Windows Vista Forums
Vista Forums Home Join Vista Forums Windows 7 Forum Vista Tutorials Tags
Welcome to Windows Vista Forums. Our forum is dedicated to helping you find solutions with any problems, errors or issues you are experiencing with Windows Vista. The Vista forum also covers news and updates and has an extensive Windows Vista tutorial section that covers a wide range of tips and tricks.

Go Back   Vista Forums > Vista Newsgroups > Vista security

Vista - resetting security permissions not working

Reply
 
Old 06-03-2008   #1 (permalink)
Akidd


 
 

resetting security permissions not working

I have two vista home premium machines. I was unable to browse between the
two on my home lan.

I found the kb article: http://support.microsoft.com/kb/313222

As it says I ran: secedit /configure /cfg %windir%\inf\defltbase.inf /db
defltbase.sdb /verbose

One machine completes fine, the other does not.

When I do so and I immediately get:

An extended error has occurred.

The task has completed with an error.
See log %windir%\security\logs\scesrv.log for detail info.

I am worried about this problem. What is wrong? Below is scesrv.log:


----Configure General Service Settings...
Configure sysmonlog.
Error 1060: The specified service does not exist as an installed service.
Error opening sysmonlog.
Configure SamSs.
Configure ntmssvc.
Error 1060: The specified service does not exist as an installed service.
Error opening ntmssvc.
Configure netddedsdm.
Error 1060: The specified service does not exist as an installed service.
Error opening netddedsdm.
Configure netdde.
Error 1060: The specified service does not exist as an installed service.
Error opening netdde.
Configure dmserver.
Error 1060: The specified service does not exist as an installed service.
Error opening dmserver.
Configure clipsrv.
Error 1060: The specified service does not exist as an installed service.
Error opening clipsrv.
Configure Browser.

General Service configuration was completed successfully.


----Configure available attachment engines...

Configuration of attachment engines was completed successfully.


----Configure Security Policy...
Configure password information.
Administrator account is disabled.
Guest account is disabled.

