I was referred here by Ravencajun at the Computer Forum at Garden Web. My problem is a result of changing a Windows security setting in Administrative Tools. I did contact Dell as I still have a warranty on this computer, but it doesn't cover software issues. I tried Microsoft fix and hit a dead end. Was told I would need to have a Microsoft tech in to possibly fix it and it would be expensive and no guarantee.
I have pretty much given up on a fix and am resigned to a reinstall. I fear my data will be lost as the computer has locked most of it up. I did a back-up but it appears most of My Docs. folder is locked. I was able to open some docs. on my office computer.
This is what I did and what I changed (by accident).
Control Panel - Administrative Tools - Local Security Policy - Security Options - DCOM: Machine Access:
I clicked on that thinking it would prevent a wireless signal from interfering with my computer. I clicked on something like, deny access. Not sure as it is now gone. After doing that, this appears next to DCOM: Machine Access: 0:Bag: Bad:
Immediately, I knew something went wrong as most Windows functions stopped working. I tried undo it and was denied access. I tried to go to System Restore and all I got is a white, blank screen. I tried safe mode, last know config. finally called Dell. The tech tried various things but the computer would not allow a remote connection. He tried talking me through MS directions to restore the computer to default security settings, but no luck. He contacted MS, as I did and I was told to do a clean reinstall. I later found out that all my data might be lost.
This is an office computer. I am the main user and Administrator.
Dell Optiplex 745, XP 3 Pro, 3 years old.
Firefox is my main browser, security up-to-date and clean. IE is dead as are many Windows functions. I can get on-line though FF. I can't access my email in Outlook or open any documents. MS Office does not operate. No matter what I try I get a MS error - "Access Denied"
The instructions from Microsoft involve overriding the security policy. I attempted to follow the written directions and reach a certain point where I can't continue. It involves Command Prompts and it works to a point but no further. I have screen shots if necessary.
If anyone has a suggestion, I would appreciate it. I was not warned when making this change, no MS warnings at all. I didn't realize what I was doing. If I have to do a reinstall, I would like to be able to save my documents, pictures and music. Most important are the documents. There is no way to get to System Restore, it is blocked.
Thanks,
Jane
Just incase Aaron drops by heres a link to the thread over at GardenWeb..
http://ths.gardenweb.com/forums/load/comphelp/msg1001065710362.html?17
Paddy...
Just as a passing comment Jane, what was the Microsoft article you tried and what step did you get to?
I am at work now and don't have the article. I had this written down but the rest is at home - It is 'greek' to me.
Microsoft Directions: This is what they told me to do.
Article ID: 313222 - July 7 2010
"How do I restore security settings to the default settings?"
Sample command to reset security settings:
Open a new Command Prompt
In Windows XP - Start, Run, cmd, enter.
In Windows XP, type the following command and press enter: secedit /configure/cfg%windir%\repair\secsetup.inf / db secsetup.sdb/verbose
That is just a part of it. I can copy more of it when I get home. It didn't work though. It is very confusing because its hard to tell where there should be spaces between things.
Here is a link to the KB Article: http://support.microsoft.com/kb/313222
You need a space before each FORWARD slash ( /):
secedit /configure /cfg %windir%\repair\secsetup.inf /db secsetup.sdb /verbose
To get the spacing correct, it would be easiest to copy/paste the command. To paste into the window, click on the small black square that reads C:\ next to the path. Scroll down to Edit and across to Paste. See the attached image.
Thank you for putting in the link. Copy/paste does not work despite various work-arounds. Many Windows functions do not work. I'm at my office computer now and can copy.
This is the part where I think I mess up: Copied from the instructions:
"Next steps After you complete these steps, standard user accounts may no longer appear on the log on screen when you start your computer or try to switch users. This occurs because standard user accounts are removed from the Users group when you reset Windows security settings. To add the affected users accounts back to the Users group, follow these steps:
1. Click Start, and then All Programs. Or click Programs.
2. Click Accessories, and then click Command Prompt (Windows XP). Or right-click Command Prompt, and then click Run As Administrator (Windows Vista).
