RE: XP Security

From: Lee (lee.peterson_at_state.mn.us)
Date: 07/22/03 

Date: Tue, 22 Jul 2003 08:04:27 -0700

Hi Steven,

I tried that command several times. I even tried
the /Overwrite option, all with the same result - no
change. I don't get any error messages when I re-join
the NT 4.0 domain. However, I did get an error message
once when joining the Windows 2000 Domain saying
something about the trust relationship failing between
the computer and the domain, or the domain controller, I
don't remember which. But, I seemed to get into the 2000
domain later anyway without any error messages. The
event log even says that the group policy was applied
successfully. We have ISA server, but the client was
removed from one of the computers. I disable it on the
other one, and re-set the option in IE, but that didn't
seem to help either.

Unfortunately, these are a user's machines, so I don't
have access to them all the time. I'm setting up another
machine for one of the users to use temporarily so I can
have full access to the computer that's giving me
trouble. I'm trying to join the computer to a Windows
2000 domain. I moved 20 computer to the WIN2000 domain
on July 13th. 2 out of those 20 computer now have this
problem. The computers do show up in Active Directory
after joing the domain - with properties just like the
rest of the computers in the domain.

: - )

Lee

>-----Original Message-----
>Hi Lee,
>
>Let's perform the steps in the following article to
reset the security
>settings to default.
>
>313222 HOW TO: Reset Security Settings Back to the
Defaults
>http://support.microsoft.com/?id=313222
>
>If you have the firewall installed, please disable it
and then join the NT4
>domain again.
>
>When you try to join the computer to the NT4 domain,
what error did you
>encounter?
>
>Thanks for using Microsoft News Group!
>
>Sincerely,
>
>Steven Liu
>
>Microsoft Online Partner Support
>
>MCSE 2000
>
>Get Secure! ¨C www.microsoft.com/security
>
>This posting is provided Ħ°as isĦħ with no warranties
and confers no rights.
>--------------------
>| Content-Class: urn:content-classes:message
>| From: "Lee" <lee.peterson@state.mn.us>
>| Sender: "Lee" <lee.peterson@state.mn.us>
>| References: <012f01c34c78$e13db510$a101280a@phx.gbl>
><OsbLRhRTDHA.1640@cpmsftngxa06.phx.gbl>
><0bd101c34d2e$0c97dfa0$a501280a@phx.gbl>
><MT5P5KTTDHA.2416@cpmsftngxa06.phx.gbl>
><008401c34d3b$ca13cb90$a101280a@phx.gbl>
><QLNeKbUTDHA.2284@cpmsftngxa06.phx.gbl>
>| Subject: RE: XP Security
>| Date: Fri, 18 Jul 2003 09:46:47 -0700
>| Lines: 266
>| Message-ID: <0d7001c34d4c$2dba1950$a601280a@phx.gbl>
>| MIME-Version: 1.0
>| Content-Type: text/plain;
>| charset="iso-8859-1"
>| Content-Transfer-Encoding: quoted-printable
>| X-Newsreader: Microsoft CDO for Windows 2000
>| X-MIMEOLE: Produced By Microsoft MimeOLE
V5.50.4910.0300
>| Thread-Index: AcNNTC26WAKPjaEwTR6KVsctiKpn0g==
>| Newsgroups: microsoft.public.windowsxp.security_admin
>| Path: cpmsftngxa06.phx.gbl
>| Xref: cpmsftngxa06.phx.gbl
microsoft.public.windowsxp.security_admin:68138
>| NNTP-Posting-Host: TK2MSFTNGXA14 10.40.1.166
>| X-Tomcat-NG: microsoft.public.windowsxp.security_admin
>|
>| Been there. Done that. Problem persists. Please see
my
>| message posted at 8:58 am today.
>| >-----Original Message-----
>| >Hi Lee,
>| >
>| >You need do nothing with the error. We can just
ignore
>| it.
>| >
>| >For more information, you can refer to teh article:
>| >
>| >810616 PRB: Warning Error 1517 in Event Viewer after
>| First Restart
>| >http://support.microsoft.com/?id=810616
>| >
>| >Thanks for using Microsoft News Group!
>| >
>| >Sincerely,
>| >
>| >Steven Liu
>| >
>| >Microsoft Online Partner Support
>| >
>| >MCSE 2000
>| >
>| >Get Secure! ¨C www.microsoft.com/security
>| >
>| >This posting is provided Ħ°as isĦħ with no warranties
>| and confers no rights.
>| >--------------------
