822925 Cum IE Patch causes problem with XP built in admin account

[HiMan]

Hello group,

Installing the 822925 (newest cumulative IE6 Patch) causes some weird
behavior on my XP Pro system installed on a FAT partition.

It causes the built in (renamed) Admin account to be unusable. It seems to
put all drives in restricted zone, thus each try to run anything from a
shortcut or a program folder causes the MSG "Windows cannot access the
specified device, path or file. You may not have the appropriate permission
to access the item."

I can run explorer from the run command and see in the status bar, that My
Computer shows up as being in the My Computer zone, but all drive letters
(including floppy) show up as being in Restricted sites zone.

Running MMC and opening services gives an error MSG for expanded view AKA
"will not be displayed properly, because ActiveX controls are not allowed to
run."

Services run, but no programs (e.g. Zonealarm's True Vector loads, but ZA
GUI does not run, as it would need to be started from All Users Autostart.)
Very much looks as if all and everything is in Restricted zone.

I have seen at least two others posting with this problem.



They have not gotten any replies though so far. So I try as well ;-).

Another existing admin account can be used just fine, as well as a normal
user account.

Trying to troubleshoot this problem, I imported the Current User IE
zone settings from the working admin account to the not working one before
installing the patch. Rebooted several times between several tries of
installing the patch to a repeatedly restored and changed original. No Luck.

Event log is no help (can't see any possibly related errors, as far as I can
tell).

Tried install with a re-downloaded patch --> makes no difference.
Tried online install from Windows Update --> makes no difference.

If the weird behavior was occurring in another admin account, I would just
create a new one (a new one created with the patch already installed works
just fine). But as it's causing the built in admin account to work no more
...?

Further testing showed, that my problem seems to be caused by the new
URLMON.DLL. If I replace just this dll with the old one, the built in admin
account is working again.

So at the moment it looks, as if I can choose between a functional built in
admin account or using the updated urlmon.dll.

I would appreciate any pointers, that could help me troubleshoot. Thanks!

 

[andy]

Hi there,

I did post about this problem a few days ago.

I have now solved the problem on my XP Pro (SP1) system
(NTFS partition). I'm still uncertain why it worked but
this is what I did.

Downloaded the patch to my hard drive. Re-booted the PC
in Safe Mode and then simply installed the security patch
Q822925. Re-booted in normal mode loading all services
and drivers and found it had successfully installed
without giving any of the problems mentioned in several
posts on this site including my own original post!

Reason? Not quite sure why it has worked this way but it
may have been a certain running process related to
software installed on all of the machines on our
particular PC's which was interfering with the correct
installation of the patch ??

Anyway it works and has given me no strange behaviour or
errors since I hope this helps.

Regards,

Andy

 

[HiMan]

Hi there,

I did post about this problem a few days ago.

I have now solved the problem on my XP Pro (SP1) system
(NTFS partition). I'm still uncertain why it worked but
this is what I did.

Downloaded the patch to my hard drive. Re-booted the PC
in Safe Mode and then simply installed the security patch
Q822925. Re-booted in normal mode loading all services
and drivers and found it had successfully installed
without giving any of the problems mentioned in several
posts on this site including my own original post!

Reason? Not quite sure why it has worked this way but it
may have been a certain running process related to
software installed on all of the machines on our
particular PC's which was interfering with the correct
installation of the patch ??

Anyway it works and has given me no strange behavior or
errors since I hope this helps.

Hi Andy,

Hmm..???

Took me a while, because I wanted to be sure, that the behavior I see is
consistent. I did 4 test installs all in Safe Mode. First using the current
system partition after simply uninstalling Q822925 from Add/Remove Programs,
reboot. Second after uninstalling Q822925 and after installing the Cum Patch
before (Q818529 - no problem with urlmon.dll version 6.0.2800.1188). Third
after yet another uninstall and this time putting q822925.exe in the root on
c: and execute from the run command. Forth after restoring system to state
before any tries to install Q822925.

I did confirm, that the dll versions had been changed to the correct
previous versions by the uninstall routine, before I proceeded.

In each case I observed, that installing from Safe Mode changed _only_
mshtml.dll and _not shdocvw.dll, shlwapi.dll and urlmon.dll. Thus on first
glance I thought "He great, problem solved" until I checked the involved dll
versions.

Result of installing from Safe Mode in each case: Update shows up as
installed in Add/Remove Programs and in IE "About", but only mshtml.dll is
updated to the patch version.

 

[andy]

Thanks for the update HiMan,

I'll have to have a look at these files on my machine to
see if the same has occurred! I wonder what Microsoft
would say about this? Do they know there may be a problem??

