Access Denied when running MsConfig w/ admin rights

[Guest]

I'm trying to run PC in diagnostic mode on Standalone PC with XPPro-sp2, and
I am getting "An Access denied error occurred while attempting to change a
service. You may need to log on to an Administrator account to make the
specified changes." Now, I've made no changes recently to any programs or
hardware, and I have administrative permissions so I don't understand what is
going on. Safe Mode (all three safe options) fail, or hang at (Agp440.sys
line). Theres no evidence of a viral agents at work or scumware. I had a
similar "legit" problem with msconfig due to a boot volume info folder virus
about a month ago, and I wound up having to reinstall XP SP2 from scratch. Is
there a way to verify, or fix this problem short of having to attempt an "In
place repair" ??

My thinking is that settings in the registry have somehow become corrupted.

 

[Wesley Vogel]

Use Services.msc, not msconfig.

[[The reason is because with msconfig and Hardware Profiles, you can disable
services that may be vital to boot your system. With the management console
(services.msc) you cannot. Also, msconfig, while unchecking the box, is
disabling the service.

The "Disable All" button also scares me. It should not even be there as no
reason exists to justify disabling "everything."]]
Why can't I use msconfig to change my services?
http://www.blackviper.com/AskBV/XP25.htm

--
Hope this helps. Let us know.

Wes
MS-MVP Windows Shell/User

In

 

[Guest]

Thanks Wes for your reply,

First let me say Ignorance is no excuse, because I'm no stranger to the work
of Mr BV. A friend of mine insisted I install his !SafeproAllStart.reg when
I first deployed Windows XP w/SP-1 on my machine. I thought I'd share what I
discovered with everyone. After some further research, (Ad/Scumare, viral
scans,hijackthis) I did find the source to the problem I was having within
the MMC snap-in. Although I saw certificates for myself and the administrator
account in "personal certificates" on closer inspection I discovered they
somehow became invalidated in the "trusted Persons" store, and their private
keys were erased. Although I kept these public/private keys for both accounts
on a floppy disk, restoring these to the proper store(s) did not clear up my
"Access denied" issue I was having with Msconfig. It was so bad I couldn't
even boot windows in "safe mode"

Because I couldn't afford to dik around with this anymore - I inserted a
Slipstreamed SP-2 CD I made a couple of months ago, and used the Dynamic
Upgrade feature under Install Windows XP to repair the damage. Safe mode
works normally again for both admin and my accounts, and I didn't lose any of
my settings. (Pshawwww!)

One thing I did notice in the Certificates Snap in though, before repairing
XP - were the appearance of Boxes below the entry for "Certificate Enrollment
Requests" the first two entries have a [+] and a box, and the last has [+]
and four boxes and the letter k at the end. What are these? I know if you
click on the [+] they open to a empty item. Reason being post repair,
they're still present in certificates and are still empty. Is there a way to
find out if they are linked to any processes before removing them?

Use Services.msc, not msconfig.

[[The reason is because with msconfig and Hardware Profiles, you can disable
services that may be vital to boot your system. With the management console
(services.msc) you cannot. Also, msconfig, while unchecking the box, is
disabling the service.

The "Disable All" button also scares me. It should not even be there as no
reason exists to justify disabling "everything."]]
Why can't I use msconfig to change my services?
http://www.blackviper.com/AskBV/XP25.htm

--
Hope this helps. Let us know.

Wes
MS-MVP Windows Shell/User

In

I'm trying to run PC in diagnostic mode on Standalone PC with
XPPro-sp2, and I am getting "An Access denied error occurred while
attempting to change a service. You may need to log on to an
Administrator account to make the specified changes." Now, I've made
no changes recently to any programs or hardware, and I have
administrative permissions so I don't understand what is going on.
Safe Mode (all three safe options) fail, or hang at (Agp440.sys
line). Theres no evidence of a viral agents at work or scumware. I
had a similar "legit" problem with msconfig due to a boot volume info
folder virus about a month ago, and I wound up having to reinstall XP
SP2 from scratch. Is there a way to verify, or fix this problem short
of having to attempt an "In place repair" ??

My thinking is that settings in the registry have somehow become
corrupted.

 

[Wesley Vogel]

I am not 100% sure and I can't find where I read this, but the

folder
folder
k folder

are called containers, as are all the Folders. These are empty containers
for using to customize Certificates or any other snap-in. I don't know much
more about this. ;-(

--
Hope this helps. Let us know.

Wes
MS-MVP Windows Shell/User

In

Thanks Wes for your reply,

First let me say Ignorance is no excuse, because I'm no stranger to
the work of Mr BV. A friend of mine insisted I install his
!SafeproAllStart.reg when I first deployed Windows XP w/SP-1 on my
machine. I thought I'd share what I discovered with everyone. After
some further research, (Ad/Scumare, viral scans,hijackthis) I did
find the source to the problem I was having within the MMC snap-in.
Although I saw certificates for myself and the administrator account
in "personal certificates" on closer inspection I discovered they
somehow became invalidated in the "trusted Persons" store, and their
private keys were erased. Although I kept these public/private keys
for both accounts on a floppy disk, restoring these to the proper
store(s) did not clear up my "Access denied" issue I was having with
Msconfig. It was so bad I couldn't even boot windows in "safe mode"

Because I couldn't afford to dik around with this anymore - I
inserted a Slipstreamed SP-2 CD I made a couple of months ago, and
used the Dynamic Upgrade feature under Install Windows XP to repair
the damage. Safe mode works normally again for both admin and my
accounts, and I didn't lose any of my settings. (Pshawwww!)

One thing I did notice in the Certificates Snap in though, before
repairing XP - were the appearance of Boxes below the entry for
"Certificate Enrollment Requests" the first two entries have a [+]
and a box, and the last has [+] and four boxes and the letter k at
the end. What are these? I know if you click on the [+] they open to
a empty item. Reason being post repair, they're still present in
certificates and are still empty. Is there a way to find out if they
are linked to any processes before removing them?

Use Services.msc, not msconfig.

[[The reason is because with msconfig and Hardware Profiles, you can
disable services that may be vital to boot your system. With the
management console (services.msc) you cannot. Also, msconfig, while
unchecking the box, is disabling the service.

The "Disable All" button also scares me. It should not even be there
as no reason exists to justify disabling "everything."]]
Why can't I use msconfig to change my services?
http://www.blackviper.com/AskBV/XP25.htm

--
Hope this helps. Let us know.

Wes
MS-MVP Windows Shell/User

In

I'm trying to run PC in diagnostic mode on Standalone PC with
XPPro-sp2, and I am getting "An Access denied error occurred while
attempting to change a service. You may need to log on to an
Administrator account to make the specified changes." Now, I've
made no changes recently to any programs or hardware, and I have
administrative permissions so I don't understand what is going on.
Safe Mode (all three safe options) fail, or hang at (Agp440.sys
line). Theres no evidence of a viral agents at work or scumware. I
had a similar "legit" problem with msconfig due to a boot volume
info folder virus about a month ago, and I wound up having to
reinstall XP SP2 from scratch. Is there a way to verify, or fix
this problem short of having to attempt an "In place repair" ??

My thinking is that settings in the registry have somehow become
corrupted.

 

[Guest]

Thanks again for your help wes, I did manage to find out from a friend those
are special containers and not to F*** with them. He said what these
containers are for are when you're upgrading the Trusted Root Authority
certificate shares and or are adding new use certificates for software
packages, or even when performing MS upgrades. I'll definitely leave them
alone.

I am not 100% sure and I can't find where I read this, but the

 folder
 folder
ÂÂÂÂÂk folder

are called containers, as are all the Folders. These are empty containers
for using to customize Certificates or any other snap-in. I don't know much
more about this. ;-(

--
Hope this helps. Let us know.

Wes
MS-MVP Windows Shell/User

In

Thanks Wes for your reply,

First let me say Ignorance is no excuse, because I'm no stranger to
the work of Mr BV. A friend of mine insisted I install his
!SafeproAllStart.reg when I first deployed Windows XP w/SP-1 on my
machine. I thought I'd share what I discovered with everyone. After
some further research, (Ad/Scumare, viral scans,hijackthis) I did
find the source to the problem I was having within the MMC snap-in.
Although I saw certificates for myself and the administrator account
in "personal certificates" on closer inspection I discovered they
somehow became invalidated in the "trusted Persons" store, and their
private keys were erased. Although I kept these public/private keys
for both accounts on a floppy disk, restoring these to the proper
store(s) did not clear up my "Access denied" issue I was having with
Msconfig. It was so bad I couldn't even boot windows in "safe mode"

Because I couldn't afford to dik around with this anymore - I
inserted a Slipstreamed SP-2 CD I made a couple of months ago, and
used the Dynamic Upgrade feature under Install Windows XP to repair
the damage. Safe mode works normally again for both admin and my
accounts, and I didn't lose any of my settings. (Pshawwww!)

One thing I did notice in the Certificates Snap in though, before
repairing XP - were the appearance of Boxes below the entry for
"Certificate Enrollment Requests" the first two entries have a [+]
and a box, and the last has [+] and four boxes and the letter k at
the end. What are these? I know if you click on the [+] they open to
a empty item. Reason being post repair, they're still present in
certificates and are still empty. Is there a way to find out if they
are linked to any processes before removing them?

Use Services.msc, not msconfig.

[[The reason is because with msconfig and Hardware Profiles, you can
disable services that may be vital to boot your system. With the
management console (services.msc) you cannot. Also, msconfig, while
unchecking the box, is disabling the service.

The "Disable All" button also scares me. It should not even be there
as no reason exists to justify disabling "everything."]]
Why can't I use msconfig to change my services?
http://www.blackviper.com/AskBV/XP25.htm

--
Hope this helps. Let us know.

Wes
MS-MVP Windows Shell/User

In CjofVP <[email protected]> hunted and pecked:
I'm trying to run PC in diagnostic mode on Standalone PC with
XPPro-sp2, and I am getting "An Access denied error occurred while
attempting to change a service. You may need to log on to an
Administrator account to make the specified changes." Now, I've
made no changes recently to any programs or hardware, and I have
administrative permissions so I don't understand what is going on.
Safe Mode (all three safe options) fail, or hang at (Agp440.sys
line). Theres no evidence of a viral agents at work or scumware. I
had a similar "legit" problem with msconfig due to a boot volume
info folder virus about a month ago, and I wound up having to
reinstall XP SP2 from scratch. Is there a way to verify, or fix
this problem short of having to attempt an "In place repair" ??

My thinking is that settings in the registry have somehow become
corrupted.

 

[Wesley Vogel]

Thanks for the info.

--
Hope this helps. Let us know.

Wes
MS-MVP Windows Shell/User

In

Thanks again for your help wes, I did manage to find out from a
friend those are special containers and not to F*** with them. He
said what these containers are for are when you're upgrading the
Trusted Root Authority certificate shares and or are adding new use
certificates for software packages, or even when performing MS
upgrades. I'll definitely leave them alone.

I am not 100% sure and I can't find where I read this, but the

 folder
 folder
ÂÂÂÂÂk folder

are called containers, as are all the Folders. These are empty
containers for using to customize Certificates or any other snap-in.
I don't know much more about this. ;-(

--
Hope this helps. Let us know.

Wes
MS-MVP Windows Shell/User

In

Thanks Wes for your reply,

First let me say Ignorance is no excuse, because I'm no stranger to
the work of Mr BV. A friend of mine insisted I install his
!SafeproAllStart.reg when I first deployed Windows XP w/SP-1 on my
machine. I thought I'd share what I discovered with everyone. After
some further research, (Ad/Scumare, viral scans,hijackthis) I did
find the source to the problem I was having within the MMC snap-in.
Although I saw certificates for myself and the administrator account
in "personal certificates" on closer inspection I discovered they
somehow became invalidated in the "trusted Persons" store, and their
private keys were erased. Although I kept these public/private keys
for both accounts on a floppy disk, restoring these to the proper
store(s) did not clear up my "Access denied" issue I was having with
Msconfig. It was so bad I couldn't even boot windows in "safe mode"

Because I couldn't afford to dik around with this anymore - I
inserted a Slipstreamed SP-2 CD I made a couple of months ago, and
used the Dynamic Upgrade feature under Install Windows XP to repair
the damage. Safe mode works normally again for both admin and my
accounts, and I didn't lose any of my settings. (Pshawwww!)

One thing I did notice in the Certificates Snap in though, before
repairing XP - were the appearance of Boxes below the entry for
"Certificate Enrollment Requests" the first two entries have a [+]
and a box, and the last has [+] and four boxes and the letter k at
the end. What are these? I know if you click on the [+] they open
to a empty item. Reason being post repair, they're still present in
certificates and are still empty. Is there a way to find out if
they are linked to any processes before removing them?

:

Use Services.msc, not msconfig.

[[The reason is because with msconfig and Hardware Profiles, you
can disable services that may be vital to boot your system. With
the management console (services.msc) you cannot. Also, msconfig,
while unchecking the box, is disabling the service.

The "Disable All" button also scares me. It should not even be
there as no reason exists to justify disabling "everything."]]
Why can't I use msconfig to change my services?
http://www.blackviper.com/AskBV/XP25.htm

--
Hope this helps. Let us know.

Wes
MS-MVP Windows Shell/User

In CjofVP <[email protected]> hunted and pecked:
I'm trying to run PC in diagnostic mode on Standalone PC with
XPPro-sp2, and I am getting "An Access denied error occurred while
attempting to change a service. You may need to log on to an
Administrator account to make the specified changes." Now, I've
made no changes recently to any programs or hardware, and I have
administrative permissions so I don't understand what is going on.
Safe Mode (all three safe options) fail, or hang at (Agp440.sys
line). Theres no evidence of a viral agents at work or scumware.
I had a similar "legit" problem with msconfig due to a boot volume
info folder virus about a month ago, and I wound up having to
reinstall XP SP2 from scratch. Is there a way to verify, or fix
this problem short of having to attempt an "In place repair" ??

My thinking is that settings in the registry have somehow become
corrupted.