Swap File Message at every login

  • Thread starter Thread starter Kenny G
  • Start date Start date
K

Kenny G

We have a Windows 2000 desktop and after login,
immediately displays a message to increase the swap file.
Then the system reboots by itself and the process starts
over again never letting you login. This happens in
regular domain login mode or safe mode.

Does anyone have any ideas?

Ken
 
Hi -

Check the permissions on the root of the drive; it sounds like someone
removed the Everyone group.

Everyone includes System account, and this is likely the root of the
problem.

Realize that giving Everyone full control of the root of the drive does not
mean that anyone can do whatever they want; what it means is that if you
have credentials to log on to the machine, you will be allowed to use the
rights associated with your account. By default, if a member of the User
group logs on, they will not have full control at the root of the C: drive
even if the Everyone group is set to have full control; the User group does
not have full control by default, and most restrictive permissions apply.

hth.
 
Did that fix you up Kenny?

--
good computing,
don
--------



=========
If that doesn't get it
=========

Here's a KB to clear pagefile at shutdown.
http://support.microsoft.com/?kbid=314834

If that doesn't work, there is one to set both values to "zero"
To create a fresh pagefile.sys
http://support.microsoft.com/?scid=257758

=========
If that doesn't get it
=========








You must have Administrators privileges to complete this.
¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯
Completely from memory. I bare no responsibility whatsoever. Proceed at your own
risk.

=========

One cause is deleting "everyone" from users and there have been so many
infections around, some believe it could be something on that order recently
causing problems with "pagefile.sys" and also with Event Viewer, and that may
not be all of it. Better to learn the basics of Safe Computing Systems, for lack
of a better term. That word is a little like "fair", which is not subjective at
all.(In the mind of the beholder). I'll tell you a couple of those issues that
make up only a part of a well rounded program at the end. Try to read all three
Event Viewer files, whenever you get back up.

First, we'll deal with getting you going. That's a new "pagefile" first.

Since you're having trouble even getting booted, we'll boot into Safe Mode, and
then create the "pagefile.sys" file. You would do well to print this, or to at
least copy and paste the "How to" parts in your word processor for printing
that. Here we go.

Boot into Safe Mode

1.) On start up, put finger on the F8 key.
2.) Read all the posting screens, press F8 when indicated(hint start
bar).
3.) Safe Mode is your top choice.

If there is anything you don't understand, read the Help file. Type Safe Mode in
the index tab. Print it. If you miss it, pressing CAD (Ctrl+Alt+Delete) will
start the boot sequence over. But do it before it gets to the Splash
Screen(first Win Screen)

=========

To build a "pagefile.sys", you'll need to edit the registry, so be very
deliberate when you do this. You may want to back up the area that you're going
to be working with to your Desktop for simplicity sake, and the way desktops are
intended to be used. I'll explain that when I get there.


Add "system" (NTAUTHORITY\SYSTEM) as a user with "full control" rights to the
local drive.

Click on Start>Settings>Control Panel>Administrative Tools>Click Computer
Management
| click Logical Drives>highlight %windir% (c:\ usually) drive in the right
pane>on the Menu bar click Action>click Properties
| click Security tab>click the Add. button>scroll down and highlight (click
on) SYSTEM>click the Add button
| close OK button
| on the Properties Window(verify top left corner of window) highlight
SYSTEM>click Advanced button
| highlight SYSTEM (click on it)>click View/Edit|checkmark "all" the Allow
boxes (full control) > click OK
| click OK
| click OK
| close Computer Management window.

Now wasn't that simple? Remember, when you get through creating your pagefile,
remove SYSTEM as a user.

To do that get to the last box>highlight SYSTEM>click "remove" button>back
out with OK (all) and close the Computer Management Console.

(And your just getting started.)

--------------

Next "search" (for files and folders) That's Start button>Search>files and
folders...
search for "temppf.sys" & "pagefile.sys". Look at and record the path.
They are both protected operating system hidden files, so let's make them
visible...

To Show "hidden files" and show file extensions of file types...

Click Start>Settings>Control Panel>Folder Options
Click the View tab > click the bullet mark "Show hidden files and folders"
Uncheck "Hide file extensions for known file types"
Uncheck "Hide protected operating system files (Recommended"
(you'll get a squawk, but click 'yes')


--------------

Backing up the Registry (parts only)

Use the Help file and type "registry"
double click "backing up... "
make an ERD(takes one clean, formatted 3 1/2" floppy)
(preferrably with NT box, yea it ia FAT, but NT finicky about this sometime)
and you can make full back with those instructions also.
Save it wherever you can find it, and it's out of the way,
preferably in a folder of it's on.

