Deleted Default User Desktop.ini files and more

G

Guest

I deleted the desktop.ini files for the Default User, Local Service and
Network Service.

Now I'm still getting 'UserEnv' warnings and errors:

Event Type: Information
Event Source: UPHClean
Event Category: None
Event ID: 1401
Date: 07/09/2006
Time: 01:59:39 AM
User: HOME-ACP3UDDS6A\Administrator
Computer: HOME-ACP3UDDS6A
Description:
The following handles in user profile hive HOME-ACP3UDDS6A\Administrator
(S-1-5-21-57989841-688789844-842925246-500) have been remapped because they
were preventing the profile from unloading successfully:

svchost.exe (796)
HKCU (0x348)
0x77e3b4b7 ADVAPI32!<no symbol>
0x77e072b1 ADVAPI32!IsTextUnicode+0x9cb4
0x77dd6b20 ADVAPI32!RegOpenKeyExW+0xa8
0x77dd773e ADVAPI32!RegOpenKeyW+0x2f
0x77ddb2dc ADVAPI32!SaferComputeTokenFromLevel+0x587
0x77ddb296 ADVAPI32!SaferComputeTokenFromLevel+0x541
0x77dd9e9e ADVAPI32!IdentifyCodeAuthzLevelW+0xd9
0x7c819653 kernel32!BasepCheckWinSaferRestrictions+0x17e
0x7c818d2c kernel32!GetNlsSectionName+0x10cb
0x77df7838 ADVAPI32!CreateProcessAsUserW+0xc3
0x76a93acd rpcss!<no symbol>
0x76a93849 rpcss!<no symbol>
0x77e79dc9 RPCRT4!CheckVerificationTrailer+0x75
0x77ef321a RPCRT4!NdrStubCall2+0x215
0x77ef36ee RPCRT4!NdrServerCall2+0x19
0x77e7988c RPCRT4!NdrGetTypeFlags+0x1c9
0x77e797f1 RPCRT4!NdrGetTypeFlags+0x12e
0x77e7971d RPCRT4!NdrGetTypeFlags+0x5a
0x77e7bd0d RPCRT4!NdrConformantArrayFree+0x42e
0x77e7bb6a RPCRT4!NdrConformantArrayFree+0x28b
0x77e76784 RPCRT4!I_RpcBCacheFree+0x14c
0x77e76c22 RPCRT4!I_RpcBCacheFree+0x5ea
0x77e76a3b RPCRT4!I_RpcBCacheFree+0x403
0x77e76c0a RPCRT4!I_RpcBCacheFree+0x5d2
0x7c80b50b kernel32!GetModuleFileNameA+0x1b4

I have UPH User Profile Hive Cleanup running and reinstalled SP2-logged on
SafeMode, but just realized that I deleted(I'm not sure when) all of the
desktop.ini that were in the folders for Default User, Local Service and
Network Service .

How do I 'restore' those?
I'm running XP Pro with Office XP. There are two user accounts in addition
to the Admin and Guest account on a standalone pc.

Also, I know I have some of the Services account settings wrong--The logon
as tab. I changed some and then tried to return to the original settings, but
not sure how much damage was done during that ordeal.

Would a repair install be the best solution?
 
L

Lawrence J. Gardner

You problem is probably due to messing around with the Services Logon as
settings and such.

Check to see if you have the original delivered registry ... it is usually
under C:\Windows\system32\systemprofile ( or something like that). The
folder is 'systemprofile'.

In that folder you should see your original registry files. You could load
the SOFTWARE file u in regedit (See Loading Hive files), check each
questionable Service in that hive for the actual Logon As user.

Or, go to another system similar to yours, and export the list:

1. Control Panel | Administrative Tools | Services
2. Click on Action | Export List..., save it to file
3. Print the file and verify against your current settings.

In most cases, deleting the 'desktop.ini' file has no impact on MOST
folders. Usually, it contains Icon information, Resource Name.

So far, the only places I have found where desktop.ini has additional
information is naming .lnk files in Accessories folder, and in some cases
the My Documents folder.
 

Ask a Question

Want to reply to this thread or ask your own question?

You'll need to choose a username for the site, which only take a couple of moments. After that, you can post your question and our members will help you out.

Ask a Question

Top