I have been trying to fix a friends Dell dimension 2350 with XP Home. It seems that something or someone has messed up the security rights. The first problem was trying to uninstall Zonealarm 5.0, it kept saying I didn't have access to change system configurations. I logged on as all three administrator users as well as the administrator in Safe Mode, no one had access. I re-installed and activated XP Home to no avail.
I finally read somewhere to right click on HKey_Local_Machine\software\Zonealarm and check the permissions. (Nothing was checked fo any of the administrator users, so i allowed and then I coul uninstall).
Then Live Update wasn't installed correctly so i was told to uninstall it, which of course it wouldn't allow me so I finally downloaded an uninstaller at Symantec and uninstalled it, but the file: C:\documents and settings\all users\symantec\liveupdate\settings.liveupdate refused to be deleted as the directions said not even at Safe Mode Command Prompt for the supervisor. I have found something at Microsoft for resetting the security to the original (secedit), except it is only for XP Pro. Anyone have any ideas for getting the security back for these users short of a format and re-install?

Originally posted by pierrejamme:

"I have been trying to fix a friends Dell dimension 2350 with XP Home. It seems that something or someone has messed up the security rights. The first problem was trying to uninstall Zonealarm 5.0, it kept saying I didn't have access to change system configurations. I logged on as all three administrator users as well as the administrator in Safe Mode, no one had access. I re-installed and activated XP Home to no avail."

XP Home edition, iirc, does not apply FULL "Administrator" rights as does XP Pro/Server/AdvancedServer/DataCenter etc. iirc.

SO! What do YOU do to work-around that? Stay logged on as Administrator & use regedit.exe to alter the security to those hives in the registry properly!

(Be warned though: This is one version of XP I have little experience with & realize some things for XP Pro (what I use) are NOT present in XP Home... but, I will speak of this from an XP Pro user's viewpoint & tools used in both hopefully!)

Originally posted by Sampson:

"I finally read somewhere to right click on HKey_Local_Machine\software\Zonealarm and check the permissions. (Nothing was checked fo any of the administrator users, so i allowed and then I coul uninstall)."

Ok, good, you CAN alter security registry hive/folder & entry levels permissions... Add the EVERYONE group here just for this installation with FULL rights on that folder!

(Now, this is riskier because permissions can 'inherit & cascade' down thru the tree for rights... so, on this one? Proceed with caution & do ONLY IF THE ABOVE FAILS first! Well, you can do the above, if not the entire section of the TREE in the left-hand-side pane first (remember or write down the original group first though just to be safe here)).

Commit it. Reboot. Try install again...

Once install is successful? Remove "EVERYONE" group (replacing it with 'Authenticated Users' group is safer too by the by, especially against remote intruders because this one is SAME as everyone group except for remote users (even though MS has allegedly fixed this diff. I don't use EVERYONE when I can help it on filesystem OR registry permissions for security JUST TO BE SAFE/IN CASE their fix was an imperfect implementation)).

Originally posted by pierrejamme:

"Then Live Update wasn't installed correctly so i was told to uninstall it, which of course it wouldn't allow me so I finally downloaded an uninstaller at Symantec and uninstalled it, but the file: C:\documents and settings\all users\symantec\liveupdate\settings.liveupdate refused to be deleted as the directions said not even at Safe Mode Command Prompt for the supervisor. I have found something at Microsoft for resetting the security to the original (secedit), except it is only for XP Pro. Anyone have any ideas for getting the security back for these users short of a format and re-install?"

There are commandline tools the Resource Kits have for changing rights on files (not just DOS level attrib ReadOnly, System, Archive, & Hidden files/folders attribs, or like UNIX chmod stuff either but MORE 'intense' ones for rights) as per rights to them in NTFS filesystem rights for security.

I believe those programs are named - cacls &/or xcacls (you will have to read up on them & their commandline switches @ the MS website for their download here below):

http://www.microsoft.com/windows2000/techinfo/reskit/tools/default.asp

(I am also not sure if those ARE the tools you need but I think iirc, they are, but "catch-22" situation here is: ARE THEY FREE ONES? I am not sure of that either unfortunately!)

EDIT PART/CORRECTION: They are the right tools for the job potentially on your 2nd task regarding filesystem rights, see here:

http://www.ss64.com/nt/cacls.html



* Good luck & hope that all works out for you! I'd additionally say wait out a user that has actually used XP Home though, because I have not & instead deal with Pro & Server editions, but it looks like you have the tools you need @ this point for registry security levels alterations though!

APK