Local Service, winreg, remote registry
Regarding the problem of having to add Local Service to have read permissions
on
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\SecurePipeServers\winreg
in what specific situations does the problem occur? Is the problem only
caused by upgrades from Win2K to WinXP? Specifically which upgrades will
lead to this problem?
With solutions, are there any Microsoft updates, hotfixes, service packs?
Or must administrators add the permissions manually?
Can Microsoft release a Knowledgebase Article on this issue, listing all the
cases that the problem can occur, and the corresponding solution to each case?
Thank you. Tag: userinit.exe application failure Tag: 60185
Network security
We have a network of around 40 computers networked to share internet
connection and some folders. we use a Internet Router to do so. Latley we've
been having alot of problems with worms, viurses, spyware .... over the
network. So i am looking into how to make our network more secured. We
already have Norton antivirus and ZoneAlarm pro installed on all the pcs.
These are The steps that i am looking into do (possibly) to do so. Please
tell me your openion and any guides onn these steps.
1- Installing a AD
2- Installing a server based firewall between the internet ann internal
network. Im thinking of ISA if its up to the job.
3- Having a netweork based Antivirus. I was thinking of Norton Antivirus
cop.. BUt as i read on your article norton is not a very good chooice. I am
looking for some thing i could easily centrlize and automate and download
update onto server so i dont have to goto every computer.
4- Making WS to run some applications automatically when they boot,from
server so i dont have to install it on every WS (i still dont know how to do
this, any help? applications such as firewall, spyremovers and other possible
needed software.
p.s. any sites that have usful info about this subject?
Thanks in advance
Zee Tag: userinit.exe application failure Tag: 60182
SOS!!!!!!!!! Message fo Alan or anyone who can help!
I have ran Adaware and Spybot S&D - I still have two
files that will not go - apparently they are in my
registry keys - The two programmes are DSO exploit and
VX2/f - Im not sure how to get rid of the but I am
constatnly getting pop-ups from 680180 IE - please can
somebody help as I am at a loss - I have also tried two
other programmes called "enough is enough and Spyware
blaster!! but they are always there when I run S&D and
the popups never stop.
many thanks Tag: userinit.exe application failure Tag: 60181
Oodles of 529 Logon Failures every 2:00 AM
Hello,
My Windows 2000 domain is getting an error every night at 2AM because it
can't lock out the Administrator account. Yes, exactly; "why is it being
told to lock out in the first place?" I don't think we're under attack
because it is every night at the same time and because I have found some
information which may shed some light on it.
It seems that at 2:00 AM some process happens that all of the local
administrator accounts on the servers get a failed login to their local
machine. The domain registers these logon failures I suppose because the
machine itself is a member of the domain. The really weird thing is that
the "logon type" shows as type 3, network. How can a local account have a
network logon to its own machine?
More wierdness, wherever the local admin account of the server has been
changed, _that_ name shows up with the failed 529. The domain name is
_always_ the name of the local server, the AD domain is not referenced even
once in all 200 of the 529's.
Something... is causing these failed local admin logins to happen every
night at 2AM on servers. I think that's why the domain admin account is
receiving a call to get locked out is; because the domain is confusing the
local admin accounts with the domain admin account, and thinking that _it_
is the culprit.
The first thing we're going to do is rename the domain admin account (yes I
know I should have done this a long time ago, but there are services,
scheduled tasks, etc. running under that name that I have to track down and
remediate before I change it).
The next thing I will do is I will check with our server team about nightly
processes/tasks that may be occurring at 2AM, but I wonder if there is
something in the undulations of AD itself that is triggering this, such as a
master browser election.
If anyone can shed any light or has experienced something similar, I am open
to any advice you could give.
Thanks a bunch!! Tag: userinit.exe application failure Tag: 60178
vulnerability in OL2000-03
http://secunia.com/advisories/12041
Someone in Russia is trying to take advantage of this. I received an HTML
email with header forged to appear to be from a known source. No malicious
attachments. The HTML included this element:
<object data="http://www.%76%69kord.com/default.htm">
Unobfuscated, the URL is www.vikord.com/default.htm, a Russian domain. The
web page tries to run an active-x control. IF I had forwarded the message to
the forged recipient to show them their address was being spoofed and IF I
were using MS-WORD as email editor, the active-x control would purportedly
have run without warning and my system would probably be infected with
something.
