Lack Sufficient Administrator Privileges

[Guest]

I am the only user and adminstrator on this computer. Since May I have been
plagued with problems which all seem to relate to 'you don't have sufficient
privileges ' or some variation of that.

I cannot get Windows update to work and have read all knowledge base and
other internet threads and tried many things an nothing resolves this. I have
manually downloaded and installed each update individually.

Same for Windows Installer! Cannot install any program that requires Windows
Installer.

I have a local area connection to my home network and cannot access
properites to change any communications with same message. ( I just have a
router and my notebook on the network) Same problem is present even is I go
off network work and run this computer standalone.

I have been through all my Admin Tools areas and set access to Administrator
and Everyone. I have a notebook with XP Pro also, and have compared the
settting in all tools area and they are identica, as far as I can determine.

I created a slipstream CD and did a reinstall. No change!!!!!!!!!!

Booting in Safe mode does not help.

I am stumped. I have too many programs to do a reformat and reinstall so I
am roughing it out fo now. Maybe when XP is replaced in 2006 that will
correct the problem, although I am not sure.

ANY SUGGESTIONS WOULD BE MOST APPRECIATED!

 

[Steven L Umbach]

You could try to use the secedit command to reset security settings back to
default defined levels as described in the KB article below. Beware however
that often a cause of such problems is malware that has reconfigured system
security in an attempt to prevent administrators from accessing needed tools
to detect or remove it. So be sure to also do a full malware scan on your
computer with an antivirus program that is current with virus definitions as
of today which can be downloaded form the vendors website. --- Steve

http://support.microsoft.com/default.aspx?scid=kb;EN-US;313222
http://www.microsoft.com/athome/security/protect/windowsxpsp2/Default.mspx
--- Protect Your PC tips.

 

[Guest]

In my orginal post, I should have indicated that I have run every malware,
sypware and viruse scanner several times. That seemed to be the logical cause
back in May, that a bug had taken control of my system. I have also use
Registery Cleaner continually.

 

[Randy Reimers]

Could be a corrupt profile. Can you log on as the "Administrator"? I do
not mean as "Adminitrator" equivalent, but as the user "Administrator". Or,
can you create another user that has Administrator group rights, then log on
as that user? I have seen corrupt profiles do VERY strange things. It
could be that sompe place in your local users portion of the profile, there
are keys that are royally screwed up.

Randy Reimers

 

[Steven L Umbach]

Since you seem to have an ongoing problem that appears can not be resolved
after reasonable efforts if it was my computer I would do a clean install of
the operating system and start over after being sure to backup your data
files first to offline media such as cdroms/DVD. I just got done cleaning
my nephew's computer that had some malware and spyware. From what I could
tell it was clean after my efforts but still sluggish. So I did a clean
install of the operating system and everything runs great now. I know it
can be a pain but sometimes it really is the way to go. --- Steve

 

[Guest]

We have the same problerm! Even as administrator it's not possible to delete
or change software. This because of windows installer problems. We already
format one pc and installed XP Professional & Office XP again. The pc worked
fine for a couple of days but after updates of Windows the installer problem
came back.

Steven: do you keep your XP software updated?
We think this is the problem because an other pc of us which didn't update
automatticaly doesn't have the problem!

 

[Steven L Umbach]

I am not the one having the problem here and yes I keep my computer updated
with patches though I don't usually rush out and do it. Did you try to
remove the updates via Add & Remove programs to see if that restored
computer functionality?? You may also want to post in the Microsoft updates
newsgroup particularly if you are pretty sure that it is related to a
specific update to see if anyone there has any words of wisdom. For
organizations that have a lot of computers it is best practice to apply
patches on a few like configured test computers first to see if everything
goes well or not. It also could be a coincidence that another problem arises
at the same time. --- Steve

 

[Guest]

I need some help with my options for clean install. Exactly what is clean
install.

I have my XP CD and I have also created a slipstream CD with SP2.