Thanks again HiMan for the info and feedback.

Regards,
Andy

 

[HiMan]

Thanks for the update HiMan,

I'll have to have a look at these files on my machine to
see if the same has occurred! I wonder what Microsoft
would say about this? Do they know there may be a problem??

Hi Andy,

the versions the patch should give you are listed here
http://support.microsoft.com/default.aspx?scid=kb;en-us;822925
They differ depending on your version of IE and are installed in the
%Windir%\System32 folder.

I use Internet Explorer 6 SP1 (32-Bit) for Windows XP SP1.

Compared to the number of people probably installing this patch, not many
seem to post having a problem. And it has me stumped why it only messes up
my built in admin account, whereas another admin account and a normal user
account is not affected.

I'm sure curious, if you got the "right" files!

 

[HiMan]

Installing the 822925 (newest cumulative IE6 Patch) causes some weird
behavior on my XP Pro system installed on a FAT partition.

It causes the built in (renamed) Admin account to be unusable. It seems to
put all drives in restricted zone, thus each try to run anything from a
shortcut or a program folder causes the MSG "Windows cannot access the
specified device, path or file. You may not have the appropriate
permission to access the item."

Another existing admin account can be used just fine, as well as a normal
user account.

Hello group,

thanks Dwayne

and (e-mail address removed).

You were after all right and I was wrong thinking it did not apply to my
problem, because from 3 user accounts with the same configuration only one
got messed up. I finally "bit the bullet" and went in and changed the
location of Cookies, History and Temporary Internet Files to the default
locations for the built in Admin account, before I installed Q822925 once
more.

Result: After applying the patch successfully (I did a version check for all
four DLLs) the built in admin account worked normally. I did leave the
configuration for the second admin account and the normal user account
unchanged on purpose, to see, what would happen. And now those two had
problems. Not as drastic as the built in admin account before. The accounts
were usable insofar as explorer and desktop showed up as working normally.
But I saw right away, that programs that are configured to run from All
Users Autostart did not start anymore now.

I did not have the patience to explore this further, but changed the
location of Cookies, History and Temporary Internet Files to default as
well.

Now all three accounts seem to work normally. I must say though, that I do
not like it very much to be forced to put these folders in the default
location for version 6.0.2800.1226 of urlmon.dll to cause no problems :-(

Thanks everybody for your input!

I'm posting this to all four groups, where I asked, in case this might help
somebody. Follow-up is set to microsoft.public.windowsupdate.

 

[andy]

Hello HiMan,

OK, I've installed the patch and then replaced the
URLMON.DLL file with the older version and everything
appears normal without errors.

I'm still left scratching my head though. A friend has
just performed a clean install of XP and installed the
security patch without any bother at all.

I really am lost as to why this is happening with a few
systems ?!

Thanks for the feedback though

Regards,
Andy

-----Original Message-----


Hi Andy,

thanks for checking and posting back!

Mmmmm.........curious. On my system it has updated both
Mshtml.dll and Shdocvw.dll but not the other two,
Shlwapi.dll and Urlmon.dll. This gets more baffling!

It does indeed. And I see in your headers of this message "Microsoft MimeOLE
V5.50.4910.0300". If you're not running IE6 SP1 even more than 4 DLLs should
be updated by Q822925?

The Registry also has the correct entry as given by
Microsoft.

I'm very surprised as well, that an install from Safe mode would let the
user think he installed the patch successfully on first glance.

I'll try a few things and get back if successful but I'm
no real expert !!

Could you try out, if your problem disappears if you leave the patch
installed and just replace the new urlmon.dll version 6.00.2800.1226 with
the old urlmon.dll with version 6.0.2800.1188. [versions are on my machine
with IE6 SP1]? My guess is, that on your machine, like on mine, urlmon.dll
causes the problem (not updated, when installing from Safe Mode).

Please see also my reply to Dwayne. Thanks!

--
Best Regards
HiMan


.

 

[HiMan]

Hi Any,

OK, I've installed the patch and then replaced the
URLMON.DLL file with the older version and everything
appears normal without errors.

Thanks for testing and letting me know.

I'm still left scratching my head though. A friend has
just performed a clean install of XP and installed the
security patch without any bother at all.

I really am lost as to why this is happening with a few
systems ?!

did you see my post

Like you, I don't quite understand it. But it very much looks like the
location of all or at least one of the folders Cookies, History and
Temporary Internet Files makes a difference.

As soon as I have time, I'll do some testing with moving those folders back
to "my" location _after_ installing the patch. Bit "fed" up with it though
at the moment, to be honest.

You might want to check the systems, that have problems, for other than
default locations for theses folders as well.