822925 Cum IE Patch causes problem with XP built in admin account

Posted: 08-25-2003, 07:12 PM
Hello group,

Installing the 822925 (newest cumulative IE6 Patch) causes some weird
behavior on my XP Pro system installed on a FAT partition.

It causes the built in (renamed) Admin account to be unusable. It seems to
put all drives in restricted zone, thus each try to run anything from a
shortcut or a program folder causes the MSG "Windows cannot access the
specified device, path or file. You may not have the appropriate permission
to access the item."

I can run explorer from the run command and see in the status bar, that My
Computer shows up as being in the My Computer zone, but all drive letters
(including floppy) show up as being in Restricted sites zone.

Running MMC and opening services gives an error MSG for expanded view AKA
"will not be displayed properly, because ActiveX controls are not allowed to
run."

Services run, but no programs (e.g. Zonealarm's True Vector loads, but ZA
GUI does not run, as it would need to be started from All Users Autostart.)
Very much looks as if all and everything is in Restricted zone.

I have seen at least two others posting with this problem.

"andy" <duckati@ntlworld.com> wrote in message
news:079c01c36987$b31560d0$a601280a@phx.gbl...

"sj" <dj_sjay@hotmail.com> wrote in message
news:3f472899$1@duster.adelaide.on.net...

They have not gotten any replies though so far. So I try as well ;-).

Another existing admin account can be used just fine, as well as a normal
user account.

Trying to troubleshoot this problem, I imported the Current User IE
zone settings from the working admin account to the not working one before
installing the patch. Rebooted several times between several tries of
installing the patch to a repeatedly restored and changed original. No Luck.

Event log is no help (can't see any possibly related errors, as far as I can
tell).

Tried install with a re-downloaded patch --> makes no difference.
Tried online install from Windows Update --> makes no difference.

If the weird behavior was occurring in another admin account, I would just
create a new one (a new one created with the patch already installed works
just fine). But as it's causing the built in admin account to work no more
...?

Further testing showed, that my problem seems to be caused by the new
URLMON.DLL. If I replace just this dll with the old one, the built in admin
account is working again.

So at the moment it looks, as if I can choose between a functional built in
admin account or using the updated urlmon.dll.

I would appreciate any pointers, that could help me troubleshoot. Thanks!

--
Best Regards
HiMan


822925 Cum IE Patch causes problem with XP built in admin account


Responses to "822925 Cum IE Patch causes problem with XP built in admin account"

PA Bear
Guest
Posts: n/a
 
Re: 822925 Cum IE Patch causes problem with XP built in admin account
Posted: 08-26-2003, 01:37 AM
Are your virus definitions up-to-date? Have you run a full system scan
after downloading new definitions? I suggest ruling this possibility out.

Have you installed all of the latest criticals via Windows Update? Do you
disable your anti-virus application prior to installing updates and patches?

Did you try uninstalling Q822925 (Add/Remove Programs>Internet Explorer
Q822925) and installing it anew (per the above) via Windows Update?

A much better forum for this query would be

news://msnews.microsoft.com/microsof...dowsxp.general

HTH...Please post back to this thread

~Robear Dyer (aka PA Bear)
MS MVP-Windows (IE/OE)
http://mvp.support.microsoft.com