Is MS working to fix this issue?
Does anyone know how to find out what a malevolent web page is trying do
without getting whacked? Since the orginating IP of the email is in the USA,
I suspect it is a trojan purveyor.
nf Tag: userinit.exe application failure Tag: 60177
XP user security
I have several PCs that require multiple users with their own profiles. I
found a reference to the "winexit.scr" it works OK, however, users can change
the settings or select another screen saver. How can I lock this down for
each existing user profile and the Default User profile for fututre users? Tag: userinit.exe application failure Tag: 60175
W32\Agent.As Virus
I have this virus...and I have ran nortons as well as my telus anti-virus
scan and both have found some and have deleted them but both are unable to
disinfect or delete this one. It tells me to manually delete this file but
when I try to do so it says that it is write protected or in use and wont let
me. Is there anyway of changing the settings on this file so i can delete ? I
am on windows xp. The complete address to this virus
is....C:\Windows\system32\ntgz exe. but from what i understand this virus
sends out new files that are corrupted and my scan does find these and
deletes them... but I think it all starts with this one file. Any suggestions? Tag: userinit.exe application failure Tag: 60156
avg anti-virus
i downloaded this product and it has caused me many
problems..but i cannot remove it! any suggestions? Tag: userinit.exe application failure Tag: 60153
HELP SP2 issues, i think
I've installed SP2 and now I get an error message when attemping live update
with Norton antivirus. This is the error message LU1803:Live update failed
while getting your updates. Live update had an internal error while getting
your
updates. Your Symantec programs were not updated. You
should try getting updates at a later time. If live updates
fails again with this error, you should reinstall live
updates.
Should live updates be reinstalled, or is there a setting
that just needs to be changed due to the loading of SP2? I've tried getting
in touch with Symantec, but that is next to impossible. Thanks!!
Judy
If I need to reinstall, Do I have to uninstall the whole
Norton antivirus/internet security program and then
reinstall?
Thank you for your help.
Judy Tag: userinit.exe application failure Tag: 60151
Operating sytem not found
how can I solve the problem , that everytime I start my
computer my operating system is not found Tag: userinit.exe application failure Tag: 60142
windows firewall
i use a wireless router to connect to the internet the
instructions when i set it up said i had to disable
firewall to install should i have windows firewall
running or is router firewall good enough will running
windows firewall be benificial or just redundant
Thanks Tag: userinit.exe application failure Tag: 60140
removing networking files
I need to ensure that stand alone computers can not
achieve internet access, or be networked together. One of
the steps is to remove all related files. Currently, I
remove all NET*.cabs & win*.cabs. Are there other files I
should be removing? Tag: userinit.exe application failure Tag: 60132
Certificate Authority - Setup and Troubleshooting - Help Please?
Hi ,
I need some help with the correct setup and configuration of CA services on Windows 2000 Server. Is this the right place to post my questions?
Thanks Tag: userinit.exe application failure Tag: 60123
Norton slows System
After upgrading to Norton Internet security 2004 my system takes much longer
to boot up and is slow when first opening an application. Since SP2 was
installed it seems to have slowed further. Is there a way of disenabling
certain Norton functions, and what would they be, to speed up the system? Tag: userinit.exe application failure Tag: 60117
Update # 815021
My XP automatic updater has been trying to install
security update # 815021 for a few months. The update
has failed every time. May I ask anyone to point me in
the right direction.
Thanks in advance,
Tony
Silver City Georgia Tag: userinit.exe application failure Tag: 60109
vpn problems
I use Cisco vpn to connect to a secure site. Using XP
this worked fine for several months. I have Sygate
personal firewall installed as well.
Yesterday I installed the XP SP2 and everytime I now try
to use the vpn connection (on entering name/password) the
screen goes black and the computer re-boots. In re-
booting there is automatically a "disc check for
consistency" and a number of *.pf files (what are these?)
are "not valid". The message indicates that these
are "fixed" by copying old files!! One of these is called
vpngui.pf, which seems sort of relevant.
Any suggestiomns would be appreciated. I have tried
turning off the Windows XP firewall (which appeaerd with
the XP SP2) but this makes no difference to the propblem.