I did what I believe was a repair intstall and this did nothing to solve the
problem, except at that time I had 23 updates and I had to go through the
process of installing each one manually.

I have a disk image back up.

So if I do a clean install guess that means that I will have to reinstall
all my apps, which are many! Is this correct? Or after I do a clean install
can I load from this disk image and recover most of my apps?

I am trying to figure out if I can rough it out for a few more months until
the new MS operating system comes out. But that may be an overinstall or
upgrade type install and I might have the same problem!

Right now I don't have either Windows Update or Windows Installer because of
lack of Administrator privilidges.

Thanks for your help.

 

[Steven L Umbach]

Hi Bob.

Are you using XP Home or XP Pro. If you are using XP Pro did you try using
secedit to restore security settings to default defined levels as I
described earlier?? Can you access the command prompt, registry editor
[regedit], or Local Security Policy and gpedit.msc if using XP Pro at least
in Safe Mode? Have you run your malware/spyware programs in Safe Mode. What
does your disk image contain - just data or the whole operating system from
a point in time when everything worked better??

A clean or pristine install would be booting from the install cdrom for XP
[slipstreamed disk would be fine if bootable] and selecting the option to
install a new operating system and formatting [not quick] to system
drive/partition where the operating system lives which will destroy
everything on that drive/partition. Yes you would have to reinstall all of
your applications and I know that can be a bear which is why most want to
avoid a clean install except as a last resort. I don't know if you have dial
up or not but you do not have to download/install updates one at a time.
When I repaired my nephew's computer I downloaded and installed then all in
one batch though I have a cable modem. If you do get a new version of the
operating system you surely do not want to do an upgrade install with the
state of your computer. --- Steve

 

[Guest]

I have XP Pro. I tried the secedit again and here is the part of log file
that showed errors:
--------
Error enumerating info for machine\system\currentcontrolset\services\scarddrv.
Configure machine\system\currentcontrolset\services\scardsvr\security.
Configure machine\system\currentcontrolset\services\stisvc\security.
Configure machine\system\currentcontrolset\services\sysmonlog\log queries.
Error 234: More data is available.
Error enumerating info for
machine\system\currentcontrolset\services\sysmonlog\log queries.

Configuration of Registry Keys was completed with one or more errors.


----Configure File Security...
Configure c:\.

File Security configuration was completed with one or more errors.
----------

My back up is a disk image but don't believe I have one back to where this
started occuring. I will look some more on an external hdd.

Does these log file errors above play into the problem?

 

[Steven L Umbach]

It is not unusual to see some errors when you run that command but as long
as everything else was reset that is a good start - particularly user rights
and NTFS permissions. If you have disabled simple file sharing you can view
NTFS permissions to see how they look. By default administrators and system
have full control to every folder with the possible exception that
administrators may not have any NTFS permissions to a user's profile folder
that would be under documents and settings. Also you want to make sure that
there are no "deny" permissions to general groups like users, authenticated
users, or everyone since administrators are also included in that group.

I would also suggest that if you can open Local Security Policy enable
auditing of privilege user for failure only and then see if any failure
events are recorded when you attempt to do any tasks. You can also install
the support tools from the install disk in the support/tools folder where
you will need to run the setup program there to run them and then use the
command whoami to find out more about your group memberships and user
rights. Below is an example on my computer for a user that is also
administrator [me]. Also as far as your Windows Installer problem I would
try to open local Group Policy [gpedit.msc] and go to computer
configuration/administratitive templates/Windows components/Windows
installer and set "disable Windows installer" to disabled and "prohibit user
installs" to disabled. Also go to computer configuration/administrative
templates/Windows components/Windows installer and set "prevent removable
media for install" to be disabled. Since you are using XP Pro you can run
rsop.msc in the run box to see your current Group Policy settings which may
be restricting you and as an administrator you can reverse the setting
[hopefully]. --- Steve


