Re: Secedit box on startup creating weird networking issues

From: karl [x y] (jamescagney90210@excite.com)
Date: 08/25/02


From: "karl [x y]" <jamescagney90210@excite.com>
Date: Sun, 25 Aug 2002 09:34:50 -0400


The first thing I would check is whether anyone with administrator
privileges has changed group policy settings recently either on the
workstations [or on the servers or the domain, if you have an Active
Directory domain] or changed any other login ID or group permissions. Also,
click on Start, Run, MMC, add the Group Policy MMC for the local computer
and check who has permission to log on interactively and log on via the
network. Also, I wonder if you've recently installed any new software,
service packs or bug fixes that could have made changes.

A number of other people have reported this same symptom over the past
month, so I guess it is theoretically possible that a worm, trojan or hacker
could have done something like this, though a search of a few web sites
brought up nothing obvious. If you're concerned about viruses, make sure
your virus scanner is set to download new updates daily and that it is
receiving them, and consider downloading a trial version of another
antivirus scanner with the latest updates if you want to double-check [such
as http://www.f-secure.com] , though be sure not to allow more than one
antivirus on-access memory-resident scanner to load when Windows starts.

If you suspect something malicious like a trojan or intruder, you might also
download trojan scanners such as www.pestpatrol.com ,
www.sunbelt-software.com / www.gfi.com, etc., run fport from
www.foundstone.com, look for any new login IDs created on your machine,
search for files on your computer that were modified in the last day or
three, etc.

"Darryn Schneider" <darryn@schneed.com> wrote in message
news:722301c24c0c$153e2cf0$2ae2c90a@phx.gbl...
> Hello-
>
> I'm currently working with 2 machines that are networked
> together, both loaded with Win2k Professional. We've been
> up and running fine for over a year. Then one day last
> week the two computers would not allow access to one
> another. It was then that I realized upon startup that a
> secedit window would show up briefly on both computer
> screens for just a second. This never happened in the
> past. Around this same time, I had received a few viruses
> that Norton found in emails and had quarantined. I still
> never got to the bottom of the networking issue and
> decided to format both computers, reinstall windows and
> start again. This solution worked fine so I assumed the
> virus caused this weird issue. But now 4 days into the 2
> computers working fine and sharing perfectly, the same
> issue is happening again (and i haven't received any new
> viruses) I never changed any settings on either computer.
> And I just went to try and access a file on the other
> machine and got an error message (the same ones I was
> getting in the past). The error says the following:
> \\Mrk is not accessible
> Logon failure: the user has not been granted the requested
> logon type at this computer.
> (Mrk is the name of 1 computer)
>
> Upon restarting both computers, i'm noticing this weird
> secedit box load on the screen briefly (which hadn't
> happened in the past)
>
> It seems as if win2k is automatically changing my security
> settings for some reason and not granting access to the
> shared computers and doing something with secedit.
>
> Is there any out there who may have an explanation for
> this problem a potential resolution? Your help would be
> greatly appreciated.



Relevant Pages

  • Re: Applying Domain Group policy - user configuration
    ... i tried gpudate and secedit, in the log it says group policy has been refreshed. ... for the computer settings, ... I've tried to force the group policy by using command such as GPudate ...
    (microsoft.public.win2000.group_policy)
  • Re: WMI missing security settings
    ... This means there is no programming interface to get those settings. ... secedit fails to export any settings on Windows XP, w/o a patch. ... "Using SECEDIT to Force a Group Policy Refresh Immediately" ...
    (microsoft.public.platformsdk.security)
  • RE: Several Problems; how to reset security and troubleshoot serve
    ... On the SBS security settings; I accept your response, ... On the Remote Assistance Issue I have check all of the settings as you ... What started me on the path of security problem was I had a simular problem ... Start the Microsoft Management Console Group Policy snap-in. ...
    (microsoft.public.windows.server.sbs)
  • Re: iNTERACTIVE LOGON welcome screen - make it go away
    ... I created a custom ADM file for these two settings ... and imported it into the GPO under the Computer Administritative templates. ... really great expertise in Group Policy often reply to posts including ... doing a gpupdate on that domain controller which ideally would be the ...
    (microsoft.public.windowsxp.security_admin)
  • Re: group policy scrolling marquee
    ... Policy at the same time a great robust platform for configuration management ... is launced via one of the four events available through Group Policy but the ... to store their settings in one of two places. ... > As for the Marquee screen saver you'll note that the settings (including ...
    (microsoft.public.win2000.group_policy)

Quantcast