>| >| Content-Class: urn:content-classes:message
>| >| From: "Lee" <lee.peterson@state.mn.us>
>| >| Sender: "Lee" <lee.peterson@state.mn.us>
>| >| References: <012f01c34c78$e13db510
$a101280a@phx.gbl>
>| ><OsbLRhRTDHA.1640@cpmsftngxa06.phx.gbl>
>| ><0bd101c34d2e$0c97dfa0$a501280a@phx.gbl>
>| ><MT5P5KTTDHA.2416@cpmsftngxa06.phx.gbl>
>| >| Subject: RE: XP Security
>| >| Date: Fri, 18 Jul 2003 07:49:28 -0700
>| >| Lines: 186
>| >| Message-ID: <008401c34d3b$ca13cb90$a101280a@phx.gbl>
>| >| MIME-Version: 1.0
>| >| Content-Type: text/plain;
>| >| charset="iso-8859-1"
>| >| Content-Transfer-Encoding: quoted-printable
>| >| X-Newsreader: Microsoft CDO for Windows 2000
>| >| X-MIMEOLE: Produced By Microsoft MimeOLE
>| V5.50.4910.0300
>| >| Thread-Index: AcNNO8oT57C2ngPcSI2OFvK1/3RJ+w==
>| >| Newsgroups:
microsoft.public.windowsxp.security_admin
>| >| Path: cpmsftngxa06.phx.gbl
>| >| Xref: cpmsftngxa06.phx.gbl
>| microsoft.public.windowsxp.security_admin:68123
>| >| NNTP-Posting-Host: TK2MSFTNGXA09 10.40.1.161
>| >| X-Tomcat-NG:
microsoft.public.windowsxp.security_admin
>| >|
>| >| HI Steven:
>| >| EVENT ID 1517:
>| >| Windows saved user MDVA\Administrator registry
while
>| an
>| >| application or service was still using the registry
>| >| during log off. The memory used by the user's
registry
>| >| has not been freed. The registry will be unloaded
when
>| it
>| >| is no longer in use.
>| >| This is often caused by services running as a user
>| >| account, try configuring the services to run in
either
>| >| the LocalService or NetworkService account.
>| >| I also received a EVENT ID 1516 about 7 second
later:
>| >| Windows unloaded user MDVA\Administrator registry
when
>| it
>| >| received a notification that no other applications
or
>| >| services were using the profile.
>| >| The Knowledgebase article related to this issue
stated
>| >| that I don't need to do anything about this
message.
>| >| However, I still can't make any setting changes to
the
>| >| computer no matter how I log in. I could add and
>| delete
>| >| users though. I could not edit the local group
>| policy.
>| >| We cannot print, and the user cannot use Outlook
(the
>| >| error message just says "Cannot start Microsoft
>| >| Outlok.") This is happening on two XP Pro
>| workstations,
>| >| and it started after I joined them to a new Windows
>| 2000
>| >| domain.
>| >| I get a "Loading your settings failed. (Access is
>| >| denied)" Whenever I boot the machine, and when I
just
>| >| log off and log on again without re-booting. There
>| were
>| >| also some errors about ActiveX controls not working
>| >| (earlier in the week), but I'm not getting them now.
>| >| I hope this helps. If you need more information,
let
>| me
>| >| know.
>| >| Thanks for your help!
>| >| : - )
>| >| Lee
>| >| >-----Original Message-----
>| >| >Hi Lee,
>| >| >
>| >| >Would you please paste the detail error of the
event
>| >| error?
>| >| >
>| >| >I will continue to help you.
>| >| >
>| >| >Thanks for using Microsoft News Group!
>| >| >
>| >| >Sincerely,
>| >| >
>| >| >Steven Liu
>| >| >
>| >| >Microsoft Online Partner Support
>| >| >
>| >| >MCSE 2000
>| >| >
>| >| >Get Secure! ¨C www.microsoft.com/security
>| >| >
>| >| >This posting is provided Ħ°as isĦħ with no
warranties
>| >| and confers no rights.
>| >| >--------------------
>| >| >| Content-Class: urn:content-classes:message
>| >| >| From: "Lee" <lee.peterson@state.mn.us>
>| >| >| Sender: "Lee" <lee.peterson@state.mn.us>
>| >| >| References: <012f01c34c78$e13db510
>| $a101280a@phx.gbl>
>| >| ><OsbLRhRTDHA.1640@cpmsftngxa06.phx.gbl>
>| >| >| Subject: RE: XP Security
>| >| >| Date: Fri, 18 Jul 2003 06:11:07 -0700
>| >| >| Lines: 81
>| >| >| Message-ID: <0bd101c34d2e$0c97dfa0
$a501280a@phx.gbl>
>| >| >| MIME-Version: 1.0
>| >| >| Content-Type: text/plain;
>| >| >| charset="iso-8859-1"