System Access configuration was completed successfully.
LSA anonymous lookup names setting : existing SD =
DD;;0x800;;;AN)(A;;0xf1fff;;;BA)(A;;0x20801;;;WD)(A;;0x801;;;AN)(A;;0x1000;;;LS)(A;;0x1000;;;NS)(A;;0x1000;;;S-1-5-17).
Configure LSA anonymous lookup setting.
Configure machine\software\microsoft\windows
nt\currentversion\setup\recoveryconsole\securitylevel.
Configure machine\software\microsoft\windows
nt\currentversion\setup\recoveryconsole\setcommand.
Configure machine\software\microsoft\windows
nt\currentversion\winlogon\cachedlogonscount.
Configure machine\software\microsoft\windows
nt\currentversion\winlogon\forceunlocklogon.
Configure machine\software\microsoft\windows
nt\currentversion\winlogon\passwordexpirywarning.
Configure machine\software\microsoft\windows
nt\currentversion\winlogon\scremoveoption.
Configure
machine\software\microsoft\windows\currentversion\policies\system\dontdisplaylastusername.
Configure
machine\software\microsoft\windows\currentversion\policies\system\legalnoticecaption.
Configure
machine\software\microsoft\windows\currentversion\policies\system\legalnoticetext.
Configure
machine\software\microsoft\windows\currentversion\policies\system\scforceoption.
Configure
machine\software\microsoft\windows\currentversion\policies\system\shutdownwithoutlogon.
Configure
machine\software\microsoft\windows\currentversion\policies\system\undockwithoutlogon.
Configure
machine\software\policies\microsoft\windows\safer\codeidentifiers\authenticodeenabled.
Configure machine\system\currentcontrolset\control\lsa\auditbaseobjects.
Configure machine\system\currentcontrolset\control\lsa\crashonauditfail.
Configure machine\system\currentcontrolset\control\lsa\disabledomaincreds.
Configure
machine\system\currentcontrolset\control\lsa\everyoneincludesanonymous.
Configure
machine\system\currentcontrolset\control\lsa\fipsalgorithmpolicy\enabled.
Configure machine\system\currentcontrolset\control\lsa\forceguest.
Configure machine\system\currentcontrolset\control\lsa\fullprivilegeauditing.
Configure machine\system\currentcontrolset\control\lsa\limitblankpassworduse.
Configure machine\system\currentcontrolset\control\lsa\lmcompatibilitylevel.
Configure
machine\system\currentcontrolset\control\lsa\msv1_0\ntlmminclientsec.
Configure
machine\system\currentcontrolset\control\lsa\msv1_0\ntlmminserversec.
Configure machine\system\currentcontrolset\control\lsa\nolmhash.
Configure machine\system\currentcontrolset\control\lsa\restrictanonymous.
Configure machine\system\currentcontrolset\control\lsa\restrictanonymoussam.
Configure machine\system\currentcontrolset\control\print\providers\lanman
print services\servers\addprinterdrivers.
Configure machine\system\currentcontrolset\control\session
manager\kernel\obcaseinsensitive.
Configure machine\system\currentcontrolset\control\session manager\memory
management\clearpagefileatshutdown.
Configure machine\system\currentcontrolset\control\session
manager\protectionmode.
Configure
machine\system\currentcontrolset\services\lanmanserver\parameters\autodisconnect.
Configure
machine\system\currentcontrolset\services\lanmanserver\parameters\enableforcedlogoff.
Configure
machine\system\currentcontrolset\services\lanmanserver\parameters\enablesecuritysignature.
Configure
machine\system\currentcontrolset\services\lanmanserver\parameters\nullsessionpipes.
Configure
machine\system\currentcontrolset\services\lanmanserver\parameters\requiresecuritysignature.
Configure
machine\system\currentcontrolset\services\lanmanserver\parameters\restrictnullsessaccess.
Configure
machine\system\currentcontrolset\services\lanmanworkstation\parameters\enableplaintextpassword.
Configure
machine\system\currentcontrolset\services\lanmanworkstation\parameters\enablesecuritysignature.
Configure
machine\system\currentcontrolset\services\lanmanworkstation\parameters\requiresecuritysignature.
Configure machine\system\currentcontrolset\services\ldap\ldapclientintegrity.
Configure
machine\system\currentcontrolset\services\netlogon\parameters\disablepasswordchange.
Configure
machine\system\currentcontrolset\services\netlogon\parameters\maximumpasswordage.
Configure
machine\system\currentcontrolset\services\netlogon\parameters\requiresignorseal.
Configure
machine\system\currentcontrolset\services\netlogon\parameters\requirestrongkey.
Configure
machine\system\currentcontrolset\services\netlogon\parameters\sealsecurechannel.
Configure
machine\system\currentcontrolset\services\netlogon\parameters\signsecurechannel.

Configuration of Registry Values was completed successfully.
Configure log settings.

Audit/Log configuration was completed successfully.


----Configure available attachment engines...

Configuration of attachment engines was completed successfully.


----Un-initialize configuration engine...

My System SpecsSystem Spec
Old 06-03-2008   #2 (permalink)
Mick Murphy


 
 

RE: resetting security permissions not working

Here is how to Network them!

http://technet.microsoft.com/en-us/l.../bb727037.aspx

Have a read of the above link re Vista File and Printer Sharing.

Permissions/Share info is there as well.

If using Norton, McAfee, Trend Micro I.S., make sure file and printer
sharing is enabled in THEIR firewall (or LAN allowed, depending on how their
Exceptions are worded in their Firewall)

1st thing to do is make sure that the Workgroup Name of ALL the computers is
the SAME.

In Vista Network and Sharing:

Network Discovery: ON (So it can see the other computers)

Network set to Private (Public is for hotspots, airports, etc)

File Sharing: ON

Public Folder Sharing: ON (Vista’s Public Folder is the same as XP’s Shared
Docs)

Password Protected: OFF (unless you want to set up identical usernames and
passwords (passwords can be different) on ALL computers in your Network) If
you have it ON, you will be asked for a username and password when you try to
access a Vista computer from an XP computer, or a Vista computer.