HiMan wrote:
>> Installing the 822925 (newest cumulative IE6 Patch) causes some weird
>> behavior on my XP Pro system installed on a FAT partition.
>>
>> It causes the built in (renamed) Admin account to be unusable. It
>> seems to put all drives in restricted zone, thus each try to run
>> anything from a shortcut or a program folder causes the MSG "Windows
>> cannot access the specified device, path or file. You may not have
>> the appropriate permission to access the item."
>>
>> I can run explorer from the run command and see in the status bar,
>> that My Computer shows up as being in the My Computer zone, but all
>> drive letters (including floppy) show up as being in Restricted
>> sites zone.
>>
>> Running MMC and opening services gives an error MSG for expanded
>> view AKA "will not be displayed properly, because ActiveX controls
>> are not allowed to run."
>>
>> Services run, but no programs (e.g. Zonealarm's True Vector loads,
>> but ZA GUI does not run, as it would need to be started from All
>> Users Autostart.) Very much looks as if all and everything is in
>> Restricted zone.
>>
>> I have seen at least two others posting with this problem.
>>
>> "andy" <duckati@ntlworld.com> wrote in message
>> news:079c01c36987$b31560d0$a601280a@phx.gbl...
>>
>> "sj" <dj_sjay@hotmail.com> wrote in message
>> news:3f472899$1@duster.adelaide.on.net...
>>
>> They have not gotten any replies though so far. So I try as well
>> ;-).
>>
>> Another existing admin account can be used just fine, as well as a
>> normal user account.
>>
>> Trying to troubleshoot this problem, I imported the Current User IE
>> zone settings from the working admin account to the not working one
>> before installing the patch. Rebooted several times between several
>> tries of installing the patch to a repeatedly restored and changed
>> original. No Luck.
>>
>> Event log is no help (can't see any possibly related errors, as far
>> as I can tell).
>>
>> Tried install with a re-downloaded patch --> makes no difference.
>> Tried online install from Windows Update --> makes no difference.
>>
>> If the weird behavior was occurring in another admin account, I
>> would just create a new one (a new one created with the patch
>> already installed works just fine). But as it's causing the built in
>> admin account to work no more ..?
>>
>> Further testing showed, that my problem seems to be caused by the new
>> URLMON.DLL. If I replace just this dll with the old one, the built
>> in admin account is working again.
>>
>> So at the moment it looks, as if I can choose between a functional
>> built in admin account or using the updated urlmon.dll.
>>
>> I would appreciate any pointers, that could help me troubleshoot.
>> Thanks!
>>
>> Followup set to microsoft.public.windowsxp.security_admin, because I
>> already posted there (no answers so far) before I found this group.
HiMan
Guest
Posts: n/a
 
Re: 822925 Cum IE Patch causes problem with XP built in admin account
Posted: 08-26-2003, 02:15 AM
"PA Bear" <PABear@mvps.org> wrote in message
news:uFbdyK3aDHA.3444@tk2msftngp13.phx.gbl...

Hi PA Bear,
> Are your virus definitions up-to-date? Have you run a full system scan
> after downloading new definitions? I suggest ruling this possibility out.
Yep and yep. Done that.
> Have you installed all of the latest criticals via Windows Update? Do you
> disable your anti-virus application prior to installing updates and
> patches?
As I mentioned, I first installed the downloaded patch while offline (the
way I usually do updates). During troubleshooting I re-downloaded it, in
case there could have been some file corruption. When this made no
difference, I installed it directly from Windows Update while online. I did
always disable my AV for the install.
> Did you try uninstalling Q822925 (Add/Remove Programs>Internet Explorer
> Q822925) and installing it anew (per the above) via Windows Update?
Yes, this was one of my tests. I also tried installing via Windows Update to
a restored backup (no possible previous traces of this update). I must have
tried at least 15 install variations by now :-( . E.g. also from built in
admin account, from other admin account.
> A much better forum for this query would be
> news://msnews.microsoft.com/microsof...dowsxp.general
Thanks for pointing this out. I'm new to Microsoft newsgroups. Google found
2 related posts in microsoft.public.windowsxp.security_admin. So I first
posted there. Any advice, how to post to yet a third group without
"cluttering" the place with identical threads?
> HTH...Please post back to this thread
I'm crossposting, like you did, but would appreciate a pointer how identical
queries in different groups are usually handled on this server. Thanks!

As I mentioned, I can sort of "pinpoint" urlmon.dll as the file, that causes
this problem on my machine. What has me stumped, is that only the built in
admin account gets messed up.

Thank you for your interest!
--
Best Regards
HiMan



PA Bear
Guest
Posts: n/a
 
Re: 822925 Cum IE Patch causes problem with XP built in admin account
Posted: 08-26-2003, 02:50 AM
Please include all of the previous message in your replies. You may
crosspost to any other NG but please do so selectively.