Peter. Tag: userinit.exe application failure Tag: 60107
Map network dive- resource error
When I try to map a network drive to my notebook, I get the error
"[Network name] not accessible. You might not have permission to use
this network resource."
I am able to map the drive to another computer on my network so I assume
the server is configured properly. (It's not configured as a server, I
just use it that way - it's a peer to peer network)
The notebook communicates through an internet gateway with no problems.
When I look under My Network Places (In Windows Explorer) it shows the
network by name but no computers, printers, or folders. If I click on
the network name, I get the error as cited above.
The only user on any machine is me so I have (I think) total
administrator authority.
Any suggestions? Thanks.
Notebook has XP Home
File server has XP Professional Tag: userinit.exe application failure Tag: 60098
Firefox vs IE (restricted sites)
I'm contemplating the switch from IE to Firefox. I like
Firefox's pop-up blocking, low memory usage compared to
IE, etc. One thing that is stopping me is the fact that
Firefox doesn't have something like a Restricted Sites
zone like IE does.
I like the Restricted Sites zone in IE because it's a long
list of sites I've compiled so that these sites will not
be able to use cookies, ActiveX controls, Java applets,
scripting, unwanted pop-ups, auto-installing of unwanted
programs like spyware, etc.
I'm apprehensive to use Firefox because of this, although
I know I can disable certain things in Firefox (like Java,
and ActiveX isn't even supported).
Am I being too paranoid here or is there something Firefox
gives in return for the loss of my cherished list of
restricted sites? Tag: userinit.exe application failure Tag: 60093
forgot password
I am using Windows 2000, and I forgot my log-on password.
What can I do to fix this?
Thank you. Tag: userinit.exe application failure Tag: 60089
RealOne Player
I recently installed a Windows Update and a firewall was
automatically installed. Other changes also took place
and as a result I am unable to view video clips from web
sites using Real Player. Is there something I can change
in my settings to fix this?
Thanks,
Blake Tag: userinit.exe application failure Tag: 60088
Pop-up Stopper Free Edition Sounds
I have Pop-Up Stopper Free Edition (by Panicware). So far,
so good, it's working! I only have one problem: when
logged in as a user, the sounds that you can choose from
(Properties>Pop-up notification) aren't there. However, if
I'm logged in as Administrator, the sounds are there. I
have gone in to check permissions and it seems I shoul be
able to have the sounds under my user account (it shows
as "read" in the Properties of the Panicware folder so I
don't know why it's not allowing me to use sounds unless
I'm logged in as Administrator).
Anyone have any clues as to how to fix this?
Thank you for your time! Tag: userinit.exe application failure Tag: 60087
XP firewall and new broadband connection
Hi
Hi
I have just changed from dial up to broadband and everything seems to have
set up fine but i have found that i can activate xp firewall and it works
fine but when i turn off and restart my computer it has turned itself off. I
can turn the firewall on again ok but it will be off again when i restart.
The new connection is via USB
hope someone can help
Darren Tag: userinit.exe application failure Tag: 60085
SP2 tom-foolery
I just downloaded SP2 and want to know what services should be disabled to
keep the dang Windows Security Center and all of it's subsequent services
from loading at startup. I all ready disabled Security Center. Is there
anything else?
Also, I was about to disable the internal firewall but saw that it was tied
into the ICS. I didn't think it was tied together in SP1. Is this new? Tag: userinit.exe application failure Tag: 60084
Email Dictionary Attacks
Does anybody know if ISA is capable of blocking out Email Dictionary Attacks?
I can block certain subnets and as soon as I do, they seem to morph into
different subnets. Can't keep up with it manually. Tag: userinit.exe application failure Tag: 60083
kernel32.dll error
i am trying to upgrade from win98se to win me. i keep
getting a kernel32 error with these no# at
0167:bff7al25. can someone make sense of these for me.
please i want to upgrade soon. Tag: userinit.exe application failure Tag: 60080
websites that can bill you phone company????
i have a buddy whose son might have logged into a site
said to be "verified" by microsoft. i month later he
recieved a bill from the phone company for $70 (14
minutes of use). i opened up the site (it look to
possibly be a porn site) and it asks to download a file
or something (i didnt DL it for fear of the same
charges). the site is below.
