FBRESEAL changes Start Menu/Taskbar options

[Guest]

Hello
I'm using SP2 and EWF-RAM-REG. As recommended by Gordon Smith in an earlier
thread titled "FBRESEAL AND EWF RAM" I do the following:

1. Configure EWF to start disabled.
2. Set the phase to 0 (ie: manual reseal).
3. Allow FBA to run.
4. Make any mods.
5. ewfmgr c: -enable
6. fbreseal [–keepdomain –keepnet –keepuser –keepmounted]

Before resealing, I have the clock displayed in the System Tray and Control
Panel is expands when clicked. After resealing and rebooting, the clock is
gone and Control Panel no longer expands.

As an experiment, I've tried doing the first 5 steps, then rebooting. Clock
still shows and Control Panel still expands. Then:

6. ewfmgr c: -commit
7. fbreseal [–keepdomain –keepnet –keepuser –keepmounted]

Same result - clock is gone and Control Panel no longer expands.

So the culprit appears to be the fbreseal.
Any ideas/suggestions are appreciated.
Jack

 

[Mark K Vallevand]

I think you are getting a new administrator account. A similar thing
happens to me. I have a startup batch file that runs whenever anyone logs
on. It checks to see if the user configuration is correct and fixes things
up if its not. If you root around in the registry or in the "Documents and
Settings", I think you can see the old administrator account.
--
Regards.
Mark K Vallevand (e-mail address removed)

Beer is living proof that God loves us and wants us to be happy.
- Benjamin Franklin


THIS COMMUNICATION MAY CONTAIN CONFIDENTIAL AND/OR OTHERWISE PROPRIETARY
MATERIAL and is thus for use only by the intended recipient. If you received
this in error, please contact the sender and delete the e-mail and its
attachments from all computers.

 

[Guest]

Hi Mark

Yes, one of the first things I do after FBA and before resealing is rename
the Administrator account and its password. And you're right, I do see
remnants of the original account name under Documents and Settings. I'm
guessing that there are remnants in the Registry too although I haven't
verified that yet.

So you think that this is confusing FBRESEAL ? I guess I could verify by
going through a complete build cycle without renaming the Administrator
account, then see if the Clock and Expand Control Panel weirdness is gone.
More to follow ...

Thanks for the advice
Jack

 

[Mark K Vallevand]

No, I don't think renaming the administrator account is causing it. I think
the administrator security credentials are tied to the system ID, and when
you reseal you get a new system ID and a new administrator account.

I stopped trying to get the administrator settings to carry forward after
reseal. I set things up to restore the things I really are about every time
you log in.

--
Regards.
Mark K Vallevand (e-mail address removed)

Beer is living proof that God loves us and wants us to be happy.
- Benjamin Franklin


THIS COMMUNICATION MAY CONTAIN CONFIDENTIAL AND/OR OTHERWISE PROPRIETARY
MATERIAL and is thus for use only by the intended recipient. If you received
this in error, please contact the sender and delete the e-mail and its
attachments from all computers.