Re: problems with admin tools

From: Roger Abell (mvpNOSpam_at_asu.edu)
Date: 12/20/03


Date: Sat, 20 Dec 2003 10:42:05 -0700

That simply doing a start / run of mmc does this is some
key info you have turned up.
mmc.exe is in Windows\System32 and it should have
received inherited permissions from Windows\System32
granting Users Read/Execute, Power Users Modify, and
Administrators and System Full.
As simply running mmc giving this shows that it is not
(or not ony) an issue with mmc loading the snap-in (as
could be the case with the preconfigured tools), but it
may still be an issue with mmc.exe access its dll library
files when it starts.

Is your system Pro or Home ? The reason I ask is that
there is a way for Pro to reset the NTFS permissions of
its basic filesystem area, but I do not know of a similar
procedure for Home.
Restore XP to installation Security Defaults
  for Pro see: http://support.microsoft.com/?id=313222
  where you would want to be sure that you specifiy only
  the filestore area.

Perhaps obtaining the filemon (and in case while there the regmon)
tools from www.sysinternals.com would help figure where
the permissions have been shifted, if it is not obvious that it
is at Windows\System32, where it is normal to find 5 grants
that are not inherited from above.
Users Read&Execute
Power Users Modify
Administrators Full Control
System Full Control
Creator Owner a special grant of
   Full Control for Subfolders and Files only

If nothing else, you can view and change these in the
properties of the folder when in a Safe mode boot.
If you change anything, do not check the checkbox to
Replace permissions on child objects
What I have quoted above is what you would see if
you clicked into the Advanced view when in the
Security dialog.

-- 
Roger Abell
Microsoft MVP (Windows Server System: Security)
MCSE (W2k3,W2k,Nt4)  MCDBA
<anonymous@discussions.microsoft.com> wrote in message
news:013301c3c657$5e5a0c80$a301280a@phx.gbl...
> This message comes up when I try to open Computer
> Management, Event Viewer, Performance, etc. Anything
> located under the Admin Tools Folder (the folder opens but
> it those files that I'm having a problem with).  I also
> get the same message when I tried to Start/Run "mmc".  I'm
> worried that I may have screwed something up.  A few
> months back I had several problems with the computer
> (Sobig virus to name one).  Everything seems to be fine
> now with the exception of this.  I'm not a basic user but
> I'm no MVP either! Any suggestion are MORE than
> appreciated!
> >-----Original Message-----
> >You get this message when ?
> >Is it when the admin tools list populates, or when
> >you try to run a tool ?  Every single tool, or specific
> >ones, and if so examples of which ones would help.
> >
> >-- 
> >Roger Abell
> >Microsoft MVP (Windows Server System: Security)
> >MCSE (W2k3,W2k,Nt4)  MCDBA
> ><anonymous@discussions.microsoft.com> wrote in message
> >news:05b501c3c5cc$a0c8f2b0$a301280a@phx.gbl...
> >> I've posted and I've seen other posts in regards to the
> >> same problem that I am having,but have not seen any
> >> replies.  I cannot access any files that are located
> under
> >> my Admin tools.  I get the message "Windows cannot
> access
> >> the specified device, path or file.  You may not have
> the
> >> appropriate permissions to access the item."  I am
> logged
> >> on  as Administrator and have not been able to correct
> >> this, or find any help anywhere.  Any advice is
> welcome, I
> >> don't know if this is just something simple that I am
> >> overlooking, or something I may have done in error while
> >> trying to fix many other issues I was having a while
> back.
> >>  Any help??
> >
> >
> >.
> >


Relevant Pages

  • Re: Problem Connecting to Windowss 2000 Pro Share
    ... Microsoft MVP (Windows Server System: Security) ... Everyone with all permissions checked. ...
    (microsoft.public.windowsxp.security_admin)
  • RE: How to see Service Permissions ?
    ... >> I am able set sevice permissions using security templates ... >> and enforce using MMC ... >> How could i see the permissions after enforcing using MMC ...
    (microsoft.public.win2000.general)
  • RE: Remotely Manage Windows Service
    ... In local security settings, under user rights assignment, can the user ... Services have ACLs just like other resources on your server. ... Now apply the policy using the Security Configuration and Analysis MMC ... all services via the MMC for the server, but the netsvc command still says ...
    (microsoft.public.windows.server.general)
  • Re: Cant run MMC - non-trivial problem
    ... (But this has to do with permissions on the installer directory, ... It may have to do with permissions on some level. ... But this was mostly dealing with running MMC ... > When I try to start any MMC applications on my system, ...
    (microsoft.public.win2000.security)
  • Re: problems with admin tools
    ... I had checked permissions for all ... >That simply doing a start / run of mmc does this is some ... >Power Users Modify ... >properties of the folder when in a Safe mode boot. ...
    (microsoft.public.windowsxp.security_admin)