Question: i heard of 900 numbers that can do this, but
not web sites on (AOL) dial up. your feedback/ advice is
appreciated. B Easy (nappyfro@hotmail.com)
http://www.realplugin.com/cgi-bin/pluginstall.cgi?
wm=c2c1d0f8&did=779&pl=index02.html Tag: userinit.exe application failure Tag: 60075
Microsoft Security Alert
I can't access web pages once the question, "You are
about to view pages over a secure connection" has been
asked. The normal Security alert box. E.G. when i try to
log onto my hotmail account or fill in other forms. Does
anyone know why? Thanks Tag: userinit.exe application failure Tag: 60073
Before You Update to SP2
Visit the following webpages:
What to Know Before You Download and Install Windows XP Service Pack 2
http://www.microsoft.com/windowsxp/sp2/sp2_whattoknow.mspx
Get the Latest Updates and Information from Your PC Manufacturer Before
Installing Windows XP Service Pack 2
http://www.microsoft.com/windowsxp/sp2/oemlinks.mspx
Using programs and hardware with Service Pack 2 (SP2)
http://support.microsoft.com/default.aspx?scid=fh;ln;xpsp2swhw
If running Office 2003 make sure you have the latest Service Pack
http://office.microsoft.com/home/default.aspx
Windows XP Service Pack 2 Support Center
http://support.microsoft.com/default.aspx?scid=fh;EN-US;windowsxpsp2
Bottom line:
1. Make sure your system is up to date with with Microsoft patches and
critical updates
2. Make a full back up of your system including System State Data (if
running XP Pro also create an Automated System Recovery - ASR - disk)
3. If you have problems, Microsoft is offering free technical support for
SP2 -
http://support.microsoft.com/default.aspx?scid=fh;en-us;Prodoffer80&sd=GN
--
This posting is provided "AS IS" with no warranties, and confers no rights.
Please do not send email directly to this alias as it is used for newsgroup
participation only. Tag: userinit.exe application failure Tag: 60065
Financial Swindling
I received a e-mail from Microsoft Post telling me that I
won Euros 1 million from a Microsoft Lottery based on a
drawing from all the e-mail addresses. A Mrs. Elizabeth
Hous, Lottery Coordinator, Microsoft NL signed the
letter. I am asked to contact their fiduciary agent by e-
mail at microsoftclaim04@netscape.net.
Just want to alert you all to this latest scam.
Prasad Tag: userinit.exe application failure Tag: 60064
SystemSuite 5 Firewall and Antivirsus
I just installed Service Pack 2 and it did not recognize
that I have these products already protecting my
computer. The question is: Can I simply not use the
Microsoft firewall and antivirus features and be at least
as well protected? SystenSuite 5 has worked just fine to
date. The only problem I noted is that the SystemSuite 5
help database does not yet adddress this. Tag: userinit.exe application failure Tag: 60053
expat focus
expat focus promised to sign me off but my Inbox is still
getting flooded with expat messages, what can I do? Tag: userinit.exe application failure Tag: 60052
Enforce stronger password policy for administrator
My Win2K single domain is set to expire passwords every 180 days, 6
characters, password complexity not enabled.
I would like to allow members of the Domain Admins group to input at least 9
character passwords (enable complexity) and change passwords every 90 days.
The change password age is easy to script and force to change as often as I
wish.
I am wondering if there is any tool out there that allows me to enforce
stronger password requirements for selected groups ? (Password policy is
enforced at domain level, and I can't enforce stronger ones at this point). Tag: userinit.exe application failure Tag: 60051
anti virus,s
why,ll installing windows SP2 i turned off my anti virus
Antivir for windows xp,the upgrade then told me i did not
have a anti virus protection what should i do uninstall
the antivir protection then install the one microsoft
suggested.yours griz Tag: userinit.exe application failure Tag: 60042
How can I check for software piracy?
I need to upgrade to Win XP Pro. Recently, I've run across several "Eastern
European Companies" who can sell me this program for around $50. They say
it's original and comes with a "unique registration code" (key code?) that
will enable activation. They say the progams are genuine, fully functional,
not demos or academic versions. But, they say these are OEMs, i.e. no box,
packaging or manual. They also say these products can't be registered with
Microsoft in order to get technical support and rebates. Am I treading on
dangerous waters here? Is this legit? Or can I make one of these programs
work for me? How can I know if these programs are pirated? Anybody out
there have an answer? Here's a url of just one of the companies I found:
http://softforyou.biz/index.html
Thanks! Tag: userinit.exe application failure Tag: 60040
Sp2 Firewall, also Homepage
Just checked firewall on cable connection after Sp2 install.