D:\Documents and Settings\Steve>whoami /all
[User] = "STEVE-XP\Steve" S-1-5-21-1123561945-152049171-1343024091-1003

[Group 1] = "STEVE-XP\None" S-1-5-21-1123561945-152049171-1343024091-513
[Group 2] = "Everyone" S-1-1-0
[Group 3] = "BUILTIN\Administrators" S-1-5-32-544
[Group 4] = "BUILTIN\Users" S-1-5-32-545
[Group 5] = "NT AUTHORITY\INTERACTIVE" S-1-5-4
[Group 6] = "NT AUTHORITY\Authenticated Users" S-1-5-11
[Group 7] = "LOCAL" S-1-2-0


(X) SeChangeNotifyPrivilege = Bypass traverse checking
(O) SeSecurityPrivilege = Manage auditing and security log
(O) SeBackupPrivilege = Back up files and directories
(O) SeRestorePrivilege = Restore files and directories
(O) SeSystemtimePrivilege = Change the system time
(O) SeShutdownPrivilege = Shut down the system
(O) SeRemoteShutdownPrivilege = Force shutdown from a remote system
(O) SeTakeOwnershipPrivilege = Take ownership of files or other
objects
(O) SeDebugPrivilege = Debug programs
(O) SeSystemEnvironmentPrivilege = Modify firmware environment values
(O) SeSystemProfilePrivilege = Profile system performance
(O) SeProfileSingleProcessPrivilege = Profile single process
(O) SeIncreaseBasePriorityPrivilege = Increase scheduling priority
(X) SeLoadDriverPrivilege = Load and unload device drivers
(O) SeCreatePagefilePrivilege = Create a pagefile
(O) SeIncreaseQuotaPrivilege = Adjust memory quotas for a process
(X) SeUndockPrivilege = Remove computer from docking station
(O) SeManageVolumePrivilege = Perform volume maintenance tasks
(X) SeCreateGlobalPrivilege = Create global objects
(X) SeImpersonatePrivilege = Impersonate a client after
authentication

I have XP Pro. I tried the secedit again and here is the part of log file
that showed errors:
--------
Error enumerating info for
machine\system\currentcontrolset\services\scarddrv.
Configure machine\system\currentcontrolset\services\scardsvr\security.
Configure machine\system\currentcontrolset\services\stisvc\security.
Configure machine\system\currentcontrolset\services\sysmonlog\log queries.
Error 234: More data is available.
Error enumerating info for
machine\system\currentcontrolset\services\sysmonlog\log queries.

Configuration of Registry Keys was completed with one or more errors.


----Configure File Security...
Configure c:\.

File Security configuration was completed with one or more errors.
----------

My back up is a disk image but don't believe I have one back to where
this
started occuring. I will look some more on an external hdd.

Does these log file errors above play into the problem?

Hi Bob.

Are you using XP Home or XP Pro. If you are using XP Pro did you try
using
secedit to restore security settings to default defined levels as I
described earlier?? Can you access the command prompt, registry editor
[regedit], or Local Security Policy and gpedit.msc if using XP Pro at
least
in Safe Mode? Have you run your malware/spyware programs in Safe Mode.
What
does your disk image contain - just data or the whole operating system
from
a point in time when everything worked better??

A clean or pristine install would be booting from the install cdrom for
XP
[slipstreamed disk would be fine if bootable] and selecting the option to
install a new operating system and formatting [not quick] to system
drive/partition where the operating system lives which will destroy
everything on that drive/partition. Yes you would have to reinstall all
of
your applications and I know that can be a bear which is why most want to
avoid a clean install except as a last resort. I don't know if you have
dial
up or not but you do not have to download/install updates one at a time.
When I repaired my nephew's computer I downloaded and installed then all
in
one batch though I have a cable modem. If you do get a new version of the
operating system you surely do not want to do an upgrade install with the
state of your computer. --- Steve

 

[Guest]

Thanks for your help Steve but still running into 'lack sufficient
privleges...'