Only other thing I can think of: Are you logged in as Administator when
installing the update(s)?

Do all of the installs leave you with Urlmon.dll version 6.00.2800.1226
(assuming 32-bit WinXP)? Anything telling in Windows Update.log?
--
~PA Bear

CC: Kelly

HiMan wrote:
>> "PA Bear" wrote...
>>> Are your virus definitions up-to-date? Have you run a full system
>>> scan after downloading new definitions? I suggest ruling this
>>> possibility out.
>>
>> Yep and yep. Done that.
>>
>>> Have you installed all of the latest criticals via Windows Update?
>>> Do you disable your anti-virus application prior to installing
>>> updates and patches?
>>
>> As I mentioned, I first installed the downloaded patch while offline
>> (the way I usually do updates). During troubleshooting I
>> re-downloaded it, in case there could have been some file
>> corruption. When this made no difference, I installed it directly
>> from Windows Update while online. I did always disable my AV for the
>> install.
>>
>>> Did you try uninstalling Q822925 (Add/Remove Programs>Internet
>>> Explorer Q822925) and installing it anew (per the above) via
>>> Windows Update?
>>
>> Yes, this was one of my tests. I also tried installing via Windows
>> Update to a restored backup (no possible previous traces of this
>> update). I must have tried at least 15 install variations by now :-(
>> . E.g. also from built in admin account, from other admin account.
>>
>>> A much better forum for this query would be
>>> news://msnews.microsoft.com/microsof...dowsxp.general
>>
>> ...Any advice, how to post to yet a third group without "cluttering"
>> the place with identical threads?
>> <snip>
>> As I mentioned, I can sort of "pinpoint" urlmon.dll as the file,
>> that causes this problem on my machine. What has me stumped, is that
>> only the built in admin account gets messed up.
<paste>
>> HiMan wrote:
>>>> Installing the 822925 (newest cumulative IE6 Patch) causes some
>>>> weird behavior on my XP Pro system installed on a FAT partition.
>>>>
>>>> It causes the built in (renamed) Admin account to be unusable. It
>>>> seems to put all drives in restricted zone, thus each try to run
>>>> anything from a shortcut or a program folder causes the MSG
>>>> "Windows cannot access the specified device, path or file. You may
>>>> not have
>>>> the appropriate permission to access the item."
>>>>
>>>> I can run explorer from the run command and see in the status bar,
>>>> that My Computer shows up as being in the My Computer zone, but all
>>>> drive letters (including floppy) show up as being in Restricted
>>>> sites zone.
>>>>
>>>> Running MMC and opening services gives an error MSG for expanded
>>>> view AKA "will not be displayed properly, because ActiveX controls
>>>> are not allowed to run."
>>>>
>>>> Services run, but no programs (e.g. Zonealarm's True Vector loads,
>>>> but ZA GUI does not run, as it would need to be started from All
>>>> Users Autostart.) Very much looks as if all and everything is in
>>>> Restricted zone.
>>>>
>>>> I have seen at least two others posting with this problem....
>>>>
>>>> Another existing admin account can be used just fine, as well as a
>>>> normal user account.
>>>>
>>>> Trying to troubleshoot this problem, I imported the Current User IE
>>>> zone settings from the working admin account to the not working one
>>>> before installing the patch. Rebooted several times between several
>>>> tries of installing the patch to a repeatedly restored and changed
>>>> original. No Luck.
>>>>
>>>> Event log is no help (can't see any possibly related errors, as far
>>>> as I can tell).
>>>>
>>>> Tried install with a re-downloaded patch --> makes no difference.
>>>> Tried online install from Windows Update --> makes no difference.
>>>>
>>>> If the weird behavior was occurring in another admin account, I
>>>> would just create a new one (a new one created with the patch
>>>> already installed works just fine). But as it's causing the built
>>>> in admin account to work no more ..?
>>>>
>>>> Further testing showed, that my problem seems to be caused by the
>>>> new URLMON.DLL. If I replace just this dll with the old one, the
>>>> built in admin account is working again.....
HiMan
Guest
Posts: n/a
 
Re: 822925 Cum IE Patch causes problem with XP built in admin account
Posted: 08-26-2003, 02:46 PM
"PA Bear" <PABear@mvps.org> wrote in message
news:On6nQz3aDHA.2336@TK2MSFTNGP09.phx.gbl...

