Windows Vista Forums
Vista Forums Home Join Vista Forums Webcasts Vista Tutorials Tags

Welcome to Vista Forums we are your forum to discuss Windows Vista x64 and x86 systems. Whether you need help or just want to post an idea you have on Vista, this is the forum for you.
Register at Vista forums...the world biggest Windows Vista resource Join Vista Forums Now

Go Back   Vista Forums > Vista Newsgroups > Vista security

resetting security permissions not working

Update your Vista Drivers Update Your Drivers Now!!
Closed Thread
 
Thread Tools Display Modes
Old 06-03-2008   #1 (permalink)
Akidd
Guest


 

resetting security permissions not working

I have two vista home premium machines. I was unable to browse between the
two on my home lan.

I found the kb article: http://support.microsoft.com/kb/313222

As it says I ran: secedit /configure /cfg %windir%\inf\defltbase.inf /db
defltbase.sdb /verbose

One machine completes fine, the other does not.

When I do so and I immediately get:

An extended error has occurred.

The task has completed with an error.
See log %windir%\security\logs\scesrv.log for detail info.

I am worried about this problem. What is wrong? Below is scesrv.log:


----Configure General Service Settings...
Configure sysmonlog.
Error 1060: The specified service does not exist as an installed service.
Error opening sysmonlog.
Configure SamSs.
Configure ntmssvc.
Error 1060: The specified service does not exist as an installed service.
Error opening ntmssvc.
Configure netddedsdm.
Error 1060: The specified service does not exist as an installed service.
Error opening netddedsdm.
Configure netdde.
Error 1060: The specified service does not exist as an installed service.
Error opening netdde.
Configure dmserver.
Error 1060: The specified service does not exist as an installed service.
Error opening dmserver.
Configure clipsrv.
Error 1060: The specified service does not exist as an installed service.
Error opening clipsrv.
Configure Browser.

General Service configuration was completed successfully.


----Configure available attachment engines...

Configuration of attachment engines was completed successfully.


----Configure Security Policy...
Configure password information.
Administrator account is disabled.
Guest account is disabled.