--
Mick Murphy - Qld - Australia


"Akidd" wrote:
Quote:

> I have two vista home premium machines. I was unable to browse between the
> two on my home lan.
>
> I found the kb article: http://support.microsoft.com/kb/313222
>
> As it says I ran: secedit /configure /cfg %windir%\inf\defltbase.inf /db
> defltbase.sdb /verbose
>
> One machine completes fine, the other does not.
>
> When I do so and I immediately get:
>
> An extended error has occurred.
>
> The task has completed with an error.
> See log %windir%\security\logs\scesrv.log for detail info.
>
> I am worried about this problem. What is wrong? Below is scesrv.log:
>
>
> ----Configure General Service Settings...
> Configure sysmonlog.
> Error 1060: The specified service does not exist as an installed service.
> Error opening sysmonlog.
> Configure SamSs.
> Configure ntmssvc.
> Error 1060: The specified service does not exist as an installed service.
> Error opening ntmssvc.
> Configure netddedsdm.
> Error 1060: The specified service does not exist as an installed service.
> Error opening netddedsdm.
> Configure netdde.
> Error 1060: The specified service does not exist as an installed service.
> Error opening netdde.
> Configure dmserver.
> Error 1060: The specified service does not exist as an installed service.
> Error opening dmserver.
> Configure clipsrv.
> Error 1060: The specified service does not exist as an installed service.
> Error opening clipsrv.
> Configure Browser.
>
> General Service configuration was completed successfully.
>
>
> ----Configure available attachment engines...
>
> Configuration of attachment engines was completed successfully.
>
>
> ----Configure Security Policy...
> Configure password information.
> Administrator account is disabled.
> Guest account is disabled.
>
> System Access configuration was completed successfully.
> LSA anonymous lookup names setting : existing SD =
> DD;;0x800;;;AN)(A;;0xf1fff;;;BA)(A;;0x20801;;;WD)(A;;0x801;;;AN)(A;;0x1000;;;LS)(A;;0x1000;;;NS)(A;;0x1000;;;S-1-5-17).
> Configure LSA anonymous lookup setting.
> Configure machine\software\microsoft\windows
> nt\currentversion\setup\recoveryconsole\securitylevel.
> Configure machine\software\microsoft\windows
> nt\currentversion\setup\recoveryconsole\setcommand.
> Configure machine\software\microsoft\windows
> nt\currentversion\winlogon\cachedlogonscount.
> Configure machine\software\microsoft\windows
> nt\currentversion\winlogon\forceunlocklogon.
> Configure machine\software\microsoft\windows
> nt\currentversion\winlogon\passwordexpirywarning.
> Configure machine\software\microsoft\windows
> nt\currentversion\winlogon\scremoveoption.
> Configure
> machine\software\microsoft\windows\currentversion\policies\system\dontdisplaylastusername.
> Configure
> machine\software\microsoft\windows\currentversion\policies\system\legalnoticecaption.
> Configure
> machine\software\microsoft\windows\currentversion\policies\system\legalnoticetext.
> Configure
> machine\software\microsoft\windows\currentversion\policies\system\scforceoption.
> Configure
> machine\software\microsoft\windows\currentversion\policies\system\shutdownwithoutlogon.
> Configure
> machine\software\microsoft\windows\currentversion\policies\system\undockwithoutlogon.
> Configure
> machine\software\policies\microsoft\windows\safer\codeidentifiers\authenticodeenabled.
> Configure machine\system\currentcontrolset\control\lsa\auditbaseobjects.
> Configure machine\system\currentcontrolset\control\lsa\crashonauditfail.
> Configure machine\system\currentcontrolset\control\lsa\disabledomaincreds.
> Configure
> machine\system\currentcontrolset\control\lsa\everyoneincludesanonymous.
> Configure
> machine\system\currentcontrolset\control\lsa\fipsalgorithmpolicy\enabled.
> Configure machine\system\currentcontrolset\control\lsa\forceguest.
> Configure machine\system\currentcontrolset\control\lsa\fullprivilegeauditing.
> Configure machine\system\currentcontrolset\control\lsa\limitblankpassworduse.
> Configure machine\system\currentcontrolset\control\lsa\lmcompatibilitylevel.
> Configure
> machine\system\currentcontrolset\control\lsa\msv1_0\ntlmminclientsec.
> Configure
> machine\system\currentcontrolset\control\lsa\msv1_0\ntlmminserversec.
> Configure machine\system\currentcontrolset\control\lsa\nolmhash.
> Configure machine\system\currentcontrolset\control\lsa\restrictanonymous.
> Configure machine\system\currentcontrolset\control\lsa\restrictanonymoussam.
> Configure machine\system\currentcontrolset\control\print\providers\lanman
> print services\servers\addprinterdrivers.
> Configure machine\system\currentcontrolset\control\session
> manager\kernel\obcaseinsensitive.
> Configure machine\system\currentcontrolset\control\session manager\memory
> management\clearpagefileatshutdown.
> Configure machine\system\currentcontrolset\control\session
> manager\protectionmode.
> Configure
> machine\system\currentcontrolset\services\lanmanserver\parameters\autodisconnect.
> Configure
> machine\system\currentcontrolset\services\lanmanserver\parameters\enableforcedlogoff.
> Configure
> machine\system\currentcontrolset\services\lanmanserver\parameters\enablesecuritysignature.
> Configure
> machine\system\currentcontrolset\services\lanmanserver\parameters\nullsessionpipes.
> Configure
> machine\system\currentcontrolset\services\lanmanserver\parameters\requiresecuritysignature.
> Configure
> machine\system\currentcontrolset\services\lanmanserver\parameters\restrictnullsessaccess.
> Configure
> machine\system\currentcontrolset\services\lanmanworkstation\parameters\enableplaintextpassword.
> Configure
> machine\system\currentcontrolset\services\lanmanworkstation\parameters\enablesecuritysignature.
> Configure
> machine\system\currentcontrolset\services\lanmanworkstation\parameters\requiresecuritysignature.
> Configure machine\system\currentcontrolset\services\ldap\ldapclientintegrity.
> Configure
> machine\system\currentcontrolset\services\netlogon\parameters\disablepasswordchange.
> Configure
> machine\system\currentcontrolset\services\netlogon\parameters\maximumpasswordage.
> Configure
> machine\system\currentcontrolset\services\netlogon\parameters\requiresignorseal.
> Configure
> machine\system\currentcontrolset\services\netlogon\parameters\requirestrongkey.
> Configure
> machine\system\currentcontrolset\services\netlogon\parameters\sealsecurechannel.
> Configure
> machine\system\currentcontrolset\services\netlogon\parameters\signsecurechannel.
>
> Configuration of Registry Values was completed successfully.
> Configure log settings.
>
> Audit/Log configuration was completed successfully.
>
>
> ----Configure available attachment engines...
>
> Configuration of attachment engines was completed successfully.
>
>
> ----Un-initialize configuration engine...
My System SpecsSystem Spec
Old 06-10-2008   #3 (permalink)
Akidd