When I tried to install tools from the
Windows XP CD I get the message I don't have sufficient privledges! This
happens a lot in installs, like current stuff, like updating Adobe Acrobat,
trying to install Quicktime, etc. But on the other hand, my Turbo Tax came
and it used an InstallShield that worked fine. So I don't know the difference
on how some Installers work and others don't.

When I tried rsop.msc, I get an error saying Group Policy Error, You do not
have permission......

I have gone through all group polices and opened to Administrators, Everyone.

Any suggestions would be most appreciated.

Bob

It is not unusual to see some errors when you run that command but as long
as everything else was reset that is a good start - particularly user rights
and NTFS permissions. If you have disabled simple file sharing you can view
NTFS permissions to see how they look. By default administrators and system
have full control to every folder with the possible exception that
administrators may not have any NTFS permissions to a user's profile folder
that would be under documents and settings. Also you want to make sure that
there are no "deny" permissions to general groups like users, authenticated
users, or everyone since administrators are also included in that group.

I would also suggest that if you can open Local Security Policy enable
auditing of privilege user for failure only and then see if any failure
events are recorded when you attempt to do any tasks. You can also install
the support tools from the install disk in the support/tools folder where
you will need to run the setup program there to run them and then use the
command whoami to find out more about your group memberships and user
rights. Below is an example on my computer for a user that is also
administrator [me]. Also as far as your Windows Installer problem I would
try to open local Group Policy [gpedit.msc] and go to computer
configuration/administratitive templates/Windows components/Windows
installer and set "disable Windows installer" to disabled and "prohibit user
installs" to disabled. Also go to computer configuration/administrative
templates/Windows components/Windows installer and set "prevent removable
media for install" to be disabled. Since you are using XP Pro you can run
rsop.msc in the run box to see your current Group Policy settings which may
be restricting you and as an administrator you can reverse the setting
[hopefully]. --- Steve


D:\Documents and Settings\Steve>whoami /all
[User] = "STEVE-XP\Steve" S-1-5-21-1123561945-152049171-1343024091-1003

[Group 1] = "STEVE-XP\None" S-1-5-21-1123561945-152049171-1343024091-513
[Group 2] = "Everyone" S-1-1-0
[Group 3] = "BUILTIN\Administrators" S-1-5-32-544
[Group 4] = "BUILTIN\Users" S-1-5-32-545
[Group 5] = "NT AUTHORITY\INTERACTIVE" S-1-5-4
[Group 6] = "NT AUTHORITY\Authenticated Users" S-1-5-11
[Group 7] = "LOCAL" S-1-2-0


(X) SeChangeNotifyPrivilege = Bypass traverse checking
(O) SeSecurityPrivilege = Manage auditing and security log
(O) SeBackupPrivilege = Back up files and directories
(O) SeRestorePrivilege = Restore files and directories
(O) SeSystemtimePrivilege = Change the system time
(O) SeShutdownPrivilege = Shut down the system
(O) SeRemoteShutdownPrivilege = Force shutdown from a remote system
(O) SeTakeOwnershipPrivilege = Take ownership of files or other
objects
(O) SeDebugPrivilege = Debug programs
(O) SeSystemEnvironmentPrivilege = Modify firmware environment values
(O) SeSystemProfilePrivilege = Profile system performance
(O) SeProfileSingleProcessPrivilege = Profile single process
(O) SeIncreaseBasePriorityPrivilege = Increase scheduling priority
(X) SeLoadDriverPrivilege = Load and unload device drivers
(O) SeCreatePagefilePrivilege = Create a pagefile
(O) SeIncreaseQuotaPrivilege = Adjust memory quotas for a process
(X) SeUndockPrivilege = Remove computer from docking station
(O) SeManageVolumePrivilege = Perform volume maintenance tasks
(X) SeCreateGlobalPrivilege = Create global objects
(X) SeImpersonatePrivilege = Impersonate a client after
authentication

