resetting security permissions not working

Posted: 06-03-2008, 06:12 PM
I have two vista home premium machines. I was unable to browse between the
two on my home lan.

I found the kb article: http://support.microsoft.com/kb/313222

As it says I ran: secedit /configure /cfg %windir%\inf\defltbase.inf /db
defltbase.sdb /verbose

One machine completes fine, the other does not.

When I do so and I immediately get:

An extended error has occurred.

The task has completed with an error.
See log %windir%\security\logs\scesrv.log for detail info.

I am worried about this problem. What is wrong? Below is scesrv.log:


----Configure General Service Settings...
Configure sysmonlog.
Error 1060: The specified service does not exist as an installed service.
Error opening sysmonlog.
Configure SamSs.
Configure ntmssvc.
Error 1060: The specified service does not exist as an installed service.
Error opening ntmssvc.
Configure netddedsdm.
Error 1060: The specified service does not exist as an installed service.
Error opening netddedsdm.
Configure netdde.
Error 1060: The specified service does not exist as an installed service.
Error opening netdde.
Configure dmserver.
Error 1060: The specified service does not exist as an installed service.
Error opening dmserver.
Configure clipsrv.
Error 1060: The specified service does not exist as an installed service.
Error opening clipsrv.
Configure Browser.

General Service configuration was completed successfully.


----Configure available attachment engines...

Configuration of attachment engines was completed successfully.


----Configure Security Policy...
Configure password information.
Administrator account is disabled.
Guest account is disabled.

System Access configuration was completed successfully.
LSA anonymous lookup names setting : existing SD =
DD;;0x800;;;AN)(A;;0xf1fff;;;BA)(A;;0x20801;;;WD )(A;;0x801;;;AN)(A;;0x1000;;;LS)(A;;0x1000;;;NS)(A ;;0x1000;;;S-1-5-17).
Configure LSA anonymous lookup setting.
Configure machine\software\microsoft\windows
nt\currentversion\setup\recoveryconsole\securityle vel.
Configure machine\software\microsoft\windows
nt\currentversion\setup\recoveryconsole\setcommand .
Configure machine\software\microsoft\windows
nt\currentversion\winlogon\cachedlogonscount.
Configure machine\software\microsoft\windows
nt\currentversion\winlogon\forceunlocklogon.
Configure machine\software\microsoft\windows
nt\currentversion\winlogon\passwordexpirywarning.
Configure machine\software\microsoft\windows
nt\currentversion\winlogon\scremoveoption.
Configure
machine\software\microsoft\windows\currentversion\ policies\system\dontdisplaylastusername.
Configure
machine\software\microsoft\windows\currentversion\ policies\system\legalnoticecaption.
Configure
machine\software\microsoft\windows\currentversion\ policies\system\legalnoticetext.
Configure
machine\software\microsoft\windows\currentversion\ policies\system\scforceoption.
Configure
machine\software\microsoft\windows\currentversion\ policies\system\shutdownwithoutlogon.
Configure
machine\software\microsoft\windows\currentversion\ policies\system\undockwithoutlogon.
Configure
machine\software\policies\microsoft\windows\safer\ codeidentifiers\authenticodeenabled.
Configure machine\system\currentcontrolset\control\lsa\audit baseobjects.
Configure machine\system\currentcontrolset\control\lsa\crash onauditfail.
Configure machine\system\currentcontrolset\control\lsa\disab ledomaincreds.
Configure
machine\system\currentcontrolset\control\lsa\every oneincludesanonymous.
Configure
machine\system\currentcontrolset\control\lsa\fipsa lgorithmpolicy\enabled.
Configure machine\system\currentcontrolset\control\lsa\force guest.
Configure machine\system\currentcontrolset\control\lsa\fullp rivilegeauditing.
Configure machine\system\currentcontrolset\control\lsa\limit blankpassworduse.
Configure machine\system\currentcontrolset\control\lsa\lmcom patibilitylevel.
Configure
machine\system\currentcontrolset\control\lsa\msv1_ 0\ntlmminclientsec.
Configure
machine\system\currentcontrolset\control\lsa\msv1_ 0\ntlmminserversec.
Configure machine\system\currentcontrolset\control\lsa\nolmh ash.
Configure machine\system\currentcontrolset\control\lsa\restr ictanonymous.
Configure machine\system\currentcontrolset\control\lsa\restr ictanonymoussam.
Configure machine\system\currentcontrolset\control\print\pro viders\lanman
print services\servers\addprinterdrivers.
Configure machine\system\currentcontrolset\control\session
manager\kernel\obcaseinsensitive.
Configure machine\system\currentcontrolset\control\session manager\memory
management\clearpagefileatshutdown.
Configure machine\system\currentcontrolset\control\session
manager\protectionmode.
Configure
machine\system\currentcontrolset\services\lanmanse rver\parameters\autodisconnect.
Configure
machine\system\currentcontrolset\services\lanmanse rver\parameters\enableforcedlogoff.
Configure
machine\system\currentcontrolset\services\lanmanse rver\parameters\enablesecuritysignature.
Configure
machine\system\currentcontrolset\services\lanmanse rver\parameters\nullsessionpipes.
Configure
machine\system\currentcontrolset\services\lanmanse rver\parameters\requiresecuritysignature.
Configure
machine\system\currentcontrolset\services\lanmanse rver\parameters\restrictnullsessaccess.
Configure
machine\system\currentcontrolset\services\lanmanwo rkstation\parameters\enableplaintextpassword.
Configure
machine\system\currentcontrolset\services\lanmanwo rkstation\parameters\enablesecuritysignature.
Configure
machine\system\currentcontrolset\services\lanmanwo rkstation\parameters\requiresecuritysignature.
Configure machine\system\currentcontrolset\services\ldap\lda pclientintegrity.
Configure
machine\system\currentcontrolset\services\netlogon \parameters\disablepasswordchange.
Configure
machine\system\currentcontrolset\services\netlogon \parameters\maximumpasswordage.
Configure
machine\system\currentcontrolset\services\netlogon \parameters\requiresignorseal.
Configure
machine\system\currentcontrolset\services\netlogon \parameters\requirestrongkey.
Configure
machine\system\currentcontrolset\services\netlogon \parameters\sealsecurechannel.
Configure
machine\system\currentcontrolset\services\netlogon \parameters\signsecurechannel.

Configuration of Registry Values was completed successfully.
Configure log settings.

Audit/Log configuration was completed successfully.


----Configure available attachment engines...

Configuration of attachment engines was completed successfully.


----Un-initialize configuration engine...

resetting security permissions not working


Responses to "resetting security permissions not working"

Mick Murphy
Guest
Posts: n/a
 
RE: resetting security permissions not working
Posted: 06-03-2008, 08:33 PM
Here is how to Network them!

http://technet.microsoft.com/en-us/l.../bb727037.aspx

Have a read of the above link re Vista File and Printer Sharing.

Permissions/Share info is there as well.

If using Norton, McAfee, Trend Micro I.S., make sure file and printer
sharing is enabled in THEIR firewall (or LAN allowed, depending on how their
Exceptions are worded in their Firewall)

1st thing to do is make sure that the Workgroup Name of ALL the computers is
the SAME.

In Vista Network and Sharing:

Network Discovery: ON (So it can see the other computers)

Network set to Private (Public is for hotspots, airports, etc)

File Sharing: ON

Public Folder Sharing: ON (Vista’s Public Folder is the same as XP’s Shared
Docs)

Password Protected: OFF (unless you want to set up identical usernames and
passwords (passwords can be different) on ALL computers in your Network) If
you have it ON, you will be asked for a username and password when you try to
access a Vista computer from an XP computer, or a Vista computer.

--
Mick Murphy - Qld - Australia


"Akidd" wrote:
> I have two vista home premium machines. I was unable to browse between the
> two on my home lan.
>
> I found the kb article: http://support.microsoft.com/kb/313222
>
> As it says I ran: secedit /configure /cfg %windir%\inf\defltbase.inf /db
> defltbase.sdb /verbose
>
> One machine completes fine, the other does not.
>
> When I do so and I immediately get:
>
> An extended error has occurred.
>
> The task has completed with an error.
> See log %windir%\security\logs\scesrv.log for detail info.
>
> I am worried about this problem. What is wrong? Below is scesrv.log:
>
>
> ----Configure General Service Settings...
> Configure sysmonlog.
> Error 1060: The specified service does not exist as an installed service.
> Error opening sysmonlog.
> Configure SamSs.
> Configure ntmssvc.
> Error 1060: The specified service does not exist as an installed service.
> Error opening ntmssvc.
> Configure netddedsdm.
> Error 1060: The specified service does not exist as an installed service.
> Error opening netddedsdm.
> Configure netdde.
> Error 1060: The specified service does not exist as an installed service.
> Error opening netdde.
> Configure dmserver.
> Error 1060: The specified service does not exist as an installed service.
> Error opening dmserver.
> Configure clipsrv.
> Error 1060: The specified service does not exist as an installed service.
> Error opening clipsrv.
> Configure Browser.
>
> General Service configuration was completed successfully.
>
>
> ----Configure available attachment engines...
>
> Configuration of attachment engines was completed successfully.
>
>
> ----Configure Security Policy...
> Configure password information.
> Administrator account is disabled.
> Guest account is disabled.
>
> System Access configuration was completed successfully.
> LSA anonymous lookup names setting : existing SD =
> DD;;0x800;;;AN)(A;;0xf1fff;;;BA)(A;;0x20801;;;WD )(A;;0x801;;;AN)(A;;0x1000;;;LS)(A;;0x1000;;;NS)(A ;;0x1000;;;S-1-5-17).
> Configure LSA anonymous lookup setting.
> Configure machine\software\microsoft\windows
> nt\currentversion\setup\recoveryconsole\securityle vel.
> Configure machine\software\microsoft\windows
> nt\currentversion\setup\recoveryconsole\setcommand .
> Configure machine\software\microsoft\windows
> nt\currentversion\winlogon\cachedlogonscount.
> Configure machine\software\microsoft\windows
> nt\currentversion\winlogon\forceunlocklogon.
> Configure machine\software\microsoft\windows
> nt\currentversion\winlogon\passwordexpirywarning.
> Configure machine\software\microsoft\windows
> nt\currentversion\winlogon\scremoveoption.
> Configure
> machine\software\microsoft\windows\currentversion\ policies\system\dontdisplaylastusername.
> Configure
> machine\software\microsoft\windows\currentversion\ policies\system\legalnoticecaption.
> Configure
> machine\software\microsoft\windows\currentversion\ policies\system\legalnoticetext.
> Configure
> machine\software\microsoft\windows\currentversion\ policies\system\scforceoption.
> Configure
> machine\software\microsoft\windows\currentversion\ policies\system\shutdownwithoutlogon.
> Configure
> machine\software\microsoft\windows\currentversion\ policies\system\undockwithoutlogon.
> Configure
> machine\software\policies\microsoft\windows\safer\ codeidentifiers\authenticodeenabled.
> Configure machine\system\currentcontrolset\control\lsa\audit baseobjects.
> Configure machine\system\currentcontrolset\control\lsa\crash onauditfail.
> Configure machine\system\currentcontrolset\control\lsa\disab ledomaincreds.
> Configure
> machine\system\currentcontrolset\control\lsa\every oneincludesanonymous.
> Configure
> machine\system\currentcontrolset\control\lsa\fipsa lgorithmpolicy\enabled.
> Configure machine\system\currentcontrolset\control\lsa\force guest.
> Configure machine\system\currentcontrolset\control\lsa\fullp rivilegeauditing.
> Configure machine\system\currentcontrolset\control\lsa\limit blankpassworduse.
> Configure machine\system\currentcontrolset\control\lsa\lmcom patibilitylevel.
> Configure
> machine\system\currentcontrolset\control\lsa\msv1_ 0\ntlmminclientsec.
> Configure
> machine\system\currentcontrolset\control\lsa\msv1_ 0\ntlmminserversec.
> Configure machine\system\currentcontrolset\control\lsa\nolmh ash.
> Configure machine\system\currentcontrolset\control\lsa\restr ictanonymous.
> Configure machine\system\currentcontrolset\control\lsa\restr ictanonymoussam.
> Configure machine\system\currentcontrolset\control\print\pro viders\lanman
> print services\servers\addprinterdrivers.
> Configure machine\system\currentcontrolset\control\session
> manager\kernel\obcaseinsensitive.
> Configure machine\system\currentcontrolset\control\session manager\memory
> management\clearpagefileatshutdown.
> Configure machine\system\currentcontrolset\control\session
> manager\protectionmode.
> Configure
> machine\system\currentcontrolset\services\lanmanse rver\parameters\autodisconnect.
> Configure
> machine\system\currentcontrolset\services\lanmanse rver\parameters\enableforcedlogoff.
> Configure
> machine\system\currentcontrolset\services\lanmanse rver\parameters\enablesecuritysignature.
> Configure
> machine\system\currentcontrolset\services\lanmanse rver\parameters\nullsessionpipes.
> Configure
> machine\system\currentcontrolset\services\lanmanse rver\parameters\requiresecuritysignature.
> Configure
> machine\system\currentcontrolset\services\lanmanse rver\parameters\restrictnullsessaccess.
> Configure
> machine\system\currentcontrolset\services\lanmanwo rkstation\parameters\enableplaintextpassword.
> Configure
> machine\system\currentcontrolset\services\lanmanwo rkstation\parameters\enablesecuritysignature.
> Configure
> machine\system\currentcontrolset\services\lanmanwo rkstation\parameters\requiresecuritysignature.
> Configure machine\system\currentcontrolset\services\ldap\lda pclientintegrity.
> Configure
> machine\system\currentcontrolset\services\netlogon \parameters\disablepasswordchange.
> Configure
> machine\system\currentcontrolset\services\netlogon \parameters\maximumpasswordage.
> Configure
> machine\system\currentcontrolset\services\netlogon \parameters\requiresignorseal.
> Configure
> machine\system\currentcontrolset\services\netlogon \parameters\requirestrongkey.
> Configure
> machine\system\currentcontrolset\services\netlogon \parameters\sealsecurechannel.
> Configure
> machine\system\currentcontrolset\services\netlogon \parameters\signsecurechannel.
>
> Configuration of Registry Values was completed successfully.
> Configure log settings.
>
> Audit/Log configuration was completed successfully.
>
>
> ----Configure available attachment engines...
>
> Configuration of attachment engines was completed successfully.
>
>
> ----Un-initialize configuration engine...
Akidd
Guest
Posts: n/a
 
RE: resetting security permissions not working
Posted: 06-11-2008, 12:01 AM
Thanks for the post, but this doesn't solve my issue. I am having a problem
as a result of trying to share files. I am unable to run:

From the kb article: http://support.microsoft.com/kb/313222

As it says I ran: "secedit /configure /cfg %windir%\inf\defltbase.inf /db
defltbase.sdb /verbose"

One machine completes fine, the other does not.

On the machine that fails, upon running I immediately get:
"An extended error has occurred."

Help?


"Mick Murphy" wrote:
> Here is how to Network them!
>
> http://technet.microsoft.com/en-us/l.../bb727037.aspx
>
> Have a read of the above link re Vista File and Printer Sharing.
>
> Permissions/Share info is there as well.
>
> If using Norton, McAfee, Trend Micro I.S., make sure file and printer
> sharing is enabled in THEIR firewall (or LAN allowed, depending on how their
> Exceptions are worded in their Firewall)
>
> 1st thing to do is make sure that the Workgroup Name of ALL the computers is
> the SAME.
>
> In Vista Network and Sharing:
>
> Network Discovery: ON (So it can see the other computers)
>
> Network set to Private (Public is for hotspots, airports, etc)
>
> File Sharing: ON
>
> Public Folder Sharing: ON (Vista’s Public Folder is the same as XP’s Shared
> Docs)
>
> Password Protected: OFF (unless you want to set up identical usernames and
> passwords (passwords can be different) on ALL computers in your Network) If
> you have it ON, you will be asked for a username and password when you try to
> access a Vista computer from an XP computer, or a Vista computer.
>
> --
> Mick Murphy - Qld - Australia
>
>
> "Akidd" wrote:
>
> > I have two vista home premium machines. I was unable to browse between the
> > two on my home lan.
> >
> > I found the kb article: http://support.microsoft.com/kb/313222
> >
> > As it says I ran: secedit /configure /cfg %windir%\inf\defltbase.inf /db
> > defltbase.sdb /verbose
> >
> > One machine completes fine, the other does not.
> >
> > When I do so and I immediately get:
> >
> > An extended error has occurred.
> >
> > The task has completed with an error.
> > See log %windir%\security\logs\scesrv.log for detail info.
> >
> > I am worried about this problem. What is wrong? Below is scesrv.log:
> >
> >
> > ----Configure General Service Settings...
> > Configure sysmonlog.
> > Error 1060: The specified service does not exist as an installed service.
> > Error opening sysmonlog.
> > Configure SamSs.
> > Configure ntmssvc.
> > Error 1060: The specified service does not exist as an installed service.
> > Error opening ntmssvc.
> > Configure netddedsdm.
> > Error 1060: The specified service does not exist as an installed service.
> > Error opening netddedsdm.
> > Configure netdde.
> > Error 1060: The specified service does not exist as an installed service.
> > Error opening netdde.
> > Configure dmserver.
> > Error 1060: The specified service does not exist as an installed service.
> > Error opening dmserver.
> > Configure clipsrv.
> > Error 1060: The specified service does not exist as an installed service.
> > Error opening clipsrv.
> > Configure Browser.
> >
> > General Service configuration was completed successfully.
> >
> >
> > ----Configure available attachment engines...
> >
> > Configuration of attachment engines was completed successfully.
> >
> >
> > ----Configure Security Policy...
> > Configure password information.
> > Administrator account is disabled.
> > Guest account is disabled.
> >
> > System Access configuration was completed successfully.
> > LSA anonymous lookup names setting : existing SD =
> > DD;;0x800;;;AN)(A;;0xf1fff;;;BA)(A;;0x20801;;;WD )(A;;0x801;;;AN)(A;;0x1000;;;LS)(A;;0x1000;;;NS)(A ;;0x1000;;;S-1-5-17).
> > Configure LSA anonymous lookup setting.
> > Configure machine\software\microsoft\windows
> > nt\currentversion\setup\recoveryconsole\securityle vel.
> > Configure machine\software\microsoft\windows
> > nt\currentversion\setup\recoveryconsole\setcommand .
> > Configure machine\software\microsoft\windows
> > nt\currentversion\winlogon\cachedlogonscount.
> > Configure machine\software\microsoft\windows
> > nt\currentversion\winlogon\forceunlocklogon.
> > Configure machine\software\microsoft\windows
> > nt\currentversion\winlogon\passwordexpirywarning.
> > Configure machine\software\microsoft\windows
> > nt\currentversion\winlogon\scremoveoption.
> > Configure
> > machine\software\microsoft\windows\currentversion\ policies\system\dontdisplaylastusername.
> > Configure
> > machine\software\microsoft\windows\currentversion\ policies\system\legalnoticecaption.
> > Configure
> > machine\software\microsoft\windows\currentversion\ policies\system\legalnoticetext.
> > Configure
> > machine\software\microsoft\windows\currentversion\ policies\system\scforceoption.
> > Configure
> > machine\software\microsoft\windows\currentversion\ policies\system\shutdownwithoutlogon.
> > Configure
> > machine\software\microsoft\windows\currentversion\ policies\system\undockwithoutlogon.
> > Configure
> > machine\software\policies\microsoft\windows\safer\ codeidentifiers\authenticodeenabled.
> > Configure machine\system\currentcontrolset\control\lsa\audit baseobjects.
> > Configure machine\system\currentcontrolset\control\lsa\crash onauditfail.
> > Configure machine\system\currentcontrolset\control\lsa\disab ledomaincreds.
> > Configure
> > machine\system\currentcontrolset\control\lsa\every oneincludesanonymous.
> > Configure
> > machine\system\currentcontrolset\control\lsa\fipsa lgorithmpolicy\enabled.
> > Configure machine\system\currentcontrolset\control\lsa\force guest.
> > Configure machine\system\currentcontrolset\control\lsa\fullp rivilegeauditing.
> > Configure machine\system\currentcontrolset\control\lsa\limit blankpassworduse.
> > Configure machine\system\currentcontrolset\control\lsa\lmcom patibilitylevel.
> > Configure
> > machine\system\currentcontrolset\control\lsa\msv1_ 0\ntlmminclientsec.
> > Configure
> > machine\system\currentcontrolset\control\lsa\msv1_ 0\ntlmminserversec.
> > Configure machine\system\currentcontrolset\control\lsa\nolmh ash.
> > Configure machine\system\currentcontrolset\control\lsa\restr ictanonymous.
> > Configure machine\system\currentcontrolset\control\lsa\restr ictanonymoussam.
> > Configure machine\system\currentcontrolset\control\print\pro viders\lanman
> > print services\servers\addprinterdrivers.
> > Configure machine\system\currentcontrolset\control\session
> > manager\kernel\obcaseinsensitive.
> > Configure machine\system\currentcontrolset\control\session manager\memory
> > management\clearpagefileatshutdown.
> > Configure machine\system\currentcontrolset\control\session
> > manager\protectionmode.
> > Configure
> > machine\system\currentcontrolset\services\lanmanse rver\parameters\autodisconnect.
> > Configure
> > machine\system\currentcontrolset\services\lanmanse rver\parameters\enableforcedlogoff.
> > Configure
> > machine\system\currentcontrolset\services\lanmanse rver\parameters\enablesecuritysignature.
> > Configure
> > machine\system\currentcontrolset\services\lanmanse rver\parameters\nullsessionpipes.
> > Configure
> > machine\system\currentcontrolset\services\lanmanse rver\parameters\requiresecuritysignature.
> > Configure
> > machine\system\currentcontrolset\services\lanmanse rver\parameters\restrictnullsessaccess.
> > Configure
> > machine\system\currentcontrolset\services\lanmanwo rkstation\parameters\enableplaintextpassword.
> > Configure
> > machine\system\currentcontrolset\services\lanmanwo rkstation\parameters\enablesecuritysignature.
> > Configure
> > machine\system\currentcontrolset\services\lanmanwo rkstation\parameters\requiresecuritysignature.
> > Configure machine\system\currentcontrolset\services\ldap\lda pclientintegrity.
> > Configure
> > machine\system\currentcontrolset\services\netlogon \parameters\disablepasswordchange.
> > Configure
> > machine\system\currentcontrolset\services\netlogon \parameters\maximumpasswordage.
> > Configure
> > machine\system\currentcontrolset\services\netlogon \parameters\requiresignorseal.
> > Configure
> > machine\system\currentcontrolset\services\netlogon \parameters\requirestrongkey.
> > Configure
> > machine\system\currentcontrolset\services\netlogon \parameters\sealsecurechannel.
> > Configure
> > machine\system\currentcontrolset\services\netlogon \parameters\signsecurechannel.
> >
> > Configuration of Registry Values was completed successfully.
> > Configure log settings.
> >
> > Audit/Log configuration was completed successfully.
> >
> >
> > ----Configure available attachment engines...
> >
> > Configuration of attachment engines was completed successfully.
> >
> >
> > ----Un-initialize configuration engine...
 
LinkBack Thread Tools Display Modes
 


Thread Tools
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off
Trackbacks are On
Pingbacks are On
Refbacks are On
Forum Jump


Similar Threads
Thread Thread Starter Forum Replies Last Post
Security permissions Chad Windows Vista Security 3 07-10-2007 09:10 AM
Resetting the local security policies Gordon Sherman Windows XP Security & Administration 1 09-12-2003 02:41 AM
Resetting Program Permissions Travis Thebeau Windows XP Security & Administration 2 08-31-2003 07:32 AM
Cant set permissions - no security tag ?! Bikernic Windows XP Security & Administration 1 07-29-2003 05:03 PM
Resetting NTFS permissions in XP Home MSN Windows XP Security & Administration 0 07-17-2003 04:35 PM