Hi PA Bear,
> Please include all of the previous message in your replies. You may
> crosspost to any other NG but please do so selectively.
Sorry, but as I usually don't post to groups like this, I don't have
something like OE-Quotefix installed. Add a mixture of top posting, bottom
posting and inline answers, using OE as my newsreader would make the thread
pretty unreadable :-(
> Only other thing I can think of: Are you logged in as Administator when
> installing the update(s)?
Yes in all cases.
> Do all of the installs leave you with Urlmon.dll version 6.00.2800.1226
> (assuming 32-bit WinXP)? Anything telling in Windows Update.log?
Yes Urlmon.dll version 6.00.2800.1226. The problem dissapears if I leave the
patch installed and just replace Urlmon.dll with version 6.0.2800.1188.

Windows Update.log shows successful download. iuhist.xml shows successfull
install.
<client>IU_Site</client>
<installStatus value="COMPLETE" needsReboot="1" />

Thank you for trying to help!

--
Best Regards
HiMan


HiMan
Guest
Posts: n/a
 
Re: 822925 Cum IE Patch causes problem with XP built in admin account
Posted: 08-26-2003, 06:07 PM
"PA Bear" <PABear@mvps.org> wrote in message
news:uc%23k3r$aDHA.2032@TK2MSFTNGP10.phx.gbl...

Hi PA Bear,
> Then I'd take this to
>
> news://msnews.microsoft.com/microsof....windowsupdate and
> news://msnews.microsoft.com/microsof...dowsxp.general
> Also http://register.microsoft.com/mswish/suggestion.asp
Thanks for the suggestions. And thanks again for your time.

--
Best Regards
HiMan


andy
Guest
Posts: n/a
 
Solution? 822925 Cum IE Patch causes problem with XP built in admin account
Posted: 08-26-2003, 08:13 PM
Hi there,

I did post about this problem a few days ago.

I have now solved the problem on my XP Pro (SP1) system
(NTFS partition). I'm still uncertain why it worked but
this is what I did.

Downloaded the patch to my hard drive. Re-booted the PC
in Safe Mode and then simply installed the security patch
Q822925. Re-booted in normal mode loading all services
and drivers and found it had successfully installed
without giving any of the problems mentioned in several
posts on this site including my own original post!

Reason? Not quite sure why it has worked this way but it
may have been a certain running process related to
software installed on all of the machines on our
particular PC's which was interfering with the correct
installation of the patch ??

Anyway it works and has given me no strange behaviour or
errors since :-) I hope this helps.