>| >| >| Content-Transfer-Encoding: quoted-printable
>| >| >| X-Newsreader: Microsoft CDO for Windows 2000
>| >| >| Thread-Index: AcNNLgyXP2ehQ+JsRl22DZ3DmgSieA==
>| >| >| X-MimeOLE: Produced By Microsoft MimeOLE
>| >| V5.50.4910.0300
>| >| >| Newsgroups:
>| microsoft.public.windowsxp.security_admin
>| >| >| Path: cpmsftngxa06.phx.gbl
>| >| >| Xref: cpmsftngxa06.phx.gbl
>| >| microsoft.public.windowsxp.security_admin:68113
>| >| >| NNTP-Posting-Host: TK2MSFTNGXA13 10.40.1.165
>| >| >| X-Tomcat-NG:
>| microsoft.public.windowsxp.security_admin
>| >| >|
>| >| >| Hi Steven,
>| >| >| Thanks for your response. I tried it, but there
>| was
>| >| no
>| >| >| change. I think it has something to do with the
>| 1517
>| >| >| error, but there are no services running under
the
>| >| user's
>| >| >| account.
>| >| >| : - )
>| >| >| Lee
>| >| >| >-----Original Message-----
>| >| >| >Hi Lee,
>| >| >| >
>| >| >| >Try to log on the computer with the local admin
>| and
>| >| logon
>| >| >| to local
>| >| >| >computer. Then, backup the user profile of the
>| domain
>| >| >| user. Then, delete
>| >| >| >the 2 domain user account.
>| >| >| >
>| >| >| >Then, add the domain user to local
administrator
>| >| group.
>| >| >| And logon the
>| >| >| >domain again. If all works well, remove the
domain
>| >| user
>| >| >| from local
>| >| >| >administrator if necessary.
>| >| >| >
>| >| >| >Thanks for using Microsoft News Group!
>| >| >| >
>| >| >| >Sincerely,
>| >| >| >
>| >| >| >Steven Liu
>| >| >| >
>| >| >| >Microsoft Online Partner Support
>| >| >| >
>| >| >| >MCSE 2000
>| >| >| >
>| >| >| >Get Secure! ¨C www.microsoft.com/security
>| >| >| >
>| >| >| >This posting is provided Ħ°as isĦħ with no
>| warranties
>| >| and
>| >| >| confers no rights.
>| >| >| >--------------------
>| >| >| >| Content-Class: urn:content-classes:message
>| >| >| >| From: "Lee Peterson"
<lee.peterson@state.mn.us>
>| >| >| >| Sender: "Lee Peterson"
<lee.peterson@state.mn.us>
>| >| >| >| Subject: XP Security
>| >| >| >| Date: Thu, 17 Jul 2003 08:34:15 -0700
>| >| >| >| Lines: 12
>| >| >| >| Message-ID: <012f01c34c78$e13db510
>| $a101280a@phx.gbl>
>| >| >| >| MIME-Version: 1.0
>| >| >| >| Content-Type: text/plain;
>| >| >| >| charset="iso-8859-1"
>| >| >| >| Content-Transfer-Encoding: 7bit
>| >| >| >| X-Newsreader: Microsoft CDO for Windows 2000
>| >| >| >| X-MimeOLE: Produced By Microsoft MimeOLE
>| >| V5.50.4910.0300
>| >| >| >| Thread-Index: AcNMeOE9NqeU3+GuQEiD9BlCgqx9UQ==
>| >| >| >| Newsgroups:
>| >| microsoft.public.windowsxp.security_admin
>| >| >| >| Path: cpmsftngxa06.phx.gbl
>| >| >| >| Xref: cpmsftngxa06.phx.gbl
>| >| >| microsoft.public.windowsxp.security_admin:67894
>| >| >| >| NNTP-Posting-Host: TK2MSFTNGXA09 10.40.1.161
>| >| >| >| X-Tomcat-NG:
>| >| microsoft.public.windowsxp.security_admin
>| >| >| >|
>| >| >| >| I recently moved an XP Pro workstation from
an
>| NT 4
>| >| >| domain
>| >| >| >| to a Windows 2000 domain. Now, the machine
is
>| >| totally
>| >| >| >| locked down and we are unable to make any
>| setting
>| >| >| changes
>| >| >| >| (wallpaper, file locations in Word, or chagne
>| the
>| >| group
>| >| >| >| policy), either as the user, the domain
admin,
>| or
>| >| the
>| >| >| >| machine admin. I tried resetting security
>| setting
>| >| >| >| according to the details in MS Knowledge Base
>| >| Article -
>| >| >| >| 313222, but that didn't change anything.
When
>| we
>| >| boot
>| >| >| the
>| >| >| >| machine, we got an error message that
>| said "Loading
>| >| >| your
>| >| >| >| settings failed. (Access is denied) We're
also
>| >| getting
>| >| >| a
>| >| >| >| windows Script Host error message and event
>| codes
>| >| 1516
>| >| >| and
>| >| >| >| 1517 appear in the Application event log.
>| >| >| >|
>| >| >| >
>| >| >| >.
>| >| >| >
>| >| >|
>| >| >
>| >| >.
>| >| >
>| >|
>| >
>| >.
>| >
>|
>
>.
>