3. In the Command Prompt window, type net users and then press ENTER. A list of user accounts is displayed.
4. For each accountname listed in the Command Prompt that is missing from the log on or switch user screen, type the following command and then press ENTER:
net localgroup users accountname /add "
When I type in 'netlocalgroup users accountname,' I get invalid entry. I'm thinking I should put in 'net localgroup users account 'jane'? then the slash and, not sure about the 'add.'
Also, how do I put myself as Administrator. They don't mention that. I need to be listed as Administor to access my documents...I think.
Any advice on how to type in that command?
Thanks,
Jane
Hi, Jane.
First things first. Did you successfully complete the first step to restore the default security settings before moving on to the user accounts? Did you receive the "Task is completed" message and a warning message?
Next, notice the instructions in the Microsoft KB instructions show accountnamee in italics. So, yes, you would use the following (note the space between each of the words and before the /add)
net localgroup users Jane /add
As to Admin, one step at a time, Jane. I don't know if this will solve the Local Security Policy setting you changed. When all is said and done, you may be faced with trying a Linux distro to access your documents for backup and then formatting the machine.
Had difficulty getting on line. I did get 'successful' with each entry in command prompt. Thanks you for the advice, it seems I put it in right ...but it didn't change anything. As a matter of fact the computer seems to be getting worse so I'll do a reinstall before it quits altogether.
Thanks to Ravencajun, I got the Linux disk to work changing the boot order and was able to copy everything from My Docs to a flash drive. I ran out of room on the drive and just bought another to copy My Pics.
I'm unable to copy/past on the computer which makes things difficult. It worked on Linux but not Windows.
I have various Windows XP disks. We have 5 computers and I don't know which disk goes with which computer...does it matter? I have two with SP2 on them and I would assume those are the newest. I'm confused about drivers as I found so many disks with drivers which say 'already installed on the computer.'
Ravencajun suggested running Belarc Advisor, which I attempted to. It would freeze when scanning the Local Security on Computer. So I was unable to get a list of what's installed on the computer.
I'm not sure how to proceed at this point. Should I just start a reinstall with the XP,SP2 disk?
Thanks for your help,
Jane
Well come to think of it the settings for DCOM access are in the registry, which if you aren't familiar with registry editing can be a daunting process.
I'm just wondering whether if you click Start > Run and type in: regedit
and click OK
Does the Windows Registry Editor come up?
You say you've tried Safe Mode, but can you give a little more info? For example when you go into Safe Mode, does it hang before it lets you login? Can you login but then you're stuck in the same situation? (I.e, hardly anything works?). I do appreciate that things must be annoying by now and you just want the computer working again.
Just trying to get a sense of exactly what you can or cannot access really.
Hi, thanks for responding. I changed the security setting in Local Machine by accident. Windows has shut me out as Admin and has shut down many Windows functions. I can't copy, with mouse, shortcuts or disk drive. I can't copy at all. I can't run firewall but did get Avast installed and turn it on each time I'm on. I can't open any files in a normal way (I figured out a way around that too). I can only open one Window at a time. No multiple windows which makes doing things a hassle. I can't access any Admin areas including system restore. IE does not work and I can't uninstall or install anything. Office doesn't work and I can't get documents to open. Clipboard doesn't work, Notepad and Paint works and that's what I've been using. Unfortunately, Ican't copy the screen shots (print screen works)I can't download anything so can't get a remote connection (Dell tried). That's just a few things, I can't remember them all. Very frustrating.
Firefox works and I can get online (I'm writing on the broken computer.) I get multiple error messages about 'services not running', registration of the object doesn't exist, 'the service this depends on is not running...errors like that. Not exact, but close.
I can get into the registry (it appears), whether I can make any changes is another story. I worked in the command prompt window and was told it was successful, but nothing changed.