I have XP Pro. I tried the secedit again and here is the part of log file
that showed errors:
--------
Error enumerating info for
machine\system\currentcontrolset\services\scarddrv.
Configure machine\system\currentcontrolset\services\scardsvr\security.
Configure machine\system\currentcontrolset\services\stisvc\security.
Configure machine\system\currentcontrolset\services\sysmonlog\log queries.
Error 234: More data is available.
Error enumerating info for
machine\system\currentcontrolset\services\sysmonlog\log queries.

Configuration of Registry Keys was completed with one or more errors.


----Configure File Security...
Configure c:\.

File Security configuration was completed with one or more errors.
----------

My back up is a disk image but don't believe I have one back to where
this
started occuring. I will look some more on an external hdd.

Does these log file errors above play into the problem?

Hi Bob.

Are you using XP Home or XP Pro. If you are using XP Pro did you try
using
secedit to restore security settings to default defined levels as I
described earlier?? Can you access the command prompt, registry editor
[regedit], or Local Security Policy and gpedit.msc if using XP Pro at
least
in Safe Mode? Have you run your malware/spyware programs in Safe Mode.
What
does your disk image contain - just data or the whole operating system
from
a point in time when everything worked better??

A clean or pristine install would be booting from the install cdrom for
XP
[slipstreamed disk would be fine if bootable] and selecting the option to
install a new operating system and formatting [not quick] to system
drive/partition where the operating system lives which will destroy
everything on that drive/partition. Yes you would have to reinstall all
of
your applications and I know that can be a bear which is why most want to
avoid a clean install except as a last resort. I don't know if you have
dial
up or not but you do not have to download/install updates one at a time.
When I repaired my nephew's computer I downloaded and installed then all
in
one batch though I have a cable modem. If you do get a new version of the
operating system you surely do not want to do an upgrade install with the
state of your computer. --- Steve

 

[Steven L Umbach]

Can you open Group Policy editor as in gpedit.msc and if so did you make the
changes I recommended?? Can you use regedit? Are you absolutely sure you are
an administrator. When you run the command net localgroup administrators
does it show that your user account is included? Check the membership of
your user account and make sure it is only administrators and users -
nothing else. The command net user username will show your group membership.
Verify that administrators and system have full control permissions to the
root/drive folder, the program files folder, the \Windows folder, the
documents and settings folder, your user profile folder under documents and
settings folder, and everyone else and make sure that
users/everyone/authenticated users do not have deny permissions to any of
those folders. Try booting into Safe Mode to see if it makes any difference
installing your applications. --- Steve

Thanks for your help Steve but still running into 'lack sufficient
privleges...'

When I tried to install tools from the
Windows XP CD I get the message I don't have sufficient privledges! This
happens a lot in installs, like current stuff, like updating Adobe
Acrobat,
trying to install Quicktime, etc. But on the other hand, my Turbo Tax came
and it used an InstallShield that worked fine. So I don't know the
difference
on how some Installers work and others don't.

When I tried rsop.msc, I get an error saying Group Policy Error, You do
not
have permission......

I have gone through all group polices and opened to Administrators,
Everyone.

Any suggestions would be most appreciated.

Bob

It is not unusual to see some errors when you run that command but as
long
as everything else was reset that is a good start - particularly user
rights
and NTFS permissions. If you have disabled simple file sharing you can
view
NTFS permissions to see how they look. By default administrators and
system
have full control to every folder with the possible exception that
administrators may not have any NTFS permissions to a user's profile
folder
that would be under documents and settings. Also you want to make sure
that
there are no "deny" permissions to general groups like users,
authenticated
users, or everyone since administrators are also included in that group.