System Access configuration was completed successfully.
LSA anonymous lookup names setting : existing SD =
DD;;0x800;;;AN)(A;;0xf1fff;;;BA)(A;;0x20801;;;WD)(A;;0x801;;;AN)(A;;0x1000;;;LS)(A;;0x1000;;;NS)(A;;0x1000;;;S-1-5-17).
Configure LSA anonymous lookup setting.
Configure machine\software\microsoft\windows
nt\currentversion\setup\recoveryconsole\securitylevel.
Configure machine\software\microsoft\windows
nt\currentversion\setup\recoveryconsole\setcommand.
Configure machine\software\microsoft\windows
nt\currentversion\winlogon\cachedlogonscount.
Configure machine\software\microsoft\windows
nt\currentversion\winlogon\forceunlocklogon.
Configure machine\software\microsoft\windows
nt\currentversion\winlogon\passwordexpirywarning.
Configure machine\software\microsoft\windows
nt\currentversion\winlogon\scremoveoption.
Configure
machine\software\microsoft\windows\currentversion\policies\system\dontdisplaylastusername.
Configure
machine\software\microsoft\windows\currentversion\policies\system\legalnoticecaption.
Configure
machine\software\microsoft\windows\currentversion\policies\system\legalnoticetext.
Configure
machine\software\microsoft\windows\currentversion\policies\system\scforceoption.
Configure
machine\software\microsoft\windows\currentversion\policies\system\shutdownwithoutlogon.
Configure
machine\software\microsoft\windows\currentversion\policies\system\undockwithoutlogon.
Configure
machine\software\policies\microsoft\windows\safer\codeidentifiers\authenticodeenabled.
Configure machine\system\currentcontrolset\control\lsa\auditbaseobjects.
Configure machine\system\currentcontrolset\control\lsa\crashonauditfail.
Configure machine\system\currentcontrolset\control\lsa\disabledomaincreds.
Configure
machine\system\currentcontrolset\control\lsa\everyoneincludesanonymous.
Configure
machine\system\currentcontrolset\control\lsa\fipsalgorithmpolicy\enabled.
Configure machine\system\currentcontrolset\control\lsa\forceguest.
Configure machine\system\currentcontrolset\control\lsa\fullprivilegeauditing.
Configure machine\system\currentcontrolset\control\lsa\limitblankpassworduse.
Configure machine\system\currentcontrolset\control\lsa\lmcompatibilitylevel.
Configure
machine\system\currentcontrolset\control\lsa\msv1_0\ntlmminclientsec.
Configure
machine\system\currentcontrolset\control\lsa\msv1_0\ntlmminserversec.
Configure machine\system\currentcontrolset\control\lsa\nolmhash.
Configure machine\system\currentcontrolset\control\lsa\restrictanonymous.
Configure machine\system\currentcontrolset\control\lsa\restrictanonymoussam.
Configure machine\system\currentcontrolset\control\print\providers\lanman
print services\servers\addprinterdrivers.
Configure machine\system\currentcontrolset\control\session
manager\kernel\obcaseinsensitive.
Configure machine\system\currentcontrolset\control\session manager\memory
management\clearpagefileatshutdown.
Configure machine\system\currentcontrolset\control\session
manager\protectionmode.
Configure
machine\system\currentcontrolset\services\lanmanserver\parameters\autodisconnect.
Configure
machine\system\currentcontrolset\services\lanmanserver\parameters\enableforcedlogoff.
Configure
machine\system\currentcontrolset\services\lanmanserver\parameters\enablesecuritysignature.
Configure
machine\system\currentcontrolset\services\lanmanserver\parameters\nullsessionpipes.
Configure
machine\system\currentcontrolset\services\lanmanserver\parameters\requiresecuritysignature.
Configure
machine\system\currentcontrolset\services\lanmanserver\parameters\restrictnullsessaccess.
Configure
machine\system\currentcontrolset\services\lanmanworkstation\parameters\enableplaintextpassword.
Configure
machine\system\currentcontrolset\services\lanmanworkstation\parameters\enablesecuritysignature.
Configure
machine\system\currentcontrolset\services\lanmanworkstation\parameters\requiresecuritysignature.
Configure machine\system\currentcontrolset\services\ldap\ldapclientintegrity.
Configure
machine\system\currentcontrolset\services\netlogon\parameters\disablepasswordchange.
Configure
machine\system\currentcontrolset\services\netlogon\parameters\maximumpasswordage.
Configure
machine\system\currentcontrolset\services\netlogon\parameters\requiresignorseal.
Configure
machine\system\currentcontrolset\services\netlogon\parameters\requirestrongkey.
Configure
machine\system\currentcontrolset\services\netlogon\parameters\sealsecurechannel.
Configure
machine\system\currentcontrolset\services\netlogon\parameters\signsecurechannel.

Configuration of Registry Values was completed successfully.
Configure log settings.

Audit/Log configuration was completed successfully.


----Configure available attachment engines...

Configuration of attachment engines was completed successfully.


----Un-initialize configuration engine...

My System SpecsSystem Spec
Old 06-03-2008   #2 (permalink)
Mick Murphy
Guest


 

RE: resetting security permissions not working

Here is how to Network them!

http://technet.microsoft.com/en-us/l.../bb727037.aspx

Have a read of the above link re Vista File and Printer Sharing.

Permissions/Share info is there as well.

If using Norton, McAfee, Trend Micro I.S., make sure file and printer
sharing is enabled in THEIR firewall (or LAN allowed, depending on how their
Exceptions are worded in their Firewall)

1st thing to do is make sure that the Workgroup Name of ALL the computers is
the SAME.

In Vista Network and Sharing:

Network Discovery: ON (So it can see the other computers)

Network set to Private (Public is for hotspots, airports, etc)

File Sharing: ON

Public Folder Sharing: ON (Vista’s Public Folder is the same as XP’s Shared
Docs)

Password Protected: OFF (unless you want to set up identical usernames and
passwords (passwords can be different) on ALL computers in your Network) If
you have it ON, you will be asked for a username and password when you try to
access a Vista computer from an XP computer, or a Vista computer.