 
 

RE: resetting security permissions not working

Thanks for the post, but this doesn't solve my issue. I am having a problem
as a result of trying to share files. I am unable to run:

From the kb article: http://support.microsoft.com/kb/313222

As it says I ran: "secedit /configure /cfg %windir%\inf\defltbase.inf /db
defltbase.sdb /verbose"

One machine completes fine, the other does not.

On the machine that fails, upon running I immediately get:
"An extended error has occurred."

Help?


"Mick Murphy" wrote:
Quote:

> Here is how to Network them!
>
> http://technet.microsoft.com/en-us/l.../bb727037.aspx
>
> Have a read of the above link re Vista File and Printer Sharing.
>
> Permissions/Share info is there as well.
>
> If using Norton, McAfee, Trend Micro I.S., make sure file and printer
> sharing is enabled in THEIR firewall (or LAN allowed, depending on how their
> Exceptions are worded in their Firewall)
>
> 1st thing to do is make sure that the Workgroup Name of ALL the computers is
> the SAME.
>
> In Vista Network and Sharing:
>
> Network Discovery: ON (So it can see the other computers)
>
> Network set to Private (Public is for hotspots, airports, etc)
>
> File Sharing: ON
>
> Public Folder Sharing: ON (Vista’s Public Folder is the same as XP’s Shared
> Docs)
>
> Password Protected: OFF (unless you want to set up identical usernames and
> passwords (passwords can be different) on ALL computers in your Network) If
> you have it ON, you will be asked for a username and password when you try to
> access a Vista computer from an XP computer, or a Vista computer.
>
> --
> Mick Murphy - Qld - Australia
>
>
> "Akidd" wrote:
>
Quote:

> > I have two vista home premium machines. I was unable to browse between the
> > two on my home lan.
> >
> > I found the kb article: http://support.microsoft.com/kb/313222
> >
> > As it says I ran: secedit /configure /cfg %windir%\inf\defltbase.inf /db
> > defltbase.sdb /verbose
> >
> > One machine completes fine, the other does not.
> >
> > When I do so and I immediately get:
> >
> > An extended error has occurred.
> >
> > The task has completed with an error.
> > See log %windir%\security\logs\scesrv.log for detail info.
> >
> > I am worried about this problem. What is wrong? Below is scesrv.log:
> >
> >
> > ----Configure General Service Settings...
> > Configure sysmonlog.
> > Error 1060: The specified service does not exist as an installed service.
> > Error opening sysmonlog.
> > Configure SamSs.
> > Configure ntmssvc.
> > Error 1060: The specified service does not exist as an installed service.
> > Error opening ntmssvc.
> > Configure netddedsdm.
> > Error 1060: The specified service does not exist as an installed service.
> > Error opening netddedsdm.
> > Configure netdde.
> > Error 1060: The specified service does not exist as an installed service.
> > Error opening netdde.
> > Configure dmserver.
> > Error 1060: The specified service does not exist as an installed service.
> > Error opening dmserver.
> > Configure clipsrv.
> > Error 1060: The specified service does not exist as an installed service.
> > Error opening clipsrv.
> > Configure Browser.
> >
> > General Service configuration was completed successfully.
> >
> >
> > ----Configure available attachment engines...
> >
> > Configuration of attachment engines was completed successfully.
> >
> >
> > ----Configure Security Policy...
> > Configure password information.
> > Administrator account is disabled.
> > Guest account is disabled.
> >
> > System Access configuration was completed successfully.
> > LSA anonymous lookup names setting : existing SD =
> > DD;;0x800;;;AN)(A;;0xf1fff;;;BA)(A;;0x20801;;;WD)(A;;0x801;;;AN)(A;;0x1000;;;LS)(A;;0x1000;;;NS)(A;;0x1000;;;S-1-5-17).
> > Configure LSA anonymous lookup setting.
> > Configure machine\software\microsoft\windows
> > nt\currentversion\setup\recoveryconsole\securitylevel.
> > Configure machine\software\microsoft\windows
> > nt\currentversion\setup\recoveryconsole\setcommand.
> > Configure machine\software\microsoft\windows
> > nt\currentversion\winlogon\cachedlogonscount.
> > Configure machine\software\microsoft\windows
> > nt\currentversion\winlogon\forceunlocklogon.
> > Configure machine\software\microsoft\windows
> > nt\currentversion\winlogon\passwordexpirywarning.
> > Configure machine\software\microsoft\windows
> > nt\currentversion\winlogon\scremoveoption.
> > Configure
> > machine\software\microsoft\windows\currentversion\policies\system\dontdisplaylastusername.
> > Configure
> > machine\software\microsoft\windows\currentversion\policies\system\legalnoticecaption.
> > Configure
> > machine\software\microsoft\windows\currentversion\policies\system\legalnoticetext.
> > Configure
> > machine\software\microsoft\windows\currentversion\policies\system\scforceoption.
> > Configure
> > machine\software\microsoft\windows\currentversion\policies\system\shutdownwithoutlogon.
> > Configure
> > machine\software\microsoft\windows\currentversion\policies\system\undockwithoutlogon.
> > Configure
> > machine\software\policies\microsoft\windows\safer\codeidentifiers\authenticodeenabled.
> > Configure machine\system\currentcontrolset\control\lsa\auditbaseobjects.
> > Configure machine\system\currentcontrolset\control\lsa\crashonauditfail.
> > Configure machine\system\currentcontrolset\control\lsa\disabledomaincreds.
> > Configure
> > machine\system\currentcontrolset\control\lsa\everyoneincludesanonymous.
> > Configure
