Solved desktop integritylevel keeps dropping to 'low'

[foe]

Hi guys,

This is now officially starting to annoy me. One day I noticed that my desktop shortcuts would not start without tons of warnings. So I googled and found a solution (or so I thought):
icacls D:\Desktop /setintegritylevel (OI)(NP)(IO)H

(My desktop folder is located in my D root)

This helped right away, but a few days later it did come back. So I ran the same procedure but it keeps getting more frequent. My current workaround is a .cmd file that runs "icacls D:\Desktop /setintegritylevel (OI)(NP)(IO)H", I double click it when needed, but this is getting more and more annoying. Anyone got an idea about what keeps decreasing my desktop integrity level? I think it is time to start looking for the root of this problem, in stead of fixing it's symptoms.

It is odd though, since this is quite a fresh install. This would not have been caused by a ms update now would it?

 

[mitchell65]

This would not have been caused by a ms update now would it?

That's fairly starightforward to check via Control Panel/Programs/Progs and Features/View installed updates. You can always un install an up date to check!
But first what Anti Virus software are you running and is it up to date. Also download and run Malwarebytes free edition.

 

[foe]

Well, I do not run any antivirus software, but like I said, this happened right after the reinstall...

I realy do not think it is mallware related, I'll run mallwarebytes just 2b sure...

 

[mitchell65]

Well, I do not run any antivirus software, but like I said, this happened right after the reinstall...

I realy do not think it is mallware related, I'll run mallwarebytes just 2b sure...

If you connect with the internet and you have no protection against,virus's, trojan and all the other nasties out there I am afraid there is not much help I can offer other than to strongly urge you to download and install Microsoft Security essentials and run a complete scan. Then run Malwarebytes. The symptons you describe look very much infection related to me!

 

[foe]

well I think I got it before connecting to the internet, but I'll install some protection/scanners to make sure this is not a mallware issue, I'll report back in a few moments...

 

[mitchell65]

But surely you needed to be connected to the internet to run the updates immediately after the re install and you seem to have Google very early on so I can't see how you can say quote:"well I think I got it before connecting to the internet"

 

[foe]

touché u got me there

Mallwarebytes and security essentials came out clean

I still don't think it is mallware related though, I must admit, it does sound like it.

But I did not open my browser before these updates and I don't think anyone from outside will get past the firewall in the modem/router.

I see no strange processes or services running so...

checked msconfig and my startupfolder as well...

let's say, for the sake of argument, that this is not mallware related, what else could cause this?

 

[mitchell65]

Try sfc /scannow

 

[foe]

both scanners come out clean,

running fsc now...

I'm running this because you think my system-files might be infected/corrupt? I seriously doubt it.

Can you explain me a bit more about window's behaviour: when will windows decide to lower my desktop's integrity level?

*edit*
I recently removed the hard drive and put it back in. Could this have had any effect on this?

*edit2*
sfc: "Windows Resource Protection did not find any integrity violations."

*edit3*
icacls D:\Desktop /setintegritylevel (OI)(NP)(IO)H:
What do the (OI)(NP)(IO) options mean?

What would be different if I would just run:
icacls D:\Desktop /setintegritylevel H ?

 

[mitchell65]

I know you think i am geared towards the security aspect of this problem but that is due to the integrity level is tied up with security. I am far from the expert in this field but i think this article may help you. Otherwise I must hand this over to someone on the security side of things.
Windows Integrity Mechanism Design

By the way, I like to know members location and at first I thought you were in the Netherlands but Isee from your profile that you might be in the USA?

EDIT: Have you tried running the Windows 7 Default Administrator Account?

 

[foe]

I'm in the Netherlands where did you see otherwise?

What should I do while in the def Admin accound?

I'm on a 'regular' account (called it 'user') with admin rights right now...

I googled a bit further (using the url you posted as inspiration, tnx).
It's better explained in here: http://superuser.com/questions/322423/explain-the-output-of-icacls-exe-line-by-line-item-by-item

Inheritance rights in English:

• (I) "Inherited": This ACE was inherited from the parent container.
• (OI) "Object inherit": This ACE will be inherited by objects placed in this container.
• (CI) "Container inherit": This ACE will be inherited by subcontainers placed in this container.
• (IO) "Inherit only": This ACE will be inherited (see OI and CI), but does not apply to this object itself.
• (NP) "Do not propagate": This ACE will be inherited by objects and subcontainers one level deep – it will not apply to things inside subcontainers.

