User and Admin account big troubles !

Ashanta · Nov 20, 2010

Hi,

As I have some troubles to take ownership of HKLM, HCR,... from the registry.

Someone recommend me to do the following:

Step 1:
Clicked: Start Menu
Click: Run
Type: net user administrator /active:yes
Close All Other Applications And Reboot Your System.

Step 2:
Click/Login To The Administrator Account.
Clicked: Start Menu
Click: Run
Type: Regedit
Go to: HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\
CurrentVersion\Policies\System
Right Click On: EnableLUA
Click: Modify
Change: Value Data To A 0
Click: OK

Step 3:
Go Back To The Root Folders In The Registry Editor.
Right Click On: HKEY_CLASSES_ROOT
Click: Permissions
Click: CREATOR OWNER
Check: All Allow Boxes
Click: Apply
Click: SYSTEM
Check: All Allow Boxes
Click: Apply
Click: Administrators
Check: All Allow Boxes
Click: Apply
Click On Users
Click: Remove
Click: Your Account Name If It Shows
Click: Remove
Click: OK

Step 4:
Right Click On: HKEY_CURRENT_USER
Click: Permissions
Click: SYSTEM
Check: All Allow Boxes
Click: Apply
Click: Administrators
Check: All Allow Boxes
Click: Apply
Click: OK

Step 5:
Right Click On: HKEY_LOCAL_MACHINE
Click: Permissions
Click: Everyone
Check: All Allow Boxes
Click: Apply
Click: RESTRICTED
Check: All Allow Boxes
Click: Apply
Click: SYSTEM
Check: All Allow Boxes
Click: Apply
Click: Administrators
Check: All Allow Boxes
Click: Apply
Click: OK

Step 6:
Right Click On: HKEY_USERS
Click: Permissions
Click: Everyone
Check: All Allow Boxes
Click: Apply
Click: RESTRICTED
Check: All Allow Boxes
Click: Apply
Click: SYSTEM
Check: All Allow Boxes
Click: Apply
Click: Administrators
Check: All Allow Boxes
Click: Apply
Click On Users If It Shows
Click: Remove
Click: Your Account Name If It Shows
Click: Remove
Click: OK

Step 7:
Right Click On: HKEY_CURRENT_CONFIG
Click: Permissions
Click: CREATOR OWNER
Check: All Allow Boxes
Click: Apply
Click: Administrators
Check: All Allow Boxes
Click: Apply
Click: OK
Close Registry Editor And All Other Applications And Reboot Your System.

Step 8:
Click/Login To The Available Regular/Owner Account.
Clicked: Start Menu
Click: Control Panel
Click: Add Or Remove User Acounts
Create A New User Account And Logoff.
Close Registry Editor And All Other Applications And Reboot Your System.

Step 9:
Click/Login To Your New Created Account.
Right Click On The Drive Or Directory You Lost Access To.
Click: Properties
Click: Security
Click: Advance
At The Permissions Tab.
Click: Edit
Click: Add
Type The Name Of The Recently New Created Account.
Click: Check Names
Your New Account Name Should Fully Show Up.
Click: OK
A Permission Screen Should Show Up.
Click On The Allow Box Where It Says Full Control.
Where It Says "Apply To:" Choose The "This Folder, Subfolders And Files"
Option.
Click: OK
Again At The Permissions Tab Click On Your New Created Account.
Click: Apply
Click Yes On The Security Popup To Change Your Allow Permissions.
If An Errors Occur Just Click Continue.
Once The Process Finishes, Reboot Your System And Login To Your New Account.
You Should Now Have Access Back Into Your Hard Drive Or Directory.

I did all except the nine step. After the eight, while enter to my new account, I get a blue screen in my session instead of my dekstop, no icons no system tray appeared.
I reboot my computer and I notice that I couldn' enter anymore to my Admin account: Enter and my session was automatically closed.

Nevertheless, I could enter to my standard user account (the old one) named Transparence but the dekstop is in black no icons, no system tray, nothing !

I decided to Alt Ctrl delete like to close my session, but instead I choose Task Manager. I have only 4 processes :

csrss.exe
dwm.exe
taskmgr.exe
winlogon.exe

How can i get back and change the ownership of my registry ? Is it possible to check my registry with someone who is running Vista Business 32 bits ?