I would also suggest that if you can open Local Security Policy enable
auditing of privilege user for failure only and then see if any failure
events are recorded when you attempt to do any tasks. You can also
install
the support tools from the install disk in the support/tools folder where
you will need to run the setup program there to run them and then use the
command whoami to find out more about your group memberships and user
rights. Below is an example on my computer for a user that is also
administrator [me]. Also as far as your Windows Installer problem I would
try to open local Group Policy [gpedit.msc] and go to computer
configuration/administratitive templates/Windows components/Windows
installer and set "disable Windows installer" to disabled and "prohibit
user
installs" to disabled. Also go to computer configuration/administrative
templates/Windows components/Windows installer and set "prevent removable
media for install" to be disabled. Since you are using XP Pro you can run
rsop.msc in the run box to see your current Group Policy settings which
may
be restricting you and as an administrator you can reverse the setting
[hopefully]. --- Steve


D:\Documents and Settings\Steve>whoami /all
[User] = "STEVE-XP\Steve"
S-1-5-21-1123561945-152049171-1343024091-1003

[Group 1] = "STEVE-XP\None"
S-1-5-21-1123561945-152049171-1343024091-513
[Group 2] = "Everyone" S-1-1-0
[Group 3] = "BUILTIN\Administrators" S-1-5-32-544
[Group 4] = "BUILTIN\Users" S-1-5-32-545
[Group 5] = "NT AUTHORITY\INTERACTIVE" S-1-5-4
[Group 6] = "NT AUTHORITY\Authenticated Users" S-1-5-11
[Group 7] = "LOCAL" S-1-2-0


(X) SeChangeNotifyPrivilege = Bypass traverse checking
(O) SeSecurityPrivilege = Manage auditing and security log
(O) SeBackupPrivilege = Back up files and directories
(O) SeRestorePrivilege = Restore files and directories
(O) SeSystemtimePrivilege = Change the system time
(O) SeShutdownPrivilege = Shut down the system
(O) SeRemoteShutdownPrivilege = Force shutdown from a remote system
(O) SeTakeOwnershipPrivilege = Take ownership of files or other
objects
(O) SeDebugPrivilege = Debug programs
(O) SeSystemEnvironmentPrivilege = Modify firmware environment values
(O) SeSystemProfilePrivilege = Profile system performance
(O) SeProfileSingleProcessPrivilege = Profile single process
(O) SeIncreaseBasePriorityPrivilege = Increase scheduling priority
(X) SeLoadDriverPrivilege = Load and unload device drivers
(O) SeCreatePagefilePrivilege = Create a pagefile
(O) SeIncreaseQuotaPrivilege = Adjust memory quotas for a process
(X) SeUndockPrivilege = Remove computer from docking station
(O) SeManageVolumePrivilege = Perform volume maintenance tasks
(X) SeCreateGlobalPrivilege = Create global objects
(X) SeImpersonatePrivilege = Impersonate a client after
authentication

I have XP Pro. I tried the secedit again and here is the part of log
file
that showed errors:
--------
Error enumerating info for
machine\system\currentcontrolset\services\scarddrv.
Configure machine\system\currentcontrolset\services\scardsvr\security.
Configure machine\system\currentcontrolset\services\stisvc\security.
Configure machine\system\currentcontrolset\services\sysmonlog\log
queries.
Error 234: More data is available.
Error enumerating info for
machine\system\currentcontrolset\services\sysmonlog\log queries.

Configuration of Registry Keys was completed with one or more errors.


----Configure File Security...
Configure c:\.

File Security configuration was completed with one or more errors.
----------

My back up is a disk image but don't believe I have one back to where
this
started occuring. I will look some more on an external hdd.

Does these log file errors above play into the problem?


:

Hi Bob.

Are you using XP Home or XP Pro. If you are using XP Pro did you try
using
secedit to restore security settings to default defined levels as I
described earlier?? Can you access the command prompt, registry editor
[regedit], or Local Security Policy and gpedit.msc if using XP Pro at
least
in Safe Mode? Have you run your malware/spyware programs in Safe Mode.
What
does your disk image contain - just data or the whole operating system
from
a point in time when everything worked better??

