Resetting broken user permission

Galaxiom

Super Moderator
Staff member
Local time
Today, 22:09
Joined
Jan 20, 2009
Messages
12,895
I am a Domain Administrator on our network. Domain controller is Windows Server 2003 R2. It is a combined Novell/Windows network.

Recently in the middle of working normally, my PC (XP Pro SP3) told me it couldn't run a windows executable (Remote Desktop viewer). So I rebooted.

Now I can log onto the PC but I get a blank desktop and when I look in Task Manager it shows that Explorer.exe is not even running. When I try to start it I get a message saying Windows cannot find the files and it is probably because I don't "have sufficient permissions".

I can log in normally to any other computer on the Domain. Any other user can log in normally to my PC. Everything works normally on the PC except my login.

When I login it won't recognise my identity as a match for my local user account so logs me in as a separate domain user identity which it continues to use on subsequent logins but still gives me the bare desktop.

I assumed my profile was corrupted so I tried removing it. Same behaviour. I tried copying the Default User profile from another machine.

I tried adding a Roaming Profile and created it perfectly normally by logging into another computer. When I logged into my computer it said it couldn't find my Roaming profile (probably due to permissions) so would use the local one and gave me the bare desktop again.

An IIS service on the computer is running with anonymous connections using my credentials and that works fine for other users so it apparently honours my status for IIS.

There is quite obviously someing screwed about my file permissions on this PC. Anyone know a way to clear this so it gets refreshed from the domain controller? It is bizarre because presumably this would be read fresh from the Domain Controller each time I log in. It is as though the broken settings cannot be removed. I have no idea where they are stored.

I found every instance of my Username in the registry and removed one under the user profiles key. The others were just paths.

Any ideas no matter how wild appreciated. I really don't want to rebuild this machine.

I tried a Windows repair but it does a stop error when I boot from the CD.
 
Could be something very dodgy I'm afraid iirc Remote Desktop viewer may be disabled in SP3 by default, it was a security vulnerability, something executing it sounds very wrong.

Messing with profiles does also sound dodgy.

If this is a work machine, better to be safer than sorry - NUKE IT :p
 

Users who are viewing this thread

Back
Top Bottom