> > machine\system\currentcontrolset\control\lsa\fipsalgorithmpolicy\enabled.
> > Configure machine\system\currentcontrolset\control\lsa\forceguest.
> > Configure machine\system\currentcontrolset\control\lsa\fullprivilegeauditing.
> > Configure machine\system\currentcontrolset\control\lsa\limitblankpassworduse.
> > Configure machine\system\currentcontrolset\control\lsa\lmcompatibilitylevel.
> > Configure
> > machine\system\currentcontrolset\control\lsa\msv1_0\ntlmminclientsec.
> > Configure
> > machine\system\currentcontrolset\control\lsa\msv1_0\ntlmminserversec.
> > Configure machine\system\currentcontrolset\control\lsa\nolmhash.
> > Configure machine\system\currentcontrolset\control\lsa\restrictanonymous.
> > Configure machine\system\currentcontrolset\control\lsa\restrictanonymoussam.
> > Configure machine\system\currentcontrolset\control\print\providers\lanman
> > print services\servers\addprinterdrivers.
> > Configure machine\system\currentcontrolset\control\session
> > manager\kernel\obcaseinsensitive.
> > Configure machine\system\currentcontrolset\control\session manager\memory
> > management\clearpagefileatshutdown.
> > Configure machine\system\currentcontrolset\control\session
> > manager\protectionmode.
> > Configure
> > machine\system\currentcontrolset\services\lanmanserver\parameters\autodisconnect.
> > Configure
> > machine\system\currentcontrolset\services\lanmanserver\parameters\enableforcedlogoff.
> > Configure
> > machine\system\currentcontrolset\services\lanmanserver\parameters\enablesecuritysignature.
> > Configure
> > machine\system\currentcontrolset\services\lanmanserver\parameters\nullsessionpipes.
> > Configure
> > machine\system\currentcontrolset\services\lanmanserver\parameters\requiresecuritysignature.
> > Configure
> > machine\system\currentcontrolset\services\lanmanserver\parameters\restrictnullsessaccess.
> > Configure
> > machine\system\currentcontrolset\services\lanmanworkstation\parameters\enableplaintextpassword.
> > Configure
> > machine\system\currentcontrolset\services\lanmanworkstation\parameters\enablesecuritysignature.
> > Configure
> > machine\system\currentcontrolset\services\lanmanworkstation\parameters\requiresecuritysignature.
> > Configure machine\system\currentcontrolset\services\ldap\ldapclientintegrity.
> > Configure
> > machine\system\currentcontrolset\services\netlogon\parameters\disablepasswordchange.
> > Configure
> > machine\system\currentcontrolset\services\netlogon\parameters\maximumpasswordage.
> > Configure
> > machine\system\currentcontrolset\services\netlogon\parameters\requiresignorseal.
> > Configure
> > machine\system\currentcontrolset\services\netlogon\parameters\requirestrongkey.
> > Configure
> > machine\system\currentcontrolset\services\netlogon\parameters\sealsecurechannel.
> > Configure
> > machine\system\currentcontrolset\services\netlogon\parameters\signsecurechannel.
> >
> > Configuration of Registry Values was completed successfully.
> > Configure log settings.
> >
> > Audit/Log configuration was completed successfully.
> >
> >
> > ----Configure available attachment engines...
> >
> > Configuration of attachment engines was completed successfully.
> >
> >
> > ----Un-initialize configuration engine...
My System SpecsSystem Spec
Reply

Thread Tools


Similar Threads
Thread Forum
Security permissions Vista General
Security permissions Vista security
RC2 Security permissions Vista security
Security Permissions.. Vista General
Security Permissions Vista General


Vista Forums is an independent web site and has not been authorized,
sponsored, or otherwise approved by Microsoft Corporation.
"Windows Vista", the Start Orb, and related materials are trademarks of Microsoft Corp.
© Designer Media Ltd

1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46