For some time, I have known my WIN 7 permissions were borked. So I finally bit the bullet and reset then using:
secedit /configure /cfg %windir%\inf\defltbase.inf /db defltbase.sdb /verbose
I have attached the log from this. It doesn’t look right to me - a lot of access denied in the CLASSES registry area.
Like someone in the know to review the log and let me know what they think.
How long have they been broken ?
It might be worth trying the windows all in one repair tool to fix the permissions
They have been hosed for a while.
I went to the MS Fixit site originally but couldn’t find one for Permissions?
I have had some good results with this
Download Windows Repair (all in one) from this site
Install the programme then run
Go to step 2 and allow it to run Disc check
http://i1224.photobucket.com/albums/ee362/Essexboy3/Capture3.gif
Once that is done then go to step 3 and allow it to run SFC
http://i1224.photobucket.com/albums/ee362/Essexboy3/Capture.gif
On the start repairs tab select advanced mode and click start
http://i1224.photobucket.com/albums/ee362/Essexboy3/Capture1.gif
Select the items in the red surround (remove the ticks from the rest ) and tick restart system when finished
http://i1224.photobucket.com/albums/ee362/Essexboy3/Capture2.gif
Now this is interesting.
I tried to download Windows Repair from the Tweaking.com site from the link you posted. IE9 Smart Screen filter blocked the download as malware. Something to check out perhaps …
Anyway, I reset permissions the old fashioned way using the MS SubInACL tool. I don’t want to post the link or details here since I don’t want uninitiated to totally hose their PCs by running the tool wrong. The instructions a MS SE gave are wrong anyway. No surprise there :
If your interested Essexboy let me know and I will PM you the details.
I turned off NAV2012 autoprotect since it was interfereing with many of the registry key resets. Then it dawned on me that also NAV 2012 protected keys were reset. So now I am debating whether to reinstall NAV 2012. :-\
Aye you will need to turn off smart filter to get the download… It is safe I use it ;D
Aye if you could PM the details please - I always scavenge any fixes that work
Essexboy, I PM you the details.
A little scary background on why I wanted to reset all my permissions to default. A month or so ago, I was using Process Explorer and decided to check out my WIN 7 service permissions. What a shock! All kinds on unknown user permissions assigned - WTF! So I manually reset all the service permissions but never felt that I had reset everything; hence the desire to do a full registry and file reset. I did research this and since I am running a dual boot, I did come across a few postings that stated there can be crosss-OS migration of permissions when running multiple OSes. But the permissions I saw went far beyond that. I do know that after I performed the manual service permission reset, my incidence of malware intrusion attempts dropped to nill. Also after doing my recent full permission reset, my Win 7 installation is running and booting like when I originally installed it. I am now a firm believer that after a serious malware incident, examining and resetting permissions if required is a must.
Ta for the data - I must admit that is why I use all in one - it’s not so scary ;D
I need to add that I double checked my NAV logs and even with autoprotect disabled, NAV blocked SubInACL tool from modifying NAV registry keys. Later versions of NIS and NAV are pretty bulletproof when it comes to anything tampering with it’s internals.