Re: Default User Serurity Permission

From: Roger Abell [MVP] (mvpNoSpam_at_asu.edu)
Date: 06/07/03 

Date: Sat, 7 Jun 2003 12:39:35 -0700

Is there any interesting information in the mentioned logfile ?

You can try making a copy of the file secsetup.inf
Then open this copy in notepad and remove everything
except the initial portion
[Unicode]
Unicode=yes
[Version]
signature="$CHICAGO$"
Revision=1
and then the [File Security] section.
Do not overlook the [Service General Setting] that follows
the [File Security] section.
Save the result.
Then Start / Run mmc
and once a new MMC console opens, click
File | Add/Remove Snap-in
then in the Add/Remove dialog click Add
Now locate the Security Config and Analysis snapin
Highlight and add it (then close + OK)
Click on the node at left under Console Root
Now right click on it selecting Open Database
Enter some filename for the new *.sdb file then
click Open, and in the next dialog navigate to the
file you saved at the start of this procedure, select
and import it.
Now, right click on the Sec Config/Analysis node
on the left and select to Analyze, accepting the
default log file (you may want to make note of
where it is in case you need to look in it).
If you were to now click around in the new nodes on
the left you should find nothing configured except under
the File System node.
You then need to right click on the Sec Config / Analysis
node and select Configure 

-- 
Roger
"Bill" <private_1000@hotmail.com> wrote in message
news:00b001c32d26$3e80ee30$a501280a@phx.gbl...
> Hi Roger,
>
> I tried the http://support.microsoft.com/?id=313222
>
> To reset your operating system back to original
> installation default security settings:
> Click Start, click Run, type cmd, and then press ENTER.
> Type secedit /configure /cfg %windir%
> \repair\secsetup.inf /db secsetup.sdb /verbose, and then
> press ENTER. You receive a "Task is completed" message,
> and a warning message that something could not be done.
> You can safely ignore this message. For more information
> about this message, view the %windir%
> \Security\Logs\Scesrv.log file.
>
> However, it did nothing-I never received the "Task is
> completed" message or anything else for that matter. I
> checked and rechecked the proper syntax, but it did not
> work. I have not tried anything regarding getting the
> application to work. First, I want to restore the default
> security settings.
>
> By the way, I never renamed/deleted anything within the
> profiles, I just changed them. Also, when I refer to a
> workgroup environment, I only have one computer and have
> setup user accounts for my children. Thus simulating a
> workgroup enviroment.
>
> Thanks for tyring Roger, it is appreciated!
>
> >-----Original Message-----
> >IT sounds as if you only need to get NTFS permissions
> >back to a known config state.  This should help in Pro
> >Restore XP to installation Security Defaults
> >   for Pro see:  http://support.microsoft.com/?id=313222
> >If you renamed/deleted things within the profiles this is
> >not going to adjust for that.
> >On the running of apps that are illbehaved, this may help
> >Run programs as Limited/Restricted accounts
> >
> >This is commonly seen from applications that fail to
> meet the Windows
> >Certification requirements.
> >Some apps make use of calls that are no longer
> supported, and for
> >these use of the application compatibility tool may help.
> >Beyond that, the first thing to try is to grant the
> Users group modify on
> >the area where the application has installed, usually a
> folder within
> >Program Files.
> >If this is insufficient, then very often one or both of
> the next increased
> >grants to Users group helps
> >1. some folder outside of the app install point where
> >    attempts are made to create temp files or specific
> >    files such as the app's self-installed ini file in
> the
> >    Windows dir structure
> >2. the registry keys of the application
> >The regmon and filemon tools from www.sysinternals.com
> can help one
> >determine what accesses are being attempted but are
> denied to Users only
> >accounts.
> >
> >"Bill" <private_1000@hotmail.com> wrote in message
> >news:096201c32cdc$745635a0$a101280a@phx.gbl...
> >> Hi,
> >>
> >> Can someone help me restore the default users' security
> >> permission profile in a workgroup environment using
> NTFS
> >> in Windows XP Pro version 2002 Service Pack 1? In fact,
> >> maybe I should restore all the defaults for Guest,
> User,
> >> and Admin
> >>
> >> I tried to get a legacy program (Readers Rabbit's Math
> >> Ages 4-6), which worked fine when logged on as an
> >> administrator, to work in my kids profiles (users'
> >> [limited]) and also the guest profile in Windows XP
> Pro.
> >> So I right clicked the C drive, chose properties, and
> >> then chose the security tab and made some adjustments
> to
> >> the user profile. These adjustments got the legacy
> >> program working. However, now one user can read and
> write
> >> to all other users accounts-including the
> administrators
> >> account. In fact, all users have read/write access to
> the
> >> entire C:\ drive. This is not what I intended, I only
> >> want to allow my children to run their programs and
> have
> >> access to their documents. I would have used the
> restore
> >> function, but I had disabled it-I have re-enabled it
> for
> >> future occurrences like these.
> >>
> >> The most important thing for me at this point is to
> reset
> >> the default security profiles. However, advice on
> getting
> >> this legacy program working while maintaining control
> >> would also be greatly appreciated. I've tried the
> >> compatibility wizard included with XP Pro, but it did
> not
> >> work. This application might be writing to the temp
> file
> >> so maybe if I gave write permission to the temp file it
> >> might work. But which temp file, there are several.
> >> Anyway,
> >>
> >> I'm starting to ramble. If anyone can help it would be
> >> greatly appreciated. THANK YOU!
> >>
> >
> >
> >.
> >

Relevant Pages

  • Re: Default User Serurity Permission
    ... Restore XP to installation Security Defaults ... If you renamed/deleted things within the profiles this is ... This application might be writing to the temp file ...
    (microsoft.public.windowsxp.security_admin)
  • Re: Default User Serurity Permission
    ... installation default security settings: ... profiles, I just changed them. ... >Restore XP to installation Security Defaults ...
    (microsoft.public.windowsxp.security_admin)
  • Re: DESKTOP
    ... RESTORE IT OPENS IN MAX SCREEN POSITION BUT CLICKING THE MIN IT DISSAPEARS ... "Anyone who prefers security over freedom deserves neither." ...
    (microsoft.public.windowsxp.general)
  • Re: KB943460 / Software Distribution Service 3.0 System Restore Pr
    ... I'm not either but it's certainly a distinct possibility, especially since you're relying on McAfee Security Center. ... If you'd installed SP3 and then Windows Update offered the machine KB943460, something's VERY wrong with your computer! ... Once Windows Update runs it sets up system restore point under the heading ... KB943460 specifically I just install all the updates. ...
    (microsoft.public.windowsxp.general)
  • Re: I cant select text using word 2007.
    ... With this being a new load with no profiles on the machine, ... Logging in as another user loads templates and add-ins from a different ... It's highly unlikely that the problem is the result of a security patch -- ... If you hover over the scroll bar, ...
    (microsoft.public.word.application.errors)