--
Mick Murphy - Qld - Australia


"Akidd" wrote:
Quote:

> I have two vista home premium machines. I was unable to browse between the
> two on my home lan.
>
> I found the kb article: http://support.microsoft.com/kb/313222
>
> As it says I ran: secedit /configure /cfg %windir%\inf\defltbase.inf /db
> defltbase.sdb /verbose
>
> One machine completes fine, the other does not.
>
> When I do so and I immediately get:
>
> An extended error has occurred.
>
> The task has completed with an error.
> See log %windir%\security\logs\scesrv.log for detail info.
>
> I am worried about this problem. What is wrong? Below is scesrv.log:
>
>
> ----Configure General Service Settings...
> Configure sysmonlog.
> Error 1060: The specified service does not exist as an installed service.
> Error opening sysmonlog.
> Configure SamSs.
> Configure ntmssvc.
> Error 1060: The specified service does not exist as an installed service.
> Error opening ntmssvc.
> Configure netddedsdm.
> Error 1060: The specified service does not exist as an installed service.
> Error opening netddedsdm.
> Configure netdde.
> Error 1060: The specified service does not exist as an installed service.
> Error opening netdde.
> Configure dmserver.
> Error 1060: The specified service does not exist as an installed service.
> Error opening dmserver.
> Configure clipsrv.
> Error 1060: The specified service does not exist as an installed service.
> Error opening clipsrv.
> Configure Browser.
>
> General Service configuration was completed successfully.
>
>
> ----Configure available attachment engines...
>
> Configuration of attachment engines was completed successfully.
>
>
> ----Configure Security Policy...
> Configure password information.
> Administrator account is disabled.
> Guest account is disabled.
>
> System Access configuration was completed successfully.
> LSA anonymous lookup names setting : existing SD =
> DD;;0x800;;;AN)(A;;0xf1fff;;;BA)(A;;0x20801;;;WD)(A;;0x801;;;AN)(A;;0x1000;;;LS)(A;;0x1000;;;NS)(A;;0x1000;;;S-1-5-17).
> Configure LSA anonymous lookup setting.
> Configure machine\software\microsoft\windows
> nt\currentversion\setup\recoveryconsole\securitylevel.
> Configure machine\software\microsoft\windows
> nt\currentversion\setup\recoveryconsole\setcommand.
> Configure machine\software\microsoft\windows
> nt\currentversion\winlogon\cachedlogonscount.
> Configure machine\software\microsoft\windows
> nt\currentversion\winlogon\forceunlocklogon.
> Configure machine\software\microsoft\windows
> nt\currentversion\winlogon\passwordexpirywarning.
> Configure machine\software\microsoft\windows
> nt\currentversion\winlogon\scremoveoption.
> Configure
> machine\software\microsoft\windows\currentversion\policies\system\dontdisplaylastusername.
> Configure
> machine\software\microsoft\windows\currentversion\policies\system\legalnoticecaption.
> Configure
> machine\software\microsoft\windows\currentversion\policies\system\legalnoticetext.
> Configure
> machine\software\microsoft\windows\currentversion\policies\system\scforceoption.
> Configure
> machine\software\microsoft\windows\currentversion\policies\system\shutdownwithoutlogon.
> Configure
> machine\software\microsoft\windows\currentversion\policies\system\undockwithoutlogon.
> Configure
> machine\software\policies\microsoft\windows\safer\codeidentifiers\authenticodeenabled.
> Configure machine\system\currentcontrolset\control\lsa\auditbaseobjects.
> Configure machine\system\currentcontrolset\control\lsa\crashonauditfail.
> Configure machine\system\currentcontrolset\control\lsa\disabledomaincreds.
> Configure
> machine\system\currentcontrolset\control\lsa\everyoneincludesanonymous.
> Configure
> machine\system\currentcontrolset\control\lsa\fipsalgorithmpolicy\enabled.
> Configure machine\system\currentcontrolset\control\lsa\forceguest.
> Configure machine\system\currentcontrolset\control\lsa\fullprivilegeauditing.
> Configure machine\system\currentcontrolset\control\lsa\limitblankpassworduse.
> Configure machine\system\currentcontrolset\control\lsa\lmcompatibilitylevel.
> Configure
> machine\system\currentcontrolset\control\lsa\msv1_0\ntlmminclientsec.
> Configure
> machine\system\currentcontrolset\control\lsa\msv1_0\ntlmminserversec.
> Configure machine\system\currentcontrolset\control\lsa\nolmhash.
> Configure machine\system\currentcontrolset\control\lsa\restrictanonymous.
> Configure machine\system\currentcontrolset\control\lsa\restrictanonymoussam.
> Configure machine\system\currentcontrolset\control\print\providers\lanman
> print services\servers\addprinterdrivers.
> Configure machine\system\currentcontrolset\control\session
> manager\kernel\obcaseinsensitive.
> Configure machine\system\currentcontrolset\control\session manager\memory
> management\clearpagefileatshutdown.
> Configure machine\system\currentcontrolset\control\session
> manager\protectionmode.
> Configure
> machine\system\currentcontrolset\services\lanmanserver\parameters\autodisconnect.
> Configure
> machine\system\currentcontrolset\services\lanmanserver\parameters\enableforcedlogoff.
> Configure
> machine\system\currentcontrolset\services\lanmanserver\parameters\enablesecuritysignature.
> Configure
> machine\system\currentcontrolset\services\lanmanserver\parameters\nullsessionpipes.
> Configure
> machine\system\currentcontrolset\services\lanmanserver\parameters\requiresecuritysignature.
> Configure
> machine\system\currentcontrolset\services\lanmanserver\parameters\restrictnullsessaccess.
> Configure
> machine\system\currentcontrolset\services\lanmanworkstation\parameters\enableplaintextpassword.
> Configure
> machine\system\currentcontrolset\services\lanmanworkstation\parameters\enablesecuritysignature.
> Configure
> machine\system\currentcontrolset\services\lanmanworkstation\parameters\requiresecuritysignature.
> Configure machine\system\currentcontrolset\services\ldap\ldapclientintegrity.
> Configure
> machine\system\currentcontrolset\services\netlogon\parameters\disablepasswordchange.
> Configure
> machine\system\currentcontrolset\services\netlogon\parameters\maximumpasswordage.
> Configure
> machine\system\currentcontrolset\services\netlogon\parameters\requiresignorseal.
> Configure
> machine\system\currentcontrolset\services\netlogon\parameters\requirestrongkey.
> Configure
> machine\system\currentcontrolset\services\netlogon\parameters\sealsecurechannel.
> Configure
> machine\system\currentcontrolset\services\netlogon\parameters\signsecurechannel.
>
> Configuration of Registry Values was completed successfully.
> Configure log settings.
>
> Audit/Log configuration was completed successfully.
>
>
> ----Configure available attachment engines...
>
> Configuration of attachment engines was completed successfully.
>
>
> ----Un-initialize configuration engine...
My System SpecsSystem Spec
Old 06-10-2008   #3 (permalink)
Akidd
Guest


