fbreseal corrupts user permissions

[mike-ca]

has anyone experienced the user permission problem after running
"fbreseal.exe -keepuser -keepnet"


BEFORE running fbreseal.exe
1.) after FBA process, i create 2 users ("support" and "service")
2.) login as "support" to customize certain settings
3.) run "fbreseal.exe -keepuser -keepnet"

AFTER running fbreseal.exe
1.) login as "support", i could not set the folder options settings,
such "Show hidden files and folder", and etc. also i couldn't modify
my own reg key under (HKEY_CURRENT_USER)

2.) login as "service", everything is fine. (note: i didn't login as
"service" before i run "fbreseal.exe", just simply cretaed this user
using "administrator" account)


thanks

 

[KM]

mike,

I remember you have posted similar report a while ago. I guess this time you narrow it down a little bit to the switches of fbreseal
that might be responsible for the issue?
If you can easy report the issue I'd suggest you to file a bug to Microsoft (btw, did you try this out on FP2007?):
http://msdn.microsoft.com/embedded/community/community/feedback/feedxp/default.aspx

To make it more details you may want to add the following info:
- Do you use NTFS or FAT? (there was some problems reported about fbreseal and NTFS)
- After cloning, what permission you can see set up on the "support" user's registry hive (check it out in regedit while you
logged on as the "service" guy) and the hive file (if NTFS used). Basically you'd want to check if SID list there include the
user's new SID (generated during cloning). If it doesn't match, the permission property page will show you unresolved SID - GUID
type number.