Solved desktop integritylevel keeps dropping to 'low'

[gregrocker]

It's possible. I'm just reporting that we've seen issues with moving User shell folders. It's easier to link from another drive using Libraries which is just another method of linking.

The issue will likely be solved by focusing on getting a perfect Clean Reinstall - Factory OEM Windows 7

Then follow the steps in tutorial to save a backup image of your new setup to use in place of future reinstalls.

 

[mitchell65]

You think this was caused by improper way of moving the folders?

That's odd, I used to do it like this all the time and it never ended up this way before...

But you are now using Windows 7 and like it or not it is totally different to previous versions of Windows!
All the advice you are getting now seems to be geared to doing a clean install and that means having all your folders in the default position. Then see if the problem occurs. If it doesn't and you still want to avoid "hassle when re-installing" then you could move one folder and test the system and so on. This does beg the question "How often do you do a re install then?"

 

[foe]

But you are now using Windows 7 and like it or not it is totally different to previous versions of Windows!

Yeah but this is like my 20+th install of windows 7. I like to wipe my system partition a lot. "I used to do it like this all the time" concerned my experiences with windows 7, I ran it for a quite a while now (should I change system specs "Other Info"?).

I am willing to to another set of reinstall for testing purposes. Especially since I finished recreating my systempartion-backups: I'll be able to restore my settings in less then 7 minutes as soon as I'm done. But the problem has not yet re-occurred, so this leaves nothing to test does it? Perhaps I'll mark this thread solved soon... If it doesn't come back in a few more days.

*edit*
@gregrocker thanks for posting this guide. I'm afraid it will not be of much use to me since I'm already done reinstalling. But I'm sure it will be useful for people experiencing the same problem.

 

[AddRAM]

I`m not gonna read the entire thread, but please take Greg`s advice and download the iso and make a new W7 dvd and reinstall W7. Make sure you format your install partition. Don`t make any changes to 7, install MSEssentials and Malwarebytes. Don`t download any garbage and if you do, scan it with both programs b4 opening it.

Follow these simple guidelines and you will never have a problem with Windows 7.

If you`ve fixed it, and it keeps happening you r doing something to provoke it.

If your happy with it, by all means make a disk image.

 

[mitchell65]

Of course it is entirely up to you how you use your PC but I have to say i think

Yeah but this is like my 20+th install of windows 7.[/Quuote]
is a bit over the top but as i say if you are happy with this then OK.
My idea of a "normal" install of Windows 7 via gregrockers guide was to see if the problem occurs. Testing means what it says testing this install to see if the problem arises. If it doesnn't then as AddRAM says it's something you do to provoke it. So the choice is as as I say Yours!

 

[foe]

but please take Greg`s advice and download the iso and make a new W7 dvd and reinstall W7.

I've got a clean windows 7 install source on a usb flashdrive and used that to make a clean install, before Greg posted the solution.

It's not that I'm not taking his advice, it's just that I already did. It seemed to help 2.

My guess is that something went wrong when I created my last partition-backup (image).

So indeed, the clean install solving the problem makes perfect sense.

I am sorry if it seems like I am not listening to advice, I am, but I thought this problem was related to the metadata of the folder, not to the system.

If I knew this beforehand I would just have reinstalled and not have posted anything.

If anyone knows btw, I'm still curious how windows remembers what folders have what inegritylevel. Is it metadata or is it saved for example in the registry?

Anyway problem still not re-occurring. If nothing changes, I'll mark this thread as solved tomorrow.

Of course it is entirely up to you how you use your PC but I have to say i think 20+th install is a bit over the top

______
If you guys like to know my opinion on this:
It's like this: I prefer running my system without antivirus, because this is slowing the system down, so every once in a while I clean my system partition and restore my partition image. Since it takes somewhere near 7 minutes to complete and will shutdown when I'm done it really is not that much of a hassle: I can just do something else and when I get back, I'm all boot-able and ready to go, preferences included.

The problem is: thought this integrity lowering was occurring after a clean install as well, since I had just recovered my backup. I thought the image was trustworthy, but apparently it had this error stored on it. Perhaps the backup got overwritten by accident, never had this before.

Anyway, I remade the backups form scratch so if this really is it, then we are done and I am sorry for wasting your time guys.

*I'll report back tomorrow*

 

[gregrocker]

You must run an AV and keep the Windows Firewall updated with all Important and Optional updates. Anything less is reckless.

Neither your AV or any program should slow down Win7, which will never hang or bog with adequate hardware, i.e. at least 4gb RAM and a decent processor for your needs to include Dual Core for multi-tasking.

Did you even bother to read the steps in Clean Reinstall - Factory OEM Windows 7 as they represent the absolute Best Practices for getting a perfect baseline install based on countless thousands we've helped with here?

For example, drivers are handled completely differently than before yet most users blunder along like it's XP.

I would also want to first test my hardware to clear it as well: Troubleshooting Steps for Windows 7

Check for a newer BIOS update. If none reset BIOS to defaults, set SATA controller to AHCI, HD first to boot. Trigger installer using one-time BIOS boot Menu key.

Then I'd wipe the HD to get the cleanest possible slate for reinstall, since boot sector code can conflict and cause performance issues: Diskpart Clean Command

 

[mitchell65]

If you guys like to know my opinion on this:
It's like this: I prefer running my system without antivirus, because this is slowing the system down,

Lets hope none of our data files get infected then!
BTW What makes you think and anti virus would slow Windows 7 down?

 

[foe]

I'm not gonna have the 'use AV' discussion. I just like it better this way.

Anyway, problem did reoccur today, another hint that this is not mallware, as it would be really odd if I got infected by the same mallware twice.

@gregrocker I did read it indeed, I amid it does have some useful tips. For example: I installed all of the optional updates (like I often do), perhaps this was not a good idea?

I'll look into the updates a bit further, if this doesn't help I'll reformat my usb containing the install source, re download the source and copy it to the flash drive anew. I'll report back. It's just hard to test if it's still there or not, since I do not know what is triggering it. It can be gone for days and then, one day I boot, and there it is.

 

[mitchell65]

I
@gregrocker I did read it indeed, I did however install all of the optional updates (like I often do), perhaps this was not a good idea?

Reading it is one thing, understanding it and following the guide is another matter entirely. Item 10 of the guide deals with the driver situation and to emphasise it it is underlined. Underlining in a guide like this means "TAKE EXTRA NOTE" not "FORGET THIS IT MEANS NOTHING". And then you ask "Was that not a good idea?"
I'm lost for words, which i have to admit doesn't happen that often!

 

[foe]

Yeah, I know the guide says you should not install the optional driver updates, but there are more optional updates out there.

quote:
"I would not replace any drivers given by the installer or optional Updates unless performance problems point to that specfic driver. We can help you troubleshoot these issues."

I just wanted to make sure his opinion on 'optional updates' was the same as his opinion on optional driver updates. As I had a feeling this might be the case.

quote: "understanding it and following the guide is another matter entirely"

Yeah, but like I said, I did this before he did post this guide. So when I read the guide, I could no longer follow it. I wanted to wait reinstalling another time, until the problem reoccurred, since I thought the reinstall might have fixed it already, even though it was installed before gregrocker posted his guide. (see:http://www.sevenforums.com/general-...tylevel-keeps-dropping-low-2.html#post2080388)

I think I'll mark this tread as solved: the problem persists but I think you guys gave me enough suggestions to look at. From now on I'll only reply if I found the cause and/or solved the problem.

Thanks again.

*edit*
I just found out that this happens when I open internet explorer. And it happends to some shortcuts but not all of them: adobe reader is still opened right away, but for example my firefox shortcut is effected.

This explains why it happened on such a irregular basis: I rarely use internet explorer!

*edit2*
All shortcuts that have a modifiable target showing in properties are effected. The adobe reader shortcut is not effected even when I run icacls d:\desktop /setintegritylevel L
Apparently shortcuts that are not showing the full path to the program: target="Adobe REader X (10.1.4)" grayed out, in stead of "C:\Program Files (x86)\Adobe\Reader 10.0\Reader\AcroRd32.exe", the 'find target' button is grayed out on such shortcuts. If I send "C:\Program Files (x86)\Adobe\Reader 10.0\Reader\AcroRd32.exe" to the desktop manually, then this shortcut is affected.

Apparently this type of 'unchangeable' shortcuts is marked as 'safe'.
*edit3*
interesting, de-installing internet explorer 9 and using internet explorer 8 works as a workaround: the problem is in ie9 apparently.
*edit4* I installed ie9 form the ms site instead of win updates and: same problem :O

 

[foe]

Sorry for the double post, but this deserves it's own:

I found the cause!

I rarely use internet explorer so I removed the 'Favorites' folder and used gpedit.msc:
User Configuration\Administrative Templates\Windows Components\Windows Explorer
'Disable Known Folders'

I thought: this way the internet explorer favorites will stay empty, even when installed programs wanted to add a shortcut in there.

IE creates this folder when run, but it seems like IE9 really disliked the creation of the folder being blocked. From the looks of it, IE9 concluded it must have been a mallware infection and lowered the integrity levels.

The solution? Removing 'Favorites' from the 'disable known folders' list and just clean it regularly.

If you experience the same problem, make sure the 'Favorites' folder can be created!

 

[gregrocker]

You're right there will be no further discussion of whether you should run an AV or not. Install it now if you want further help here.

Do all of your Important and Optional Updates. The chance of a problem is greater than one in a million.

As you discovered the cause of your problem was also self-imposed when you tweaked IE9 which you don't even use beyond normal system settings. This is not necessary and also reckless, although not as reckless as running with no AV. You probably also text while driving.

 

[foe]

Ow, come on. I know running no AV is reckless, that's why I keep a system backup: so I'm back in less then 7 minutes if something went wrong. I am quite able to recognize it when I actually am infected. I am aware of all processes, services and start up entries that should and should not be there. So we could rule out the possebility of an infection I even installed security essentials for the duration of this problem, as you can re-read here: http://www.sevenforums.com/general-...ritylevel-keeps-dropping-low.html#post2075541

Furthermore I did not tweak IE9 at all, I just blocked the favorites folder. Witch is not an explicit part of IE (though you might in a way call it an implicit part of it).

Now I understand that it's foolish of me to not tell you about the stuff I usually do right after a clean install: I also disable hidden extensions and so on. I know this made it impossible for you to properly help me, and for this I apologize, but posting such a reaction after the problem has already been solved is just rude.

And I don't see what the problem being self-imposed has got anything to do with it? You'll help someone who for example messed up his drivers as well wouldn't you?

 

[z3r010]

More stupid than reckless IMO.