RE: XP Security

From: Lee (lee.peterson_at_state.mn.us)
Date: 07/18/03


Date: Fri, 18 Jul 2003 08:58:59 -0700


Here is some additional information. I tried jutting the
workstation back in the old domain, and (quite magically)
all the previous administrator rights over the machine
were returned to "normal." However, when I went back to
the new domain they were lost.

: - )

Lee
>-----Original Message-----
>HI Steven:
>EVENT ID 1517:
>Windows saved user MDVA\Administrator registry while an
>application or service was still using the registry
>during log off. The memory used by the user's registry
>has not been freed. The registry will be unloaded when
it
>is no longer in use.
>
> This is often caused by services running as a user
>account, try configuring the services to run in either
>the LocalService or NetworkService account.
>
>I also received a EVENT ID 1516 about 7 second later:
>Windows unloaded user MDVA\Administrator registry when
it
>received a notification that no other applications or
>services were using the profile.
>
>The Knowledgebase article related to this issue stated
>that I don't need to do anything about this message.
>However, I still can't make any setting changes to the
>computer no matter how I log in. I could add and delete
>users though. I could not edit the local group policy.
>We cannot print, and the user cannot use Outlook (the
>error message just says "Cannot start Microsoft
>Outlok.") This is happening on two XP Pro workstations,
>and it started after I joined them to a new Windows 2000
>domain.
>I get a "Loading your settings failed. (Access is
>denied)" Whenever I boot the machine, and when I just
>log off and log on again without re-booting. There were
>also some errors about ActiveX controls not working
>(earlier in the week), but I'm not getting them now.
>
>I hope this helps. If you need more information, let me
>know.
>
>Thanks for your help!
>: - )
>Lee
>>-----Original Message-----
>>Hi Lee,
>>
>>Would you please paste the detail error of the event
>error?
>>
>>I will continue to help you.
>>
>>Thanks for using Microsoft News Group!
>>
>>Sincerely,
>>
>>Steven Liu
>>
>>Microsoft Online Partner Support
>>
>>MCSE 2000
>>
>>Get Secure! ¨C www.microsoft.com/security
>>
>>This posting is provided Ħ°as isĦħ with no warranties
>and confers no rights.
>>--------------------
>>| Content-Class: urn:content-classes:message
>>| From: "Lee" <lee.peterson@state.mn.us>
>>| Sender: "Lee" <lee.peterson@state.mn.us>
>>| References: <012f01c34c78$e13db510$a101280a@phx.gbl>
>><OsbLRhRTDHA.1640@cpmsftngxa06.phx.gbl>
>>| Subject: RE: XP Security
>>| Date: Fri, 18 Jul 2003 06:11:07 -0700
>>| Lines: 81
>>| Message-ID: <0bd101c34d2e$0c97dfa0$a501280a@phx.gbl>
>>| MIME-Version: 1.0
>>| Content-Type: text/plain;
>>| charset="iso-8859-1"
>>| Content-Transfer-Encoding: quoted-printable
>>| X-Newsreader: Microsoft CDO for Windows 2000
>>| Thread-Index: AcNNLgyXP2ehQ+JsRl22DZ3DmgSieA==
>>| X-MimeOLE: Produced By Microsoft MimeOLE
>V5.50.4910.0300
>>| Newsgroups: microsoft.public.windowsxp.security_admin
>>| Path: cpmsftngxa06.phx.gbl
>>| Xref: cpmsftngxa06.phx.gbl
>microsoft.public.windowsxp.security_admin:68113
>>| NNTP-Posting-Host: TK2MSFTNGXA13 10.40.1.165
>>| X-Tomcat-NG: microsoft.public.windowsxp.security_admin
>>|
>>| Hi Steven,
>>| Thanks for your response. I tried it, but there was
>no
>>| change. I think it has something to do with the 1517
>>| error, but there are no services running under the
>user's
>>| account.
>>| : - )
>>| Lee
>>| >-----Original Message-----
>>| >Hi Lee,
>>| >
>>| >Try to log on the computer with the local admin and
>logon
>>| to local
>>| >computer. Then, backup the user profile of the
domain
>>| user. Then, delete
>>| >the 2 domain user account.
>>| >
>>| >Then, add the domain user to local administrator
>group.
>>| And logon the
>>| >domain again. If all works well, remove the domain
>user
>>| from local
>>| >administrator if necessary.
>>| >
>>| >Thanks for using Microsoft News Group!
>>| >
>>| >Sincerely,
>>| >
>>| >Steven Liu
>>| >
>>| >Microsoft Online Partner Support
>>| >
>>| >MCSE 2000
>>| >
>>| >Get Secure! ¨C www.microsoft.com/security
>>| >
>>| >This posting is provided Ħ°as isĦħ with no
warranties
>and
>>| confers no rights.
>>| >--------------------
>>| >| Content-Class: urn:content-classes:message
>>| >| From: "Lee Peterson" <lee.peterson@state.mn.us>
>>| >| Sender: "Lee Peterson" <lee.peterson@state.mn.us>
>>| >| Subject: XP Security
>>| >| Date: Thu, 17 Jul 2003 08:34:15 -0700
>>| >| Lines: 12
>>| >| Message-ID: <012f01c34c78$e13db510
$a101280a@phx.gbl>
>>| >| MIME-Version: 1.0
>>| >| Content-Type: text/plain;
>>| >| charset="iso-8859-1"
>>| >| Content-Transfer-Encoding: 7bit
>>| >| X-Newsreader: Microsoft CDO for Windows 2000
>>| >| X-MimeOLE: Produced By Microsoft MimeOLE
>V5.50.4910.0300
>>| >| Thread-Index: AcNMeOE9NqeU3+GuQEiD9BlCgqx9UQ==
>>| >| Newsgroups:
>microsoft.public.windowsxp.security_admin
>>| >| Path: cpmsftngxa06.phx.gbl
>>| >| Xref: cpmsftngxa06.phx.gbl
>>| microsoft.public.windowsxp.security_admin:67894
>>| >| NNTP-Posting-Host: TK2MSFTNGXA09 10.40.1.161
>>| >| X-Tomcat-NG:
>microsoft.public.windowsxp.security_admin
>>| >|
>>| >| I recently moved an XP Pro workstation from an NT
4
>>| domain
>>| >| to a Windows 2000 domain. Now, the machine is
>totally
>>| >| locked down and we are unable to make any setting
>>| changes
>>| >| (wallpaper, file locations in Word, or chagne the
>group
>>| >| policy), either as the user, the domain admin, or
>the
>>| >| machine admin. I tried resetting security setting
>>| >| according to the details in MS Knowledge Base
>Article -
>>| >| 313222, but that didn't change anything. When we
>boot
>>| the
>>| >| machine, we got an error message that
said "Loading
>>| your
>>| >| settings failed. (Access is denied) We're also
>getting
>>| a
>>| >| windows Script Host error message and event codes
>1516
>>| and
>>| >| 1517 appear in the Application event log.
>>| >|
>>| >
>>| >.
>>| >
>>|
>>
>>.
>>
>.
>