Regards,

Andy
>-----Original Message-----
>Hello group,
>
>Installing the 822925 (newest cumulative IE6 Patch)
causes some weird
>behavior on my XP Pro system installed on a FAT
partition.
>
>It causes the built in (renamed) Admin account to be
unusable. It seems to
>put all drives in restricted zone, thus each try to run
anything from a
>shortcut or a program folder causes the MSG "Windows
cannot access the
>specified device, path or file. You may not have the
appropriate permission
>to access the item."
>
>I can run explorer from the run command and see in the
status bar, that My
>Computer shows up as being in the My Computer zone, but
all drive letters
>(including floppy) show up as being in Restricted sites
zone.
>
>Running MMC and opening services gives an error MSG for
expanded view AKA
>"will not be displayed properly, because ActiveX
controls are not allowed to
>run."
>
>Services run, but no programs (e.g. Zonealarm's True
Vector loads, but ZA
>GUI does not run, as it would need to be started from
All Users Autostart.)
>Very much looks as if all and everything is in
Restricted zone.
>
>I have seen at least two others posting with this
problem.
>
>"andy" <duckati@ntlworld.com> wrote in message
>news:079c01c36987$b31560d0$a601280a@phx.gbl...
>
>"sj" <dj_sjay@hotmail.com> wrote in message
>news:3f472899$1@duster.adelaide.on.net...
>
> They have not gotten any replies though so far. So I
try as well ;-).
>
>Another existing admin account can be used just fine, as
well as a normal
>user account.
>
>Trying to troubleshoot this problem, I imported the
Current User IE
>zone settings from the working admin account to the not
working one before
>installing the patch. Rebooted several times between
several tries of
>installing the patch to a repeatedly restored and
changed original. No Luck.
>
>Event log is no help (can't see any possibly related
errors, as far as I can
>tell).
>
>Tried install with a re-downloaded patch --> makes no
difference.
>Tried online install from Windows Update --> makes no
difference.
>
>If the weird behavior was occurring in another admin
account, I would just
>create a new one (a new one created with the patch
already installed works
>just fine). But as it's causing the built in admin
account to work no more
>...?
>
>Further testing showed, that my problem seems to be
caused by the new
>URLMON.DLL. If I replace just this dll with the old
one, the built in admin
>account is working again.
>
>So at the moment it looks, as if I can choose between a
functional built in
>admin account or using the updated urlmon.dll.
>
>I would appreciate any pointers, that could help me
troubleshoot. Thanks!
>
>--
>Best Regards
>HiMan
>
>
>.
>
HiMan
Guest
Posts: n/a
 
Re: 822925 Cum IE Patch causes problem with XP built in admin account
Posted: 08-27-2003, 12:14 AM

"andy" <duckati@ntlworld.com> wrote in message
news:044901c36c0e$946dc670$a301280a@phx.gbl...
> Hi there,
>
> I did post about this problem a few days ago.
>
> I have now solved the problem on my XP Pro (SP1) system
> (NTFS partition). I'm still uncertain why it worked but
> this is what I did.
>
> Downloaded the patch to my hard drive. Re-booted the PC
> in Safe Mode and then simply installed the security patch
> Q822925. Re-booted in normal mode loading all services
> and drivers and found it had successfully installed
> without giving any of the problems mentioned in several
> posts on this site including my own original post!
>
> Reason? Not quite sure why it has worked this way but it
> may have been a certain running process related to
> software installed on all of the machines on our
> particular PC's which was interfering with the correct
> installation of the patch ??
>
> Anyway it works and has given me no strange behavior or
> errors since :-) I hope this helps.
Hi Andy,

Hmm..???

Took me a while, because I wanted to be sure, that the behavior I see is
consistent. I did 4 test installs all in Safe Mode. First using the current
system partition after simply uninstalling Q822925 from Add/Remove Programs,
reboot. Second after uninstalling Q822925 and after installing the Cum Patch
before (Q818529 - no problem with urlmon.dll version 6.0.2800.1188). Third
after yet another uninstall and this time putting q822925.exe in the root on
c: and execute from the run command. Forth after restoring system to state
before any tries to install Q822925.

I did confirm, that the dll versions had been changed to the correct
previous versions by the uninstall routine, before I proceeded.

In each case I observed, that installing from Safe Mode changed _only_
mshtml.dll and _not shdocvw.dll, shlwapi.dll and urlmon.dll. Thus on first
glance I thought "He great, problem solved" until I checked the involved dll
versions.

Result of installing from Safe Mode in each case: Update shows up as
installed in Add/Remove Programs and in IE "About", but only mshtml.dll is
updated to the patch version.

--
Best Regards
HiMan


andy
Guest
Posts: n/a
 
Re: 822925 Cum IE Patch causes problem with XP built in admin account
Posted: 08-27-2003, 07:39 AM
Thanks for the update HiMan,

I'll have to have a look at these files on my machine to
see if the same has occurred! I wonder what Microsoft
would say about this? Do they know there may be a problem??

Thanks again HiMan for the info and feedback.