The following are the settings I have for now :

Registry:

HCR:
System total control and lecture (checked)
Admin idem

HCU:

System total control and lecture (checked)
Admin idem
Users lecture (checked)

HLM:

Everybody +Restricted : lecture checked
System +Admin: total control and lecture (checked)

HU: idem that HLM

HCF: idem than HCR

Also, I'd like to check the Admin tool, Computer Management, User and Local Group

I tried to import my backup registry, but I had an error message that all datas weren't import. I hear that the best will be to overwrite it.

PS: I have a new admin account, but I'd like to solve the issue with my admin account (old one).

Thanks in advance !

richc46 · Nov 20, 2010

Welcome
If you can get to system restore, you could go back. Restore includes registry changes.
Try in safe mode if necessary
Try with the hidden administrator if necessary.
http://www.vistax64.com/tutorials/67567-administrator-account.html
http://www.sevenforums.com/tutorials/57746-system-restore-general-troubleshooting-fix-issues.html

niemiro · Nov 21, 2010

Hello!

Please try a System Restore, and everything mentioned above first.

Permissions are very, very subtle in Windows Vista and 7. Try this in XP, yes, try this in Vista, no way. Your previous helper was using old, and dodgy knowledge. I will see what I can do.

Do you have any backups of your registry. If necessary, there is a very special tool that can extract files from System Restore.

If really necessary, I may be able to take all of your registry hives in a private message, fix them up on my machine, and copy them all back from a bootable CD.

Is it possible to ask where you got this information from, just for us to see. It may help, it may not.

Thanks!

Richard

niemiro · Nov 21, 2010

I have just had an idea! The PATH variable is stored in the HKLM Session Manager. Let us test the HKLM hive. Open Task Manager. File > New Task (Run...) and put in explorer.exe. Repeat for cmd.exe. See if either of them open.

Thanks!

Ashanta · Nov 21, 2010

richc46 said:
Welcome
If you can get to system restore, you could go back. Restore includes registry changes.
Try in safe mode if necessary
Try with the hidden administrator if necessary.
http://www.vistax64.com/tutorials/67567-administrator-account.html
System Restore General Troubleshooting to Fix Issues - Windows 7 Forums

My system restore is disabled.

Ashanta · Nov 21, 2010

niemiro said:
Hello!

Please try a System Restore, and everything mentioned above first.

Permissions are very, very subtle in Windows Vista and 7. Try this in XP, yes, try this in Vista, no way. Your previous helper was using old, and dodgy knowledge. I will see what I can do.

Do you have any backups of your registry. If necessary, there is a very special tool that can extract files from System Restore.

If really necessary, I may be able to take all of your registry hives in a private message, fix them up on my machine, and copy them all back from a bootable CD.

Is it possible to ask where you got this information from, just for us to see. It may help, it may not.

Thanks!

Richard

I have a few back-up of my registry, three I think. I will try to send you by PM.

My back up registry is about 174 MB. I suppose I need to upload to a server. It will too large to send by PM.

I'm looking for how to send a PM...lol

Thanks a lot !

Ashanta · Nov 21, 2010

Niemiro,

Your mailbox is full at this moment.

Anyway, here you are the requested back up reg file

http://www.myupload.dk/showfile/67534941a38.reg/ 174 Mb

Thanks for all !

Ashanta · Nov 21, 2010

niemiro said:
I have just had an idea! The PATH variable is stored in the HKLM Session Manager. Let us test the HKLM hive. Open Task Manager. File > New Task (Run...) and put in explorer.exe. Repeat for cmd.exe. See if either of them open.

Thanks!

Only cmd.exe works under my user account (with the black screen) !

niemiro · Nov 21, 2010

Ahhh! I hadn't quite meant you to upload them like that. I shall have a look. If there are keys and values that are damaged, I can fix them using this backup, but I cannot fix permissions issues. I might actually need you to re-upload the hives, rather than the text backups. We now know that you are not completely locked out of HKLM anyway at the moment.

niemiro · Nov 21, 2010

Do you have the thread to hand, or not?

Thanks!

niemiro · Nov 21, 2010

Hmmm:

Step 1:
Clicked: Start Menu
Click: Run
Type: net user administrator /active:yes
Close All Other Applications And Reboot Your System.