A clean or pristine install would be booting from the install cdrom
for
XP
[slipstreamed disk would be fine if bootable] and selecting the option
to
install a new operating system and formatting [not quick] to system
drive/partition where the operating system lives which will destroy
everything on that drive/partition. Yes you would have to reinstall
all
of
your applications and I know that can be a bear which is why most want
to
avoid a clean install except as a last resort. I don't know if you
have
dial
up or not but you do not have to download/install updates one at a
time.
When I repaired my nephew's computer I downloaded and installed then
all
in
one batch though I have a cable modem. If you do get a new version of
the
operating system you surely do not want to do an upgrade install with
the
state of your computer. --- Steve

 

[Guest]

Can you open Group Policy editor as in gpedit.msc and if so did you make the
changes I recommended?? <<<<

Yes, I have gone through all settings several times and have a notebook with
same XP Pro and have compared the setting on both computers. There is nothing
out of normal.

Yes

an administrator. When you run the command net localgroup administrators
does it show that your user account is included? Check the membership of
your user account and make sure it is only administrators and users -
nothing else. The command net user username will show your group membership. <<<

Yes, ran these commands and Administrator account shows with no problems.

Verify that administrators and system have full control permissions to the
root/drive folder, the program files folder, the \Windows folder, the
documents and settings folder, your user profile folder under documents and
settings folder, and everyone else and make sure that
users/everyone/authenticated users do not have deny permissions to any of
those folders. <<<

Not sure of what you mean here. I have folders set up for sharing but 'full
control permissions' ????

installing your applications. --- Steve<<<<

I have run in safe mode several times and all the permissions problems of
denying installer, and updates still exist. I have disconnected from my home
network also and same problems exist.

---------------------------------------------------------------------------------->

Thanks for your help Steve but still running into 'lack sufficient
privleges...'

When I tried to install tools from the
Windows XP CD I get the message I don't have sufficient privledges! This
happens a lot in installs, like current stuff, like updating Adobe
Acrobat,
trying to install Quicktime, etc. But on the other hand, my Turbo Tax came
and it used an InstallShield that worked fine. So I don't know the
difference
on how some Installers work and others don't.

When I tried rsop.msc, I get an error saying Group Policy Error, You do
not
have permission......

I have gone through all group polices and opened to Administrators,
Everyone.

Any suggestions would be most appreciated.

Bob

It is not unusual to see some errors when you run that command but as
long
as everything else was reset that is a good start - particularly user
rights
and NTFS permissions. If you have disabled simple file sharing you can
view
NTFS permissions to see how they look. By default administrators and
system
have full control to every folder with the possible exception that
administrators may not have any NTFS permissions to a user's profile
folder
that would be under documents and settings. Also you want to make sure
that
there are no "deny" permissions to general groups like users,
authenticated
users, or everyone since administrators are also included in that group.

I would also suggest that if you can open Local Security Policy enable
auditing of privilege user for failure only and then see if any failure
events are recorded when you attempt to do any tasks. You can also
install
the support tools from the install disk in the support/tools folder where
you will need to run the setup program there to run them and then use the
command whoami to find out more about your group memberships and user
rights. Below is an example on my computer for a user that is also
administrator [me]. Also as far as your Windows Installer problem I would
try to open local Group Policy [gpedit.msc] and go to computer
configuration/administratitive templates/Windows components/Windows
installer and set "disable Windows installer" to disabled and "prohibit
user
installs" to disabled. Also go to computer configuration/administrative
templates/Windows components/Windows installer and set "prevent removable
media for install" to be disabled. Since you are using XP Pro you can run
rsop.msc in the run box to see your current Group Policy settings which
may
be restricting you and as an administrator you can reverse the setting
[hopefully]. --- Steve