--------------

Creating a pagefile.sys (while system only a temporary pagefile)

Click Start>Run...>type Regedt32, enter|click HKLM>on Menu bar click
Window>click Cascade
double-click on System>Current Control Set>Control>Session Manager>click Memory
Management
in the right pane click on > click on "PagingFiles : REG_MULTI_SZ :
C:\pagefile.sys 3000 3000 ..."(w/o quotes)
the first 3000 is the initial size, the 2nd 3000 is the max (mine is 3gig)
on the Menu bar click Edit>choose/click Multi String...
type in exactly where you want it to go. It can go in "C:\winnt\pagefile.sys
3000 3000" or "C:\pagefile.sys 500 500" if it was in the root, you can leave it
there. Either is okay.
click OK > exit the registry

Before you leave, you can find the temporary pagefile by clicking Session
Manager and looking in the right pane for "temppf.sys". That's because it won't
be there after you restart, Hopefully.
Close the registry, and don't worry about collapsing the tree on HKLM.

--------------

Let's see if we can boot, now. You have a pagefile.sys.
If you want, you can go back to the view folder and undo all, but I would wait
for now. I have a feeling this ain't. I don't see no fat lady singing. Just an
expression.

=========

I have created new Event Viewer file. Mine could no longer be seen. App could
the first time you went to it, but if I looked in System, "nada", and went back
to Apps "nada". CORRUPTED. I can tell you how to do this, if you need it. You
are welcome to email me. To do that need to "u n z i p i t".

=========

Basic Tips of good Computer Management.

Always have and ERD and backup data and other important files (Address Book(s),
Favorites, Preferences for apps (you have to find them), settings for dial-up,
passwords, write down your desktop preferences as you do them, sound file,
fonts, and many other things.

Another very important thing is to keep a notebook and write down a log of
things you first learn, so you can get back there and also to learn it.

Last, but not least is to go to www.spychecker.com and take a look at some of
the programs you can get (many are free)
I recommend you have a Firewall (Zone Alarm has a free; Pro is great), n AVP
(grisoft has a free one), Ad-Aware, SpyBot S&D(checkem' out), they have a free
version.

==========
here is a handy little dumplin', Pagefile defragger...
http://www.sysinternals.com/ntw2k/freeware/pagedefrag.shtml







good computing,
don
------





Hi -

Check the permissions on the root of the drive; it sounds like someone
removed the Everyone group.

Everyone includes System account, and this is likely the root of the
problem.

Realize that giving Everyone full control of the root of the drive does not
mean that anyone can do whatever they want; what it means is that if you
have credentials to log on to the machine, you will be allowed to use the
rights associated with your account. By default, if a member of the User
group logs on, they will not have full control at the root of the C: drive
even if the Everyone group is set to have full control; the User group does
not have full control by default, and most restrictive permissions apply.

hth.
 
Should have suggested this in the first place - better late than never, I
guess....

If you cannot log onto the Operating System now, you may have to either move
the disk to another machine to reset permissions, or add another drive as
the boot device to this machine and then do a clean installation of the OS
onto that drive in order to reset permissions on the original drive.

Realize that if someone has set the permissions for Everyone group to Deny
Full Control, you will not be able to install another copy of the OS onto
this box with its current disk set as the boot drive - the installation will
fail when trying to write boot files to the drive.
--
This posting is provided "AS IS" with no warranties, and confers no rights.

David Leahy [MSFT]
(e-mail address removed)


dcdon said:
Did that fix you up Kenny?

--
good computing,
don
--------



=========
If that doesn't get it
=========

Here's a KB to clear pagefile at shutdown.
http://support.microsoft.com/?kbid=314834

If that doesn't work, there is one to set both values to "zero"
To create a fresh pagefile.sys
http://support.microsoft.com/?scid=257758

=========
If that doesn't get it
=========








You must have Administrators privileges to complete this.
¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯
Completely from memory. I bare no responsibility whatsoever. Proceed at your own
risk.

=========

One cause is deleting "everyone" from users and there have been so many
infections around, some believe it could be something on that order recently
causing problems with "pagefile.sys" and also with Event Viewer, and that may
not be all of it. Better to learn the basics of Safe Computing Systems, for lack
of a better term. That word is a little like "fair", which is not subjective at
all.(In the mind of the beholder). I'll tell you a couple of those issues that
make up only a part of a well rounded program at the end. Try to read all three
Event Viewer files, whenever you get back up.

First, we'll deal with getting you going. That's a new "pagefile" first.

Since you're having trouble even getting booted, we'll boot into Safe Mode, and
then create the "pagefile.sys" file. You would do well to print this, or to at
least copy and paste the "How to" parts in your word processor for printing
that. Here we go.

Boot into Safe Mode

1.) On start up, put finger on the F8 key.
2.) Read all the posting screens, press F8 when indicated(hint start
bar).
3.) Safe Mode is your top choice.

If there is anything you don't understand, read the Help file. Type Safe Mode in
the index tab. Print it. If you miss it, pressing CAD (Ctrl+Alt+Delete) will
start the boot sequence over. But do it before it gets to the Splash
Screen(first Win Screen)

=========

To build a "pagefile.sys", you'll need to edit the registry, so be very
deliberate when you do this. You may want to back up the area that you're going
to be working with to your Desktop for simplicity sake, and the way desktops are
intended to be used. I'll explain that when I get there.


Add "system" (NTAUTHORITY\SYSTEM) as a user with "full control" rights to the
local drive.