Relevant Pages

  • RE: XP Security
    ... application or service was still using the registry ... Windows unloaded user MDVA\Administrator registry when it ... >|>Thanks for using Microsoft News Group! ...
    (microsoft.public.windowsxp.security_admin)
  • Re: Memory could not be read
    ... Windows Help, Word, but also others) I get error messages lik this (note that ... windows registry, ... HijackThis - Tutorial & FAQ; ...
    (microsoft.public.windowsxp.basics)
  • Re: Windows error message
    ... > that come up say something about the registry and delete it if nessary. ... Windows doesn't usually offer ... Says these items show up in MSCONFIG as well. ... Windows error messages don't have boxes to check ...
    (microsoft.public.windowsxp.basics)
  • Windows cannot find "C:Documents.
    ... I am having terrible problems with error messages when I turn on my PC. ... Could not load or run "'C:\Documents' specified in the registry. ... Windows cannot find 'and'. ... exists on your computer or remove the reference to it in the registry. ...
    (microsoft.public.dotnet.general)
  • Error messages when logging onto computer
    ... I am having terrible problems with error messages when I turn on my PC. ... Could not load or run "'C:\Documents' specified in the registry. ... Windows cannot find 'and'. ... exists on your computer or remove the reference to it in the registry. ...
    (microsoft.public.windowsxp.perform_maintain)