1) Under exceptions, remote assist is checked but I have not
enabled it in System Properties, nor did I enable it in firewall.
Is there some other meaning to this that it needs be on?
2) Under Advanced, Msmsgs is enabled for Tcp & Udp. I
disable Msn Messenger in Windows applications because
I think it may a source of malicious attack. I use Outlook
but without messenger activation.
Again, is there a reason for this being auto set?
Non firewall question: Does ones homepage mean anything
more than what one sees when activating Browser? I find that
msn.com for example is slow to fully load at times, so I tried
www.null.com which does nothing according to source code
and as proof, loads really fast.
Thanks for any help. Tag: userinit.exe application failure Tag: 60037
What is https proxy for?
There are some free https proxy released on some websites. How can I use
them while surfing the internet? What is the difference between socks proxy?
Can I use it for the SSL login of my hotmail account? Tag: userinit.exe application failure Tag: 60033
RDP Client disconnects after 10mins Inactivity
I have a W2K3 TS running with RDP clients and everything
works well but my RDP clients get disconnected if inactive
for 10 minutes. I have set and configure every possible
setting I could find (local computer admin templates
policies, user admin templates, group policies, domain
policies etc...)to allow for "no disconnection" but it
keeps happening, I must be missing something or mabe this
is built in feature?
I even removed screen saver on local and TS desktops
No Firewall,
Nothing on event log
No disconnection warning given
thanks Tag: userinit.exe application failure Tag: 60029
Disable scrypt ...
Bug on all IE 5,6 and Windows XP SP2 ...
http://www.k-otik.net/bugtraq/08222004.IEDragNdrop.php
Disable Script Java ...
Kappa. Tag: userinit.exe application failure Tag: 60028
Security logon in WinXP
Very often I experience a problem in both WinXP Home and
Pro.
When I start typing a password login, e.g. to a bank,
typed letters frequently
automatically jump to upper window (User Name) and became
visible in my display??? And may be, for somebody else
who try to steal my information???
What is it? WinXP fraud or something else??
Thank you for any information.
Best, Alex Tag: userinit.exe application failure Tag: 60026
How do I make a network user login a Local Administrator?
Attempting an install of software that requires Local
Administrator rights while logging onto the network.
O/S -- PC with Windows XP Professional, a server with
2003 Server, and myriad other servers in a domain...
I thought that when you create a Local Administrator user
on a workstation, with the same username and password as
on the domain, it would authenticate the user in the
domain, while allowing the Local Administrator
privileges. This doesn't appear to be the case.
Every time I log into the domain with the username and
password (which is the same username and password on the
PC (as a Local Administrator) as in the domain (I'm not
sure what rights/privileges are given)), I receive an
error during the install stating that I didn't have
sufficient rights. When I go into Local Users and
Groups, I am unable to change or add anything. If I log
out of the domain and into "this PC", I am able to alter
Local Users and Groups, but then I am not on the network
as an authenticated user...
How do I accomplish making the network user login a Local
Administrator on the PC? Tag: userinit.exe application failure Tag: 60019
Adware?
Today I had to go into my add/remove programs to
remove and obsolete printer after updating with XP home
SP2. I noticed 2 programs right away that should not be
there... "Home Search Assistant" & "Search Extender". When
I go to remove it send me to this site:http://looking-
for.cc/uninstall/SearchExtender.html. And tells me to
download a progam and run it?????? Is this a good Idea???? Tag: userinit.exe application failure Tag: 60014
Xp SP2 puts unwanted Windows Security Alerts Icon in taskbar
XP SP2 installed with no problem I've yet noticed other than for unwanted
Windows Security Alerts icon in taskbar. I'm running a hardware firewall
(Linksys router) and anti-virus and firewall programs not recognized by
Windows. How can I keep this icon from showing up in my taskbar?--is there a
specific registry edit tweak and/or some other means of keeping this icon
from appearing? Tag: userinit.exe application failure Tag: 60013
HELP HELP PLEASe
I am running norton sercutiy
and it is now redirecting my brower
to lop.com/search/search.cgi?s=internet 8src=epage
how do I stop this. if I don't put the norton on I
disable it the web sites come up fine Tag: userinit.exe application failure Tag: 60012
Updated FAQ available for MBSA 1.2.1
I wanted to alert everyone that a new version of the MBSA FAQ is now posted -
thanks to your feedback on the newsgroups!