Regards,
Andy
>-----Original Message-----
>
>"andy" <duckati@ntlworld.com> wrote in message
>news:044901c36c0e$946dc670$a301280a@phx.gbl...
>> Hi there,
>>
>> I did post about this problem a few days ago.
>>
>> I have now solved the problem on my XP Pro (SP1) system
>> (NTFS partition). I'm still uncertain why it worked but
>> this is what I did.
>>
>> Downloaded the patch to my hard drive. Re-booted the PC
>> in Safe Mode and then simply installed the security
patch
>> Q822925. Re-booted in normal mode loading all services
>> and drivers and found it had successfully installed
>> without giving any of the problems mentioned in several
>> posts on this site including my own original post!
>>
>> Reason? Not quite sure why it has worked this way but it
>> may have been a certain running process related to
>> software installed on all of the machines on our
>> particular PC's which was interfering with the correct
>> installation of the patch ??
>>
>> Anyway it works and has given me no strange behavior or
>> errors since :-) I hope this helps.
>
>Hi Andy,
>
>Hmm..???
>
>Took me a while, because I wanted to be sure, that the
behavior I see is
>consistent. I did 4 test installs all in Safe Mode. First
using the current
>system partition after simply uninstalling Q822925 from
Add/Remove Programs,
>reboot. Second after uninstalling Q822925 and after
installing the Cum Patch
>before (Q818529 - no problem with urlmon.dll version
6.0.2800.1188). Third
>after yet another uninstall and this time putting
q822925.exe in the root on
>c: and execute from the run command. Forth after
restoring system to state
>before any tries to install Q822925.
>
>I did confirm, that the dll versions had been changed to
the correct
>previous versions by the uninstall routine, before I
proceeded.
>
>In each case I observed, that installing from Safe Mode
changed _only_
>mshtml.dll and _not shdocvw.dll, shlwapi.dll and
urlmon.dll. Thus on first
>glance I thought "He great, problem solved" until I
checked the involved dll
>versions.
>
>Result of installing from Safe Mode in each case: Update
shows up as
>installed in Add/Remove Programs and in IE "About", but
only mshtml.dll is
>updated to the patch version.
>
>--
>Best Regards
>HiMan
>
>
>.
>
HiMan
Guest
Posts: n/a
 
Re: 822925 Cum IE Patch causes problem with XP built in admin account
Posted: 08-27-2003, 10:20 AM

"andy" <duckati@ntlworld.com> wrote in message
news:027201c36c6e$539aeb90$a001280a@phx.gbl...
> Thanks for the update HiMan,
>
> I'll have to have a look at these files on my machine to
> see if the same has occurred! I wonder what Microsoft
> would say about this? Do they know there may be a problem??
Hi Andy,

the versions the patch should give you are listed here
http://support.microsoft.com/default...b;en-us;822925
They differ depending on your version of IE and are installed in the
%Windir%\System32 folder.

I use Internet Explorer 6 SP1 (32-Bit) for Windows XP SP1.

Compared to the number of people probably installing this patch, not many
seem to post having a problem. And it has me stumped why it only messes up
my built in admin account, whereas another admin account and a normal user
account is not affected.

I'm sure curious, if you got the "right" files!

--
HiMan


 
LinkBack Thread Tools Display Modes
 


Thread Tools
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off
Trackbacks are On
Pingbacks are On
Refbacks are On
Forum Jump


Similar Threads
Thread Thread Starter Forum Replies Last Post
Admin Account Problem: Windows Live Messenger Daniel Windows Vista Administration 1 02-20-2008 09:50 AM
problem with admin account leespurs Windows Vista Administration 1 08-21-2007 07:23 PM
Built-in admin account Kurt Harriger Windows Vista Security 36 01-13-2007 01:24 AM
Patches 822925 or 823718 caused printer problem Robert Windows XP Printers / Scanners / Fax 0 08-28-2003 12:14 PM
Admin Account - access problem Alex Windows XP Setup 0 08-17-2003 09:44 PM