I think this means that using (IO) earlier on did not change the level of the desktop folder to 'high' it just changed that of it's children? I tried just using icacls D:\Desktop /setintegritylevel H

Perhaps this is the solution. If the problem does not come back in a few days, I'll mark this as solved.

 

[mitchell65]

I'm in the Netherlands where did you see otherwise?

What should I do while in the def Admin accound?

I'm on a 'regular' account (called it 'user') with admin rights right now...

Whilst logged in to the Default Administrator see if the situation is the same! You have higher permissions there than in your User Account. Are you OK to enable the Default Admin?

Small point but I looked at your profile and saw that your time zone is shown as the US!

 

[foe]

Sure, I could just run "net user administrator /active:yes", but I tried using "icacls D:\Desktop /setintegritylevel H" and like to verify whether or not the problem persists. If so I'll mark this thread as solved, if not I'll try creating other accounts and/or enabling the admin acc and I'll bump this thread. Perhaps it's solved already, so let's just wait for a few days.

Yeah, I did see the wrong timezone, should be the right one now?

*edit*
Is the integrity level saved in the os (registry for example) or in the file-system as meta-data?

Could the integrity level be low because of something that happened on an earlier install?

Anyway, the problem did not yet return this morning. 9/2/2012
You see, I did not whips the D Partition, only the C containing the system.

If "icacls D:\Desktop /setintegritylevel (OI)(NP)(IO)H" only applies on children (Inherit Only),
then perhaps the integrity level was lowered only once and never correctly restored.

 

[foe]

*Bump*

That was fast =/ ok it happend an other time.

Perhaps I should try another reinstall?

What would you like me to do in the admin acc? (please explain more clearly) The inegrity level is not depended on the user account is it?

*edit*

I guess an update went bad. I'll try if another reinstall is any good.

 

[gregrocker]

Why is your Desktop User folder in the D: root? This might help understand the problem better.

If you moved the User folder from C to D using User Folders - Change Default Location then restore it to default location to see if that solves the issue. User Folders - Restore Default Location - Windows 7 Forums

 

[foe]

Hey guys,

I reinstalled again, let's just see if that will be the end of it.

I moved these folders because I keep a system-partition-backup on an USB flashdrive and use this to 'reinstall'. The D partition is to save myself the hassle of copying my files from my external backup.

All I usually do is restore the system backup (acronis) end enjoy how my shortcuts are still there since they happened to be saved to the D partition.

Today I remade the system backup (after a 'real' clean install), just in case the backup was bad.

 

[mitchell65]

I would strongly recommend you follow gregrockers advice. He is the one to follow!!!!!!!! EDIT: IMHO, of course!

 

[foe]

I apologize to you guys for seeming a bit skeptic. I should have told you right from the start: I already tried moving it around quite a bit. I did not yet move it to it's default location, but did move it to an exFAT flashdrive, so there's no chance of any metadata surviving that. (exFAT does not keep metadata does it?) However this did not help and let me to believe it was caused by a (possibly corrupt) windows process.

I am afraid I cannot test gregrocker's suggestion, since I reinstalled just before reading his comment and the problem did not (yet!) re-occur.

Let's see if it returns first, if it doesn't I'll report back, if it does, I'll try gregrocker's suggestion and report the result.

 

[gregrocker]

A better method than moving the shell User folders is to copy them to the other partition or drive, then rightclick each to link to the related Library - Include a Folder - Windows 7 Forums . After they're all showing up in each library from the other drive you can delete the C User folder content.

This avoids various unintended consequences we've seen here.

 

[foe]

You think this was caused by improper way of moving the folders?

That's odd, I used to do it like this all the time and it never ended up this way before...

I really think something went wrong during installation tbh

*edit*
especially since I don't use the libraries, see:

http://www.sevenforums.com/tutorial...der-buttons-open-users-instead-libraries.html

I should have mentioned that as well