New
#71
Perfect :) - thanks.
Please run the commands from post #69, now
Code:Microsoft Windows [Version 6.1.7600] Copyright (c) 2009 Microsoft Corporation. All rights reserved. C:\windows\system32>DIR C:\Windows\System32\LogFiles\WMI\RtBackup /S Volume in drive C is OS Volume Serial Number is 7C4E-86D4 File Not Found C:\windows\system32>ICACLS C:\Windows\System32\LogFiles\WMI\RtBackup\*.* C:\Windows\System32\LogFiles\WMI\RtBackup\*.*: Access is denied. Successfully processed 0 files; Failed processing 1 files C:\windows\system32>ATTRIB C:\Windows\System32\LogFiles\WMI\RtBackup\*.* File not found - C:\Windows\System32\LogFiles\WMI\RtBackup\*.* C:\windows\system32>
Now that's quite interesting - ICACLS shouldn't in theory even see the files, let alone get an Access Denied error.
Let's see if we can tie it down a little
Please run the following commands, and post the results.
ICACLS C:\Windows\System32\Logfiles\WMI\RTBackup
ICACLS C:\Windows\System32\Logfiles\WMI
ICACLS C:\Windows\System32\Logfiles
ICACLS C:\Windows\System32
Code:Microsoft Windows [Version 6.1.7600] Copyright (c) 2009 Microsoft Corporation. All rights reserved. C:\windows\system32>ICACLS C:\Windows\System32\Logfiles\WMI\RTBackup C:\Windows\System32\Logfiles\WMI\RTBackup NT AUTHORITY\SYSTEM:(OI)(CI)(F) Successfully processed 1 files; Failed processing 0 files C:\windows\system32>ICACLS C:\Windows\System32\Logfiles\WMI C:\Windows\System32\Logfiles\WMI NT AUTHORITY\SYSTEM:(OI)(CI)(F) NT AUTHORITY\LOCAL SERVICE:(OI)(CI)(F) NT AUTHORITY\NETWORK SERVICE:(OI)(CI)(F) BUILTIN\Administrators:(OI)(CI)(F) BUILTIN\Performance Log Users:(OI)(CI)(F) Successfully processed 1 files; Failed processing 0 files C:\windows\system32>ICACLS C:\Windows\System32\Logfiles C:\Windows\System32\Logfiles NT SERVICE\TrustedInstaller:(I)(F) NT SERVICE\TrustedInstaller:(I)(CI)(IO)(F) NT AUTHORITY\SYSTEM:(I)(F) NT AUTHORITY\SYSTEM:(I)(OI)(CI)(IO)(F) BUILTIN\Administrators:(I)(F) BUILTIN\Administrators:(I)(OI)(CI)(IO)(F) BUILTIN\Users:(I)(RX) BUILTIN\Users:(I)(OI)(CI)(IO)(GR,GE) CREATOR OWNER:(I)(OI)(CI)(IO)(F) Successfully processed 1 files; Failed processing 0 files C:\windows\system32>ICACLS C:\Windows\System32 C:\Windows\System32 NT SERVICE\TrustedInstaller:(F) NT SERVICE\TrustedInstaller:(CI)(IO)(F) NT AUTHORITY\SYSTEM:(M) NT AUTHORITY\SYSTEM:(OI)(CI)(IO)(F) BUILTIN\Administrators:(M) BUILTIN\Administrators:(OI)(CI)(IO)(F) BUILTIN\Users:(RX) BUILTIN\Users:(OI)(CI)(IO)(GR,GE) CREATOR OWNER:(OI)(CI)(IO)(F) Successfully processed 1 files; Failed processing 0 files C:\windows\system32>
They all look normal
PLease open an Elevated Command Prompt, and run the following commands (1 at a time!)
I only need the number of files and directories found - not the full list (you'll see why)
DIR C:\Windows /AR /S
DIR C:\Windows\System32 /AR /S
DIR C:\Windows\System32 /AH /S
(and it's bedtime here - so no hurry!)
at the end of the 3rd command - it says
221 files
42 directories
Sorry - I should have made it clearer....
I need the summaries from each command - not just the last one :)
I think I got sidetracked somewhere
After you've done the above please open an Elevated Command Prompt, and run the following commands - post the results.
DIR C:\Windows\servicing\version
REG QUERY "HKLM\Software\Microsoft\Windows\CurrentVersion\Component Based Servicing\Version" /S
DIR C:\Windows\winsxs\trustedinstaller.exe /S
Oops! Sorry, this first command had 1079 files and 204 directories.The second is 12 and 3 respectively. and the last was 221 and 42. Thanks!
Here are the results. Sorry if I am misunderstanding :0 let me know if I need to redo anything. Also, when you list several commands - I need to do them one at a time correct? ( I think a few times ago, I copied the whole list of commands and pasted!
Code:Microsoft Windows [Version 6.1.7600] Copyright (c) 2009 Microsoft Corporation. All rights reserved. C:\windows\system32>DIR C:\Windows\servicing\version Volume in drive C is OS Volume Serial Number is 7C4E-86D4 Directory of C:\Windows\servicing\version 10/28/2010 08:14 AM <DIR> . 10/28/2010 08:14 AM <DIR> .. 10/28/2010 08:14 AM <DIR> 6.1.7600.16385 0 File(s) 0 bytes 3 Dir(s) 185,279,954,944 bytes free C:\windows\system32>REG QUERY "HKLM\Software\Microsoft\Windows\CurrentVersion\Co mponent Based Servicing\Version" /S ERROR: The system was unable to find the specified registry key or value. C:\windows\system32>DIR C:\Windows\winsxs\trustedinstaller.exe /S Volume in drive C is OS Volume Serial Number is 7C4E-86D4 Directory of C:\Windows\winsxs\amd64_microsoft-windows-trustedinstaller_31bf385 6ad364e35_6.1.7600.16385_none_ed02252b66d7bca2 07/13/2009 06:39 PM 194,048 TrustedInstaller.exe 1 File(s) 194,048 bytes Total Files Listed: 1 File(s) 194,048 bytes 0 Dir(s) 185,279,954,944 bytes free C:\windows\system32>