Win7 SP1 registry help. No access to Admin

[JSmith2011]

First off, this site is awesome so thank you to the contributors who make this place great.

My work laptop (Lenovo Win7 SP1) has been crapping out lately with random restarts etc

I have two accounts on this machine (primary is JS with full admin control) second is Admin with zero control.

My primary (JS) profile will NOT load and gives me the user profile error. I did the registry tweak of changing the .bak and resetting the values to 0. This worked briefly and now it’s back to messing up once again. I do have access to the 2ndary profile (Admin) but it has limited rights to change anything.

I am in a big time bind here so if anyone could help, it would be greatly appreciated.

Things of note which I have already tried and have failed:
- start in safe mode (doesn’t work)
Edited registry values (briefly worked)
I cannot lose my C: data nor am I able to back it up seeing as I don’t have any rights.

Please help!! Thanks in advance!!.

 

[Megahertz07]

If I understood right, you now can only log in as Admin that has no administrator rights.

Under Admin, try to enable the Administrator account.
Open CMD window and type

net user administrator /active:yes

 

[JSmith2011]

Hi Mega, that is correct. I’ve broken my back trying to get it working and still no luck.

I also tried your suggestion last night with no luck. I believe the system files are corrupted because even trying to login to the secondary account is giving my computer a heart attack.

 

[JSmith2011]

Just another point of reference:
I have 4-5 profile registry lines for some reason. Some are labeled .TMP. Once this computer loads up, I’ll screenshot it for you

 

[file3456]

You may want to try a repair install. It sounds like Windows corruption for sure and the cause of this may in fact be your HDD. So I would at least backup your important data now. You can do so with an external USB HDD.

You can also clone your current computer to an external USB HDD with AOMEI Backupper. But it may copy over corrupt files.

Repair Install


Something else that might be going on here is just that the profile is corrupt, obviously. It can be fixed, but can you create another account with Admin rights?

 

[SIW2]

Use boot media to copy any valuable data to a safe place.

After that, try a restore point to a time before you had the problem.

boot media includes windows explorer, internet, browser, disk management, shadowcopyview, Aomei partition manager, Aomei Backupper, Eset antivirus, windows system recovery options, and lots of other useful tools.

17514x86.iso

17514x64-v9.iso

 

[JSmith2011]

Nope, the “Admin” account won’t let me create another profile anymore for some reason

 

[file3456]

Then try a system restore and if that don't work go back and read what else I said.

 

[JSmith2011]

System restore doesn’t have a restore point unfortunately.

It’s still on the welcome screen but I hear the HDD churning so I’ll have access to Admin hopefully shortly

 

[JSmith2011]

Ok update: was able (somehow) to log into JS in safe mode. Pictures incoming so thanks for your patience.

 

[JSmith2011]

Not sure why the pictures won’t populate.

I was able to change user permissions and make “Admin” the administrator for the account. “JS” is now a standard user.

 

[Megahertz07]

BACKUP your data on an external disk.

Now that you have a working account lets do the basic

Open a CMD window and type
chkdsk c: /f
It will say it is in use and if you want to schedule to next boot = Yes
Reboot
Pay attention on the results, specially bad blocks or bad clusters.

If disk is ok, under windows open a CMD window and type
sfc /scannow
If it finds any problems, reboot and run it 3 more times, rebooting after each scan.

 

[JSmith2011]

Mega, chkdsk c: /f says I need to be in an elevated mode. Any idea how to get to an elevated mode of command prompt?

 

[JSmith2011]

Error: Windows Resource Protection could not perform the requested operation when I ran the sfc /scannow test.

 

[Megahertz07]

Right click on CMD link and choose Run as Administrator.

 

[JSmith2011]

Ok, ran chkdsk and here are the results:

Checking file system on C:
The type of the file system is NTFS.

A disk check has been scheduled.
Windows will now check the disk.

CHKDSK is verifying files (stage 1 of 5)...
421120 file records processed. File verification completed.
1325 large file records processed. 0 bad file records processed. 0 EA records processed. 112 reparse records processed. CHKDSK is verifying indexes (stage 2 of 5)...
508422 index entries processed. Index verification completed.
0 unindexed files scanned. 0 unindexed files recovered. CHKDSK is verifying security descriptors (stage 3 of 5)...
421120 file SDs/SIDs processed. Cleaning up 263 unused index entries from index $SII of file 0x9.
Cleaning up 263 unused index entries from index $SDH of file 0x9.
Cleaning up 263 unused security descriptors.
Security descriptor verification completed.
43652 data files processed. CHKDSK is verifying Usn Journal...
37221616 USN bytes processed. Usn Journal verification completed.
CHKDSK is verifying file data (stage 4 of 5)...
Read failure with status 0xc0000185 at offset 0x7a6490000 for 0x10000 bytes.
Read failure with status 0xc0000185 at offset 0x7a6490000 for 0x1000 bytes.
Windows replaced bad clusters in file 32
of name \$Extend\$RmMetadata\$TxfLog\$TxfLog.blf.
Read failure with status 0xc0000185 at offset 0x1c888a8000 for 0x10000 bytes.
Read failure with status 0xc0000185 at offset 0x1c888a8000 for 0x1000 bytes.
Windows replaced bad clusters in file 235865
of name \Users\JS\ntuser.dat.
Read failure with status 0xc0000185 at offset 0x1d27548000 for 0x10000 bytes.
Read failure with status 0xc0000185 at offset 0x1d27548000 for 0x1000 bytes.
Windows replaced bad clusters in file 235889
of name \Users\JS\AppData\Local\MICROS~1\Windows\UsrClass.dat.
Windows replaced bad clusters in file 249328
of name \PROGRA~2\MICROS~1\Windows\WER\REPORT~2\AP834A~1\WER14D~1.MD~.
421104 files processed. File data verification completed.
CHKDSK is verifying free space (stage 5 of 5)...
8679845 free clusters processed. Free space verification is complete.
Adding 3 bad clusters to the Bad Clusters File.
Correcting errors in the Volume Bitmap.
Windows has made corrections to the file system.

165044247 KB total disk space.
129569144 KB in 367554 files.
220848 KB in 43653 indexes.
12 KB in bad sectors.
534859 KB in use by the system.
65536 KB occupied by the log file.
34719384 KB available on disk.

4096 bytes in each allocation unit.
41261061 total allocation units on disk.
8679846 allocation units available on disk.

Internal Info:
00 6d 06 00 52 46 06 00 95 be 0b 00 00 00 00 00 .m..RF..........
97 12 00 00 70 00 00 00 00 00 00 00 00 00 00 00 ....p...........
a8 66 3c 00 50 01 3a 00 90 1e 3a 00 00 00 3a 00 .f<.P.:...:...:.

Windows has finished checking your disk.
Please wait while your computer restarts.

Ok......so what does all that mean? haha Seems like it cleared up some bad clusters yea?

 

[JSmith2011]

Any idea how to get my JS working properly? Fortunately it appears all of my old files are still there (and accessible!). Thanks!

It's still giving me the user profile error.

ETA: Here is the registry list

Here is the User Profiles:

 

[file3456]

Like I already stated, and according to your chkdsk results, it looks like your hard drive is on the way out. Read my post again on page one and heed my advice now.

 

[JSmith2011]

What did you see exactly that would lead you to that conclusion? Something from the chkdsk results or what?

Also, to answer your previous question "Something else that might be going on here is just that the profile is corrupt, obviously. It can be fixed, but can you create another account with Admin rights?": Yes, I can and have done so which is the profile I'm on now (Admin w/admin rights).

 

[file3456]

Yes, the chckdsk results as I stated.

Read failure with status 0xc0000185 at offset 0x7a6490000 for 0x10000 bytes.
Read failure with status 0xc0000185 at offset 0x7a6490000 for 0x1000 bytes.
Windows replaced bad clusters in file 32
of name \$Extend\$RmMetadata\$TxfLog\$TxfLog.blf.
Read failure with status 0xc0000185 at offset 0x1c888a8000 for 0x10000 bytes.
Read failure with status 0xc0000185 at offset 0x1c888a8000 for 0x1000 bytes.
Windows replaced bad clusters in file 235865
of name \Users\JS\ntuser.dat.
Read failure with status 0xc0000185 at offset 0x1d27548000 for 0x10000 bytes.
Read failure with status 0xc0000185 at offset 0x1d27548000 for 0x1000 bytes.

You also have bad clusters.