 

RE: resetting security permissions not working

Thanks for the post, but this doesn't solve my issue. I am having a problem
as a result of trying to share files. I am unable to run:

From the kb article: http://support.microsoft.com/kb/313222

As it says I ran: "secedit /configure /cfg %windir%\inf\defltbase.inf /db
defltbase.sdb /verbose"

One machine completes fine, the other does not.

On the machine that fails, upon running I immediately get:
"An extended error has occurred."

Help?


"Mick Murphy" wrote:
Quote:

> Here is how to Network them!
>
> http://technet.microsoft.com/en-us/l.../bb727037.aspx
>
> Have a read of the above link re Vista File and Printer Sharing.
>
> Permissions/Share info is there as well.
>
> If using Norton, McAfee, Trend Micro I.S., make sure file and printer
> sharing is enabled in THEIR firewall (or LAN allowed, depending on how their
> Exceptions are worded in their Firewall)
>
> 1st thing to do is make sure that the Workgroup Name of ALL the computers is
> the SAME.
>
> In Vista Network and Sharing:
>
> Network Discovery: ON (So it can see the other computers)
>
> Network set to Private (Public is for hotspots, airports, etc)
>
> File Sharing: ON
>
> Public Folder Sharing: ON (Vista’s Public Folder is the same as XP’s Shared
> Docs)
>
> Password Protected: OFF (unless you want to set up identical usernames and
> passwords (passwords can be different) on ALL computers in your Network) If
> you have it ON, you will be asked for a username and password when you try to
> access a Vista computer from an XP computer, or a Vista computer.
>
> --
> Mick Murphy - Qld - Australia
>
>
> "Akidd" wrote:
>
Quote:

> > I have two vista home premium machines. I was unable to browse between the
> > two on my home lan.
> >
> > I found the kb article: http://support.microsoft.com/kb/313222
> >
> > As it says I ran: secedit /configure /cfg %windir%\inf\defltbase.inf /db
> > defltbase.sdb /verbose
> >
> > One machine completes fine, the other does not.
> >
> > When I do so and I immediately get:
> >
> > An extended error has occurred.
> >
> > The task has completed with an error.
> > See log %windir%\security\logs\scesrv.log for detail info.
> >
> > I am worried about this problem. What is wrong? Below is scesrv.log:
> >
> >
> > ----Configure General Service Settings...
> > Configure sysmonlog.
> > Error 1060: The specified service does not exist as an installed service.
> > Error opening sysmonlog.
> > Configure SamSs.
> > Configure ntmssvc.
> > Error 1060: The specified service does not exist as an installed service.
> > Error opening ntmssvc.
> > Configure netddedsdm.
> > Error 1060: The specified service does not exist as an installed service.
> > Error opening netddedsdm.
> > Configure netdde.
> > Error 1060: The specified service does not exist as an installed service.
> > Error opening netdde.
> > Configure dmserver.
> > Error 1060: The specified service does not exist as an installed service.
> > Error opening dmserver.
> > Configure clipsrv.
> > Error 1060: The specified service does not exist as an installed service.
> > Error opening clipsrv.
> > Configure Browser.
> >
> > General Service configuration was completed successfully.
> >
> >
> > ----Configure available attachment engines...
> >
> > Configuration of attachment engines was completed successfully.
> >
> >
> > ----Configure Security Policy...
> > Configure password information.
> > Administrator account is disabled.
> > Guest account is disabled.
> >
> > System Access configuration was completed successfully.
> > LSA anonymous lookup names setting : existing SD =
> > DD;;0x800;;;AN)(A;;0xf1fff;;;BA)(A;;0x20801;;;WD)(A;;0x801;;;AN)(A;;0x1000;;;LS)(A;;0x1000;;;NS)(A;;0x1000;;;S-1-5-17).
> > Configure LSA anonymous lookup setting.
> > Configure machine\software\microsoft\windows
> > nt\currentversion\setup\recoveryconsole\securitylevel.
> > Configure machine\software\microsoft\windows
> > nt\currentversion\setup\recoveryconsole\setcommand.
> > Configure machine\software\microsoft\windows
> > nt\currentversion\winlogon\cachedlogonscount.
> > Configure machine\software\microsoft\windows
> > nt\currentversion\winlogon\forceunlocklogon.
> > Configure machine\software\microsoft\windows
> > nt\currentversion\winlogon\passwordexpirywarning.
> > Configure machine\software\microsoft\windows
> > nt\currentversion\winlogon\scremoveoption.
> > Configure
> > machine\software\microsoft\windows\currentversion\policies\system\dontdisplaylastusername.
> > Configure
> > machine\software\microsoft\windows\currentversion\policies\system\legalnoticecaption.
> > Configure
> > machine\software\microsoft\windows\currentversion\policies\system\legalnoticetext.
> > Configure
> > machine\software\microsoft\windows\currentversion\policies\system\scforceoption.
> > Configure
> > machine\software\microsoft\windows\currentversion\policies\system\shutdownwithoutlogon.
> > Configure
> > machine\software\microsoft\windows\currentversion\policies\system\undockwithoutlogon.
> > Configure
> > machine\software\policies\microsoft\windows\safer\codeidentifiers\authenticodeenabled.
> > Configure machine\system\currentcontrolset\control\lsa\auditbaseobjects.
> > Configure machine\system\currentcontrolset\control\lsa\crashonauditfail.
> > Configure machine\system\currentcontrolset\control\lsa\disabledomaincreds.
> > Configure
> > machine\system\currentcontrolset\control\lsa\everyoneincludesanonymous.
> > Configure
> > machine\system\currentcontrolset\control\lsa\fipsalgorithmpolicy\enabled.
> > Configure machine\system\currentcontrolset\control\lsa\forceguest.