I think I'll have to reinstall but backing everything is taking forever. Now I'm not sure about My Pics. I did use a Linux disk and was able to get it running and copied documents to a flash drive. My Pics folder is too big for a flash and the disk drive won't copy. So I'm thinking of online storage to see if I can do that for the pictures. I have music also, ITunes which I can't copy. As long as I can save my docs and pics I can live without the rest.
Jane
Hiya,
You might be better reinstalling but it sounds as though you have a large amount of stuff that you want to backup and not much space to put the backups onto. Unless someone else has any suggestions on that, maybe online storage is the best way (although it will be a slow process).
If you choose to go down the reinstall route anyway, the best thing is to do (in my experience) is to at least ensure you've got your network driver ready. So that once you've got Windows reinstalled, you can hop onto Windows Update and just re-download all the drivers & security updates that way. However, it is of course your choice.
Are you able to use Windows Explorer to navigate through the drive? (I/e, go to Start > My Computer > C:\ and see if it lets you view the folders, I know you've said it won't let you open files but if you can view the files/folder structure them using Windows Explorer it's something we can work with.)
Also, if it will let you do this: Click Start > Run > type in: services.msc
and press OK
Right-click the "DCOM Service Process Launcher" service and click Properties. Tell me it's startup type, service status (on the General tab), and on the "Logon" tab, tell me what it's set to Log on as.
Another thing is that since the Registry Editor works, navigate to this key:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Ole
To do this, you will need to expand the 'folders' by clicking the '+' sign that is to the left of each one, until you get to the 'Ole' folder. Once your there, just click it once so that the right-hand side pane fills with values. In the end, you should get to a screen similar to the one I have attached.
If you could tell me what is next to "EnableDCOM" on the right-hand pane. It will either be a "Y" or a "N", as you can see in my screenshot.
Let me know if any of my instructions are not clear enough.
We might be beating a dead horse here, and just going round in circles, but it is a few things to try if you are willing.
Wow, thank you for such an informative reply. I will print this up and see if I can do what you wrote. I can't copy anything but can print screen. Trouble is, I can't copy it into my reply. Maybe I can save the print screen in Notepad and put it as an attachment. Don't know if that would work.
I'll try and see what I can find out. I wanted to take a 'breather' from this computer as I'm so tired and it all seems hopeless. I don't have a lot of pics, about 12.7 G but I needed to copy my docs first and ran out of space. I bought new flashes, 4G each and will see how much more I can backup. Computer is 3 yrs old and used for work. I have a lot of files on it.
I'll post back and thank you very much for your help.
Jane
Couldn't r-click on DCOM services process launcher and its dead. Nothing opens. The other part of your question, I don't know where to find HKEY_LOCAL_MACHINE_SOFTWARE...
Where would I look for that?
Thanks,
Jane
Hi Jane,
See the attached screenshot.
It will be seperate 'folders'
The first you one you should see is 'HKEY_LOCAL_MACHINE'
If you click the '+' next to that, it will expand out. Under this folder, will now some other folders.
Click the '+' to expand Software
Then again, click the '+' to expand Microsoft.
Then under the 'Microsoft' folder, click once on the 'Ole' folder, and this will populate the values and show them on the right-hand side pane.
Does that make some sense?
Notepad doesn't handle images, Wordpad however will - if Wordpad will open. If you can verify if Wordpad will work, then that is something we can use to take some screenshots.
Do any of the services in that list work? So, go back to type in services.msc into the Run box, click OK to get the services list back up. Right-click on any of the ones in the list, and go to Properties. Not looking for any information, but if you can get into the properties of any other service, it will tell me whether all services are completely wrecked, or just that one.
One other thing: Click Start > Run > type in: dcomcnfg
This will open up the DCOM Config window.
If it doesn't, then let me know.
If it does, let me know if you can double-click on 'Component Services', and then again on 'Computers'. If DCOM is working slightly, you should get that far without any errors, freezes or crashes. Again, not looking for any information at this point, but seeing if you can access it at the least.