be the problem, though in *this* case of the security driver,
it's probably going to take stteps to make it hard for you to muck with it.

NOTE: if you see one of the "users" with a name like
"S-1-5-21-123871897123-123987131-123987198322", then this is old permissions
left over from a previous install that wasn't upgraded directly. We'll have
to take ownership of the object and then eventually delete this ACE. It's
getting tricky if we get this far.

So what if the file is not there? Then maybe the *directory* is not allowing
you permissions: check the Security tab on the enclosing folder.

This is a lot to cover, and I think I'll wait to see how far you get with
the above first. Please let us know.

Steve
--
Steve Friedl -- Tustin, California USA -- www.unixwiz.net
Unix Wizard -- Microsoft MVP/Security -- I speak for me only

Okay I did what you wanted me to try and I did have " full control". It
wasn't the case for all the users though so I changed all of them but the one
that says "RESTRICTED" to full control and then I went to the containing
folder and did the exact same thing and the same over and over till I got to
the C: drive and give full control to all the users there too.
BUT still nothing but the error. I've tried everything you suggested and
what Jimmy S. (MVP) in the Games forum has suggested. Now what? Just so you
know I do really appreciate your help on this issue.
Just so you know I have XP Home not Pro so that security tab thing I can
only access under Safe Mode as the "Administrator". This install of XP home
is a FRESH install and I used a "Disk NUKE" type program that writes random
bits over the whole hard drive 10 times and then writes nothing but zeros on
the drive (and took hours to do too) on the last pass so there is no question
of old files remaining from a previous install of XP. This is like
installing it on a new drive. It is formatted in NTFS by the way.
I've only had this newly installed OS on this computer only 1 WEEK and I've
installed most of my APPS and 5 games. Two of the games were from EA the
other 2 from Microsoft and 1 from Bethesda and guess what the 3 games not
from Microsoft are the only ones working! Can you tell that I'm fustrated at
MS? I like most things from MS (except Windows ME nuttin but problems for
me) and I think XP is the best OS MS has come up with yet for typical
consumers but I've just about had it with their Service Packs. It's gotten
to the point that I'm afraid to install them because of the fact that when
they go wrong they F*%K up my computer to the point that I have to reinstall
the OS on a ultra clean hard drive (which is what I had to do after
installing SP2 a few weeks back). Well I'm done venting (sorry I can't do
that at home because my wife is like "So what. I don't care.").

What's next? I'm out of apealing ideas.




"Steve Friedl [MVP/Security]" wrote:

>
> "chetttyson" <chetttyson@discussions.microsoft.com> wrote in message
> news:2D863390-3460-4BF3-BF6F-B60A5747446B@microsoft.com...
> > > TIME PROCESS REQUEST PATH
> > ----------------------------------------------------------------------------------------------------------------------------------------
> > 12:12:07 AM aomx.exe:3980 CREATE
> > C:\WINDOWS\system32\drivers\SECDRV.SYS
> > RESULT OTHER
> > -----------------------------------------------------------
> > ACCESS DENIED LAPTOP\CHETT
>
> Ok, this is a security driver for game copy protection, and these have been
> troublesome in the past. In addition to "the usual permissions issues" that
> we sometimes run into, they often take many extra steps to be difficult, and
> multiple installs of different games that use the same security driver
> sometimes step on each other.
>
> So: let's first pretend that it's just a regular permissions issue: use
> Explorer and navigate down to look at the properties of the file. If the
> file is there, click Properties and then the Security tab. If there is no
> security tab, you'll have to enable it: in Explorer, click Tools:Folder
> Options, click the View tab, and UNcheck the "Use simple file sharing" box.
> Click OK to save it.
>
> Ok, back to Security: there should be a list of users/groups, each of which
> when selected will show a list of checkboxes with rights that this ACE
> enables. You should see "Administrators" in there with "Full control". If
> not, this may be the problem, though in *this* case of the security driver,
> it's probably going to take stteps to make it hard for you to muck with it.
>
> NOTE: if you see one of the "users" with a name like
> "S-1-5-21-123871897123-123987131-123987198322", then this is old permissions
> left over from a previous install that wasn't upgraded directly. We'll have
> to take ownership of the object and then eventually delete this ACE. It's
> getting tricky if we get this far.
>
> So what if the file is not there? Then maybe the *directory* is not allowing
> you permissions: check the Security tab on the enclosing folder.
>
> This is a lot to cover, and I think I'll wait to see how far you get with
> the above first. Please let us know.
>
> Steve
> --
> Steve Friedl -- Tustin, California USA -- www.unixwiz.net
> Unix Wizard -- Microsoft MVP/Security -- I speak for me only
>
>
>