Click on Start>Settings>Control Panel>Administrative Tools>Click Computer
Management
| click Logical Drives>highlight %windir% (c:\ usually) drive in the right
pane>on the Menu bar click Action>click Properties
| click Security tab>click the Add. button>scroll down and highlight (click
on) SYSTEM>click the Add button
| close OK button
| on the Properties Window(verify top left corner of window) highlight
SYSTEM>click Advanced button
| highlight SYSTEM (click on it)>click View/Edit|checkmark "all" the Allow
boxes (full control) > click OK
| click OK
| click OK
| close Computer Management window.

Now wasn't that simple? Remember, when you get through creating your pagefile,
remove SYSTEM as a user.

To do that get to the last box>highlight SYSTEM>click "remove" button>back
out with OK (all) and close the Computer Management Console.

(And your just getting started.)

--------------

Next "search" (for files and folders) That's Start button>Search>files and
folders...
search for "temppf.sys" & "pagefile.sys". Look at and record the path.
They are both protected operating system hidden files, so let's make them
visible...

To Show "hidden files" and show file extensions of file types...

Click Start>Settings>Control Panel>Folder Options
Click the View tab > click the bullet mark "Show hidden files and folders"
Uncheck "Hide file extensions for known file types"
Uncheck "Hide protected operating system files (Recommended"
(you'll get a squawk, but click 'yes')


--------------

Backing up the Registry (parts only)

Use the Help file and type "registry"
double click "backing up... "
make an ERD(takes one clean, formatted 3 1/2" floppy)
(preferrably with NT box, yea it ia FAT, but NT finicky about this sometime)
and you can make full back with those instructions also.
Save it wherever you can find it, and it's out of the way,
preferably in a folder of it's on.

--------------

Creating a pagefile.sys (while system only a temporary pagefile)

Click Start>Run...>type Regedt32, enter|click HKLM>on Menu bar click
Window>click Cascade
double-click on System>Current Control Set>Control>Session Manager>click Memory
Management
in the right pane click on > click on "PagingFiles : REG_MULTI_SZ :
C:\pagefile.sys 3000 3000 ..."(w/o quotes)
the first 3000 is the initial size, the 2nd 3000 is the max (mine is 3gig)
on the Menu bar click Edit>choose/click Multi String...
type in exactly where you want it to go. It can go in "C:\winnt\pagefile.sys
3000 3000" or "C:\pagefile.sys 500 500" if it was in the root, you can leave it
there. Either is okay.
click OK > exit the registry

Before you leave, you can find the temporary pagefile by clicking Session
Manager and looking in the right pane for "temppf.sys". That's because it won't
be there after you restart, Hopefully.
Close the registry, and don't worry about collapsing the tree on HKLM.

--------------

Let's see if we can boot, now. You have a pagefile.sys.
If you want, you can go back to the view folder and undo all, but I would wait
for now. I have a feeling this ain't. I don't see no fat lady singing. Just an
expression.

=========

I have created new Event Viewer file. Mine could no longer be seen. App could
the first time you went to it, but if I looked in System, "nada", and went back
to Apps "nada". CORRUPTED. I can tell you how to do this, if you need it. You
are welcome to email me. To do that need to "u n z i p i t".

=========

Basic Tips of good Computer Management.

Always have and ERD and backup data and other important files (Address Book(s),
Favorites, Preferences for apps (you have to find them), settings for dial-up,
passwords, write down your desktop preferences as you do them, sound file,
fonts, and many other things.

Another very important thing is to keep a notebook and write down a log of
things you first learn, so you can get back there and also to learn it.

Last, but not least is to go to www.spychecker.com and take a look at some of
the programs you can get (many are free)
I recommend you have a Firewall (Zone Alarm has a free; Pro is great), n AVP
(grisoft has a free one), Ad-Aware, SpyBot S&D(checkem' out), they have a free
version.

==========
here is a handy little dumplin', Pagefile defragger...
http://www.sysinternals.com/ntw2k/freeware/pagedefrag.shtml







good computing,
don
------





Hi -

Check the permissions on the root of the drive; it sounds like someone
removed the Everyone group.

Everyone includes System account, and this is likely the root of the
problem.

Realize that giving Everyone full control of the root of the drive does not
mean that anyone can do whatever they want; what it means is that if you
have credentials to log on to the machine, you will be allowed to use the
rights associated with your account. By default, if a member of the User
group logs on, they will not have full control at the root of the C: drive
even if the Everyone group is set to have full control; the User group does
not have full control by default, and most restrictive permissions apply.

hth.

--
This posting is provided "AS IS" with no warranties, and confers no rights.

David Leahy [MSFT]
(e-mail address removed)


Kenny G said:
We have a Windows 2000 desktop and after login,
immediately displays a message to increase the swap file.
Then the system reboots by itself and the process starts
over again never letting you login. This happens in
regular domain login mode or safe mode.

Does anyone have any ideas?

Ken
 

Ask a Question

Want to reply to this thread or ask your own question?

You'll need to choose a username for the site, which only take a couple of moments. After that, you can post your question and our members will help you out.

Ask a Question

Back
Top