Relevant Pages

  • Re: Outlook, no permission to logon
    ... Please check the RPC_Binding_Order registry value on the machine. ... The RPC_Binding_Order entry is created when you install the Outlook client ... Microsoft CSS Online Newsgroup Support ... Please create a new profile on the workstation to test the issue, ...
    (microsoft.public.windows.server.sbs)
  • RE: DNSAdmins Group Permissions
    ... Thank you for choosing Microsoft and for using our Newsgroups. ... Get the current "CustomSD" registry setting for the DNS Server Event ... These rights correspond to the ... The following is a sample SDDL that shows the default SDDL string for the ...
    (microsoft.public.win2000.dns)
  • Re: Cannot migrate a Windows XP station from a W2K domain to a W2K3 domain
    ... This article contains information about modifying the registry. ... > the following article in the Microsoft Knowledge Base: ... Import the registry to the workstation that is experiencing this problem. ... >>because the new server replace the old one. ...
    (microsoft.public.windows.server.migration)
  • RE: IIS Security vs The Registry
    ... >accessing these registry keys... ... determine which account ... Microsoft, call ... confers no rights. ...
    (microsoft.public.inetserver.iis.security)
  • Re: Scottish Feudal Barony titles- the sales game is over.
    ... Scottish feudal baronies, ... these are the very few manors that have any rights still ... specifically mentioned in the body of the registry extract. ...
    (rec.heraldry)