http://www.microsoft.com/technet/security/tools/mbsaqa.mspx
New in the FAQ :
Q. What versions of MBSA are supported?
A. PSS only supports the latest version of MBSA which is currently 1.2.1. The
mssecure.xml file that MBSA uses to identify missing security updates is
different for MBSA 1.2+ than for earlier versions. As of April 20th, 2004, the
mssecure.xml file used by earlier versions is no longer being updated.
Therefore, scans performed with MBSA 1.1.1 or earlier versions will be
incomplete. Users running less than MBSA 1.2.1 will see a message notifying them
that 1.2.1 is available.
Q. Do I need to uninstall MBSA 1.2 before installing MBSA 1.2.1?
A. No, MBSA 1.2.1 will automatically uninstall any previous version of MBSA
before installing MBSA 1.2.1
Q. Does MBSA support 64-bit Windows?
A. No.
Q. What is the current version of MBSA? Why do I see conflicting version
numbering in the product?
A. The latest version of MBSA is version 1.2.1 - which is also referred to as
1.2.4013.0 on some screens. The 4013.0 refers to build versioning. The official
version number exists in the "About Microsoft Baseline Security Analyzer" link.
If you are running MBSA 1.2 you will see a message that a new version 1.2.4013.0
is available.
Q. What settings are required for a successful remote scan of a Windows XP SP2
machine?
A. This is addressed in the "readme.html" file in the "Help" directory under the
"#firewall" section. If you require remote scanning of Windows XP Service Pack 2
machines, these conditions must be met :
. The Server service, Remote Registry service, and File & Print Sharing services
must be enabled.
. Remote machine scans are performed using TCP ports 139 and 445. In a
multi-domain environment, where a firewall or filtering router separates the two
networks, TCP ports 139 and 445 and UDP ports 137 and 138 must be open in order
for MBSA to connect and authenticate to the remote network being scanned. You
must allow these ports on the remote Windows Firewall.
--
Mike Chan
Technical Product Manager (MBSA)
Security Business Unit
Microsoft Corporation
This posting is provided "AS IS" with no warranties, and confers no rights.
-- Tag: userinit.exe application failure Tag: 60007
how to open port 2047
a site tech told me to make sure that port 2047 is open. How do I do that?
Thanks for the help. Tag: userinit.exe application failure Tag: 60004
XP SP2 and Active-X and Explorer
Call me stupid ("Hi, Stupid!") but after service pack 2, Explorer pops up
with an objection and dialog whenever I want to run something that uses
Active-X through the brower. (Zoomify, for example). I tried stifling the
warning/objection through Explorer's security options, but it didn't help.
What exact options am I missing?
Also, SP2 deleted all my shortcuts to Explorer. No big deal, really. Tag: userinit.exe application failure Tag: 59997
reply to spyware jerks
Thanks, I've been so busy trying to remove this thing I
forgot to submit it to spybot. It wouldn't be that hard to
remove it if the system would recognize it but this guy
pulled off a sneaky deal. The bad thing is it doesn't show
any connection or trace route or any way to get to it.
Thanks again to all. Tag: userinit.exe application failure Tag: 59994
NTFS Backups to External Hard Drive
I am running Windows XP Professional SP1. I recently
purchased a 120G external hard drive and formatted it as
an NTFS partition. I am using the external hard drive to
backup files from my computer (My Documents, some software
installation files, and a few other directories), and then
I am planning to reformat my PC and restore the files from
the external hard drive.
I was wanting to know, is anything I will need to do as
far as NTFS security permissions on the external hard
drive folders to ensure that I will have access the files
after I reformat my computer and reinstall Windows XP
Professional?
Thank you for your time. Tag: userinit.exe application failure Tag: 59989
after xp loads up when i try to log on i get
userinit.exe failed and cannnot log