(0 Votes)
When you try to open a folder in Microsoft Windows XP or when trying to install Service Packs or when trying to disable the startup programs using System Configuration Utility (msconfig), you might encounter an error message - "Access Denied"
- Try to perform any of the above steps from the safe mode (F8 at bootup)
- Try to back up the registry and then try to manually give permissions to all the hives in the registry.
The five hives depicted below:
Just check the following screenshots given below to give manual permissions to registry…
- Select the first hive of the registry (HKEY_CLASSES_ROOT) in this example
- Right click on it (HKEY_CLASSES_ROOT) and then select permissions.
- This will bring up the Permissions for HKEY_CLASSES_ROOT window
- Click on “Add” button, which will bring up the “Select Users or Groups” window
- Enter in the box for object names to select as “Everyone” and the click the button “Check Names”
- Now click on OK to proceed..
- Now you need to select the “Full Control” and “Read” option under “Allow” granting manual permission to that particular hive (HKEY_CLASSES_ROOT) in this example.
- Once you have done that, click on OK, completing the manual permissions to one hive in the registry. Similarly you need to be doing the same steps for the other four hives at the registry.
- Once the manual permissions are given to all the hives of the registry it is suggested to restart the computer.
3. Try to run secedit commands from the command prompt
- secedit.exe /analyze /db C:\WINDOWS\sectest.db /cfg C:\WINDOWS\inf\defltwk.inf /log C:\WINDOWS\security\logs\secanalyze.log
- secedit.exe /configure /db C:\WINDOWS\sectest.db /cfg C:\WINDOWS\inf\defltwk.inf /log C:\WINDOWS\security\logs\secrepair.log
Note: Remember secedit will work only on XP Professional. For XP Home users, create a batch file as secedit.chm and save it to the C:\windows\system32 folder. Then run the above commands to give permissions.
The contents of the secedit.chm file are as follows …. Do not include the * lines in the file
*******************************************************
cd %systemdrive%\
cd %systemroot%\
cls
@echo off
echo You are about to reset security settings back to the defaults
echo.
echo.
pause
echo.
echo.
echo Please wait while security settings are reset back to the defaults
echo.
echo.
secedit /configure /cfg repair\secsetup.inf /db secsetup.sdb /verbose
*******************************************************
4. If all else fails, you can use subinacl to give Administrators Full Control to the registry and the system drive. This is shotgun troubleshooting.
a. Install subinacl.msi from http://go.microsoft.com/fwlink/?LinkId=23418
b. Create a batch file, reset.cmd, that contains the lines below, and save it to C:\Program Files\Windows Resource Kits\Tools
subinacl /subkeyreg HKEY_LOCAL_MACHINE /grant=administrators=f
subinacl /subkeyreg HKEY_CURRENT_USER /grant=administrators=f
subinacl /subkeyreg HKEY_CLASSES_ROOT /grant=administrators=f
subinacl /subdirectories %SystemDrive% /grant=administrators=f
subinacl /subkeyreg HKEY_LOCAL_MACHINE /grant=system=f
subinacl /subkeyreg HKEY_CURRENT_USER /grant=system=f
subinacl /subkeyreg HKEY_CLASSES_ROOT /grant=system=f
subinacl /subdirectories %SystemDrive% /grant=system=f
c. Open a command prompt and type the following without quotes (Hit Enter after
each line):
cd program files\windows resource kits\tools
reset.cmd
This will take approximately 10 - 15 minutes. After it completes restart the computer.
(0 Votes)