D:\Documents and Settings\Steve>whoami /all
[User] = "STEVE-XP\Steve"
S-1-5-21-1123561945-152049171-1343024091-1003

[Group 1] = "STEVE-XP\None"
S-1-5-21-1123561945-152049171-1343024091-513
[Group 2] = "Everyone" S-1-1-0
[Group 3] = "BUILTIN\Administrators" S-1-5-32-544
[Group 4] = "BUILTIN\Users" S-1-5-32-545
[Group 5] = "NT AUTHORITY\INTERACTIVE" S-1-5-4
[Group 6] = "NT AUTHORITY\Authenticated Users" S-1-5-11
[Group 7] = "LOCAL" S-1-2-0


(X) SeChangeNotifyPrivilege = Bypass traverse checking
(O) SeSecurityPrivilege = Manage auditing and security log
(O) SeBackupPrivilege = Back up files and directories
(O) SeRestorePrivilege = Restore files and directories
(O) SeSystemtimePrivilege = Change the system time
(O) SeShutdownPrivilege = Shut down the system
(O) SeRemoteShutdownPrivilege = Force shutdown from a remote system
(O) SeTakeOwnershipPrivilege = Take ownership of files or other
objects
(O) SeDebugPrivilege = Debug programs
(O) SeSystemEnvironmentPrivilege = Modify firmware environment values
(O) SeSystemProfilePrivilege = Profile system performance
(O) SeProfileSingleProcessPrivilege = Profile single process
(O) SeIncreaseBasePriorityPrivilege = Increase scheduling priority
(X) SeLoadDriverPrivilege = Load and unload device drivers
(O) SeCreatePagefilePrivilege = Create a pagefile
(O) SeIncreaseQuotaPrivilege = Adjust memory quotas for a process
(X) SeUndockPrivilege = Remove computer from docking station
(O) SeManageVolumePrivilege = Perform volume maintenance tasks
(X) SeCreateGlobalPrivilege = Create global objects
(X) SeImpersonatePrivilege = Impersonate a client after
authentication


I have XP Pro. I tried the secedit again and here is the part of log
file
that showed errors:
--------
Error enumerating info for
machine\system\currentcontrolset\services\scarddrv.
Configure machine\system\currentcontrolset\services\scardsvr\security.
Configure machine\system\currentcontrolset\services\stisvc\security.
Configure machine\system\currentcontrolset\services\sysmonlog\log
queries.
Error 234: More data is available.
Error enumerating info for
machine\system\currentcontrolset\services\sysmonlog\log queries.

Configuration of Registry Keys was completed with one or more errors.


----Configure File Security...
Configure c:\.

File Security configuration was completed with one or more errors.
----------

My back up is a disk image but don't believe I have one back to where
this
started occuring. I will look some more on an external hdd.

Does these log file errors above play into the problem?


:

Hi Bob.

Are you using XP Home or XP Pro. If you are using XP Pro did you try
using
secedit to restore security settings to default defined levels as I
described earlier?? Can you access the command prompt, registry editor
[regedit], or Local Security Policy and gpedit.msc if using XP Pro at
least
in Safe Mode? Have you run your malware/spyware programs in Safe Mode.
What
does your disk image contain - just data or the whole operating system
from
a point in time when everything worked better??

A clean or pristine install would be booting from the install cdrom
for
XP
[slipstreamed disk would be fine if bootable] and selecting the option
to
install a new operating system and formatting [not quick] to system
drive/partition where the operating system lives which will destroy
everything on that drive/partition. Yes you would have to reinstall
all
of
your applications and I know that can be a bear which is why most want
to
avoid a clean install except as a last resort. I don't know if you
have
dial
up or not but you do not have to download/install updates one at a
time.
When I repaired my nephew's computer I downloaded and installed then
all
in
one batch though I have a cable modem. If you do get a new version of
the
operating system you surely do not want to do an upgrade install with
the
state of your computer. --- Steve