I cannot tell you how fiercely opposed to this I am. I regularly see people recommending this on this and other forums as a means of getting around permissions. I hate this so, so much. You would have no idea of the strenght of my feelings without meeting me.

Permission problems can be overcome. This account is usually disabled by default. I would never enable it. I run as an administrator, I have permissions for my account set quite high, so I can carry out modifications without being hindered. UAC is off. This is not a very good role model, however, it proves that the Administrator account is not necessary.

It could also be a security risk, and is often un password protected. But these are only made up reasons, excuses. I have a far bigger reason to hate it.

It has been known to cause so many problems. Enabling it can destabilise ALL permissions over the entire system, creating unreconcilable problems for ever. Some of them are not rectifiable with a Repair Install even.

It might seem logical to disable it. However, it has been known for UAC to depend on it once it has been enabled. If you disable it, and UAC is on, whenever you get a UAC prompt, the ALLOW or YES button is greyed out and unclickable. Therefore, one is not able to do almost anything, be it disable UAC, access anything System Wide, or even re-enable the Administrator account.

We cannot disable it, now that it is enabled.

I am just trying to educate people with this, and to spread awareness. What does this mean for you? We will leave it enabled, plug the one security hole by password protecting it later, take and fix up your registry, fix the permissions, and you should be good to go!

Thanks!

Richard

Ashanta · Nov 21, 2010

niemiro said:
Do you have the thread to hand, or not?

Thanks!

I hope my friend I will let you know.

niemiro · Nov 21, 2010

Don't worry about it! We can solve the issues without it! Give me a few seconds to compose my reply!

niemiro · Nov 21, 2010

Hello!

I do kind of need the actual registry hives, in their encoded state to be able to provide a fixed up registry.

If you would like to re-install at any time, then please do so. Otherwise, stick with me, and we can fix our way to glory together!

Right, please do the following:

Elevated Command Prompt

Now paste in (must use Right Click > Paste, Ctrl-V does NOT work in Command Prompt) the following, one at a time, pressing enter after each one.

dir C:\Windows\Servicing\Packages /s > %UserProfile%\Desktop\log1.txt

dir C:\Windows\WinSxS /s > %UserProfile%\Desktop\log2.txt

Download the Freeware RegBak from here: Acelogix Software - Download products

Run it, and make a backup. Make sure that all three boxes are ticked (System, Current User, and Other hives)

Navigate to C:\Windows\RegBak\{Date}\ and copy EVERY file to a new folder on your Desktop. Put log1.txt, and log2.txt into this new folder also.

Once they are all safely in the folder, right click on the folder > Send to > Compressed (zipped) archive.

Now upload this zip file to Speedy Share - upload your files here or any other website you like.

Once you have done this, copy the link, and send me a Private Message containing the link. You can PM me from this link: http://www.vistax64.com/private.php?do=newpm&u=151549

Thanks!

Richard

P.S. Sorry to mess you around with these registry hives.

Ashanta · Nov 21, 2010

Both command dir c: and so on, I have a message: path not found. (translate from french)

Ashanta · Nov 21, 2010

I make a search and I found this

X86 is part of WinSXS folder

Ashanta · Nov 21, 2010

I found Servicing/Packages and Winsxs, let me know exactely what you need because the cmd don't work.

Winsxs is located into C:\Windows\System32

Ashanta · Nov 21, 2010

New info : I can't enter into my Bios at boot up with the key F2 since yesterday

niemiro · Nov 22, 2010

Don't worry about the two logs. They are unimportant for the moment. Give me a little while to patch up your registry!

Ashanta · Nov 22, 2010

No problem, I'm quiet and not stressed thant to you

Keep in mind that the backup we made with Regbak is the real one, it's not the previous one I gave you a link (174 Mb), that I back up before all the story with my Admin and User account.

User and Admin account big troubles !

My Computer

My Computer

Banned

My Computer

Banned

My Computer

My Computer

My Computer

My Computer

My Computer

Banned

My Computer

Banned

My Computer

Banned

My Computer

My Computer

Banned

My Computer

Banned

My Computer

My Computer

Attachments

My Computer

My Computer

My Computer

Banned

My Computer

My Computer