> > Configure machine\system\currentcontrolset\control\lsa\fullprivilegeauditing.
> > Configure machine\system\currentcontrolset\control\lsa\limitblankpassworduse.
> > Configure machine\system\currentcontrolset\control\lsa\lmcompatibilitylevel.
> > Configure
> > machine\system\currentcontrolset\control\lsa\msv1_0\ntlmminclientsec.
> > Configure
> > machine\system\currentcontrolset\control\lsa\msv1_0\ntlmminserversec.
> > Configure machine\system\currentcontrolset\control\lsa\nolmhash.
> > Configure machine\system\currentcontrolset\control\lsa\restrictanonymous.
> > Configure machine\system\currentcontrolset\control\lsa\restrictanonymoussam.
> > Configure machine\system\currentcontrolset\control\print\providers\lanman
> > print services\servers\addprinterdrivers.
> > Configure machine\system\currentcontrolset\control\session
> > manager\kernel\obcaseinsensitive.
> > Configure machine\system\currentcontrolset\control\session manager\memory
> > management\clearpagefileatshutdown.
> > Configure machine\system\currentcontrolset\control\session
> > manager\protectionmode.
> > Configure
> > machine\system\currentcontrolset\services\lanmanserver\parameters\autodisconnect.
> > Configure
> > machine\system\currentcontrolset\services\lanmanserver\parameters\enableforcedlogoff.
> > Configure
> > machine\system\currentcontrolset\services\lanmanserver\parameters\enablesecuritysignature.
> > Configure
> > machine\system\currentcontrolset\services\lanmanserver\parameters\nullsessionpipes.
> > Configure
> > machine\system\currentcontrolset\services\lanmanserver\parameters\requiresecuritysignature.
> > Configure
> > machine\system\currentcontrolset\services\lanmanserver\parameters\restrictnullsessaccess.
> > Configure
> > machine\system\currentcontrolset\services\lanmanworkstation\parameters\enableplaintextpassword.
> > Configure
> > machine\system\currentcontrolset\services\lanmanworkstation\parameters\enablesecuritysignature.
> > Configure
> > machine\system\currentcontrolset\services\lanmanworkstation\parameters\requiresecuritysignature.
> > Configure machine\system\currentcontrolset\services\ldap\ldapclientintegrity.
> > Configure
> > machine\system\currentcontrolset\services\netlogon\parameters\disablepasswordchange.
> > Configure
> > machine\system\currentcontrolset\services\netlogon\parameters\maximumpasswordage.
> > Configure
> > machine\system\currentcontrolset\services\netlogon\parameters\requiresignorseal.
> > Configure
> > machine\system\currentcontrolset\services\netlogon\parameters\requirestrongkey.
> > Configure
> > machine\system\currentcontrolset\services\netlogon\parameters\sealsecurechannel.
> > Configure
> > machine\system\currentcontrolset\services\netlogon\parameters\signsecurechannel.
> >
> > Configuration of Registry Values was completed successfully.
> > Configure log settings.
> >
> > Audit/Log configuration was completed successfully.
> >
> >
> > ----Configure available attachment engines...
> >
> > Configuration of attachment engines was completed successfully.
> >
> >
> > ----Un-initialize configuration engine...
My System SpecsSystem Spec
Closed Thread

Thread Tools
Display Modes



Similar Threads
Thread Thread Starter Forum Replies Last Post
Security Permissions Problem Dell Boy Vista General 6 08-31-2007 02:41 AM
Security permissions Chad Vista security 3 07-10-2007 04:10 AM
RC2 Security permissions St Bob Vista security 2 10-12-2006 11:40 AM
Security Permissions.. =?Utf-8?B?S1A=?= Vista General 0 09-28-2006 05:49 PM
Security Permissions =?Utf-8?B?S1A=?= Vista General 0 09-28-2006 05:47 PM


Vistax64.com is an independent web site and has not been authorized,
sponsored, or otherwise approved by Microsoft Corporation.
"Windows Vista", the Start Orb, and related materials are trademarks of Microsoft Corp.
© Designer Media 2005-2008

1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51