New
#31
The setowner command is coming back Access Denied.
The setowner command is coming back Access Denied.
OK try this variant then - it may be attempting to go too deep....
TAKEOWN /F C:\Windows\WinSXS /A
ICACLS C:\Windows\Winsxs /grant AdministratorsOI)(CI)(F)
ICACLS C:\Windows\Winsxs /setowner "NT SERVICE\TrustedInstaller"
ICACLS C:\Windows\Winsxs /grant:r AdministratorsOI)(CI)(RX)
ICