System Protection

[Lee]

For some reason I cannot now access system protection, if I try, I get an
error message "access denied. (0x80070005)

any ideas on how to fix this?

 

[Mark L. Ferguson]

HOW TO Reset Security Settings Back to the Defaults:
http://support.microsoft.com/default.aspx?scid=kb;en-us;313222
--
Was this helpful? Then click the Ratings button. Voting helps the web
interface.
http://www.microsoft.com/wn3/locales/help/help_en-us.htm#RateAPostAsAnswer
Mark L. Ferguson
..

 

[Lee]

HOW TO Reset Security Settings Back to the Defaults:
http://support.microsoft.com/default.aspx?scid=kb;en-us;313222
--

Hello Mark,

This failed and didn't reolve the problem. I have included the error log in
case it makes sence to you

-------------------------------------------
06 April 2008 19:28:16
----Configuration engine was initialized successfully.----

----Reading Configuration Template info...


----Configure User Rights...
SeImpersonatePrivilege must be assigned to administrators. This setting is
adjusted.
SeImpersonatePrivilege must be assigned to SERVICE. This setting is
adjusted.
Configure S-1-5-19.
Configure S-1-5-20.
Configure S-1-5-32-544.
Configure S-1-5-32-551.
Configure S-1-5-32-559.
Configure S-1-5-32-545.
Configure S-1-1-0.
Configure S-1-5-6.
Configure S-1-5-21-1436063037-2891145818-3776280081-501.
Configure S-1-5-32-555.

User Rights configuration was completed successfully.


----Configure Group Membership...
Configure Users.

Group Membership configuration was completed successfully.


----Configure Registry Keys...
Configure users\.default.
Configure machine\software.
Warning 1336: The access control list (ACL) structure is invalid.
Error setting security on machine\software\Licenses.

Configuration of Registry Keys was completed with one or more errors.


----Configure File Security...
Configure c:\program files\common files\speechengines\microsoft\tts.
Warning 2: The system cannot find the file specified.
Error setting security on c:\program files\common
files\speechengines\microsoft\tts.
Configure c:\programdata\microsoft\windows\drm.
Configure c:\programdata\microsoft\windows\drm\cache.
Configure c:\windows\repair\default.
Warning 3: The system cannot find the path specified.
Error setting security on c:\windows\repair\default.
Configure c:\windows\repair\ntuser.dat.
Warning 3: The system cannot find the path specified.
Error setting security on c:\windows\repair\ntuser.dat.
Configure c:\windows\repair\sam.
Warning 3: The system cannot find the path specified.
Error setting security on c:\windows\repair\sam.
Configure c:\windows\repair\security.
Warning 3: The system cannot find the path specified.
Error setting security on c:\windows\repair\security.
Configure c:\windows\repair\software.
Warning 3: The system cannot find the path specified.
Error setting security on c:\windows\repair\software.
Configure c:\windows\repair\system.
Warning 3: The system cannot find the path specified.
Error setting security on c:\windows\repair\system.
Configure c:\windows\system32\wbem\mof.
Configure c:\windows\system32\windows media.
Warning 2: The system cannot find the file specified.
Error setting security on c:\windows\system32\windows media.

File Security configuration was completed successfully.


----Configure General Service Settings...
Configure sysmonlog.
Error 1060: The specified service does not exist as an installed service.
Error opening sysmonlog.
Configure SamSs.
Configure ntmssvc.
Error 1060: The specified service does not exist as an installed service.
Error opening ntmssvc.
Configure netddedsdm.
Error 1060: The specified service does not exist as an installed service.
Error opening netddedsdm.
Configure netdde.
Error 1060: The specified service does not exist as an installed service.
Error opening netdde.
Configure dmserver.
Error 1060: The specified service does not exist as an installed service.
Error opening dmserver.
Configure clipsrv.
Error 1060: The specified service does not exist as an installed service.
Error opening clipsrv.
Configure Browser.

General Service configuration was completed successfully.


----Configure available attachment engines...

Configuration of attachment engines was completed successfully.


----Configure Security Policy...
Configure password information.
Administrator account is disabled.
Guest account is disabled.

System Access configuration was completed successfully.
LSA anonymous lookup names setting : existing SD =
DD;;0x800;;;AN)(A;;0xf1fff;;;BA)(A;;0x20801;;;WD)(A;;0x801;;;AN)(A;;0x1000;;;LS)(A;;0x1000;;;NS)(A;;0x1000;;;S-1-5-17).
Configure LSA anonymous lookup setting.
Configure machine\software\microsoft\windows
nt\currentversion\setup\recoveryconsole\securitylevel.
Configure machine\software\microsoft\windows
nt\currentversion\setup\recoveryconsole\setcommand.
Configure machine\software\microsoft\windows
nt\currentversion\winlogon\cachedlogonscount.
Configure machine\software\microsoft\windows
nt\currentversion\winlogon\forceunlocklogon.
Configure machine\software\microsoft\windows
nt\currentversion\winlogon\passwordexpirywarning.
Configure machine\software\microsoft\windows
nt\currentversion\winlogon\scremoveoption.
Configure
machine\software\microsoft\windows\currentversion\policies\system\dontdisplaylastusername.
Configure
machine\software\microsoft\windows\currentversion\policies\system\legalnoticecaption.
Configure
machine\software\microsoft\windows\currentversion\policies\system\legalnoticetext.
Configure
machine\software\microsoft\windows\currentversion\policies\system\scforceoption.
Configure
machine\software\microsoft\windows\currentversion\policies\system\shutdownwithoutlogon.
Configure
machine\software\microsoft\windows\currentversion\policies\system\undockwithoutlogon.
Configure
machine\software\policies\microsoft\windows\safer\codeidentifiers\authenticodeenabled.
Configure machine\system\currentcontrolset\control\lsa\auditbaseobjects.
Configure machine\system\currentcontrolset\control\lsa\crashonauditfail.
Configure machine\system\currentcontrolset\control\lsa\disabledomaincreds.
Configure
machine\system\currentcontrolset\control\lsa\everyoneincludesanonymous.
Configure
machine\system\currentcontrolset\control\lsa\fipsalgorithmpolicy\enabled.
Configure machine\system\currentcontrolset\control\lsa\forceguest.
Configure
machine\system\currentcontrolset\control\lsa\fullprivilegeauditing.
Configure
machine\system\currentcontrolset\control\lsa\limitblankpassworduse.
Configure
machine\system\currentcontrolset\control\lsa\lmcompatibilitylevel.
Configure
machine\system\currentcontrolset\control\lsa\msv1_0\ntlmminclientsec.
Configure
machine\system\currentcontrolset\control\lsa\msv1_0\ntlmminserversec.
Configure machine\system\currentcontrolset\control\lsa\nolmhash.
Configure machine\system\currentcontrolset\control\lsa\restrictanonymous.
Configure
machine\system\currentcontrolset\control\lsa\restrictanonymoussam.
Configure machine\system\currentcontrolset\control\print\providers\lanman
print services\servers\addprinterdrivers.
Configure machine\system\currentcontrolset\control\session
manager\kernel\obcaseinsensitive.
Configure machine\system\currentcontrolset\control\session manager\memory
management\clearpagefileatshutdown.
Configure machine\system\currentcontrolset\control\session
manager\protectionmode.
Configure
machine\system\currentcontrolset\services\lanmanserver\parameters\autodisconnect.
Configure
machine\system\currentcontrolset\services\lanmanserver\parameters\enableforcedlogoff.
Configure
machine\system\currentcontrolset\services\lanmanserver\parameters\enablesecuritysignature.
Configure
machine\system\currentcontrolset\services\lanmanserver\parameters\nullsessionpipes.
Configure
machine\system\currentcontrolset\services\lanmanserver\parameters\requiresecuritysignature.
Configure
machine\system\currentcontrolset\services\lanmanserver\parameters\restrictnullsessaccess.
Configure
machine\system\currentcontrolset\services\lanmanworkstation\parameters\enableplaintextpassword.
Configure
machine\system\currentcontrolset\services\lanmanworkstation\parameters\enablesecuritysignature.
Configure
machine\system\currentcontrolset\services\lanmanworkstation\parameters\requiresecuritysignature.
Configure
machine\system\currentcontrolset\services\ldap\ldapclientintegrity.
Configure
machine\system\currentcontrolset\services\netlogon\parameters\disablepasswordchange.
Configure
machine\system\currentcontrolset\services\netlogon\parameters\maximumpasswordage.
Configure
machine\system\currentcontrolset\services\netlogon\parameters\requiresignorseal.
Configure
machine\system\currentcontrolset\services\netlogon\parameters\requirestrongkey.
Configure
machine\system\currentcontrolset\services\netlogon\parameters\sealsecurechannel.
Configure
machine\system\currentcontrolset\services\netlogon\parameters\signsecurechannel.

Configuration of Registry Values was completed successfully.
Configure log settings.

Audit/Log configuration was completed successfully.


----Configure available attachment engines...

Configuration of attachment engines was completed successfully.


----Un-initialize configuration engine...

 

[Mark L. Ferguson]

You have registry corruption. System Restore is a good first try. I would
also try this:
Aaron Stebner's WebLog Solving setup errors by using the SubInACL tool to
repair file and registry permissions:
http://blogs.msdn.com/astebner/archive/2006/09/04/739820.aspx

--
Was this helpful? Then click the Ratings button. Voting helps the web
interface.
http://www.microsoft.com/wn3/locales/help/help_en-us.htm#RateAPostAsAnswer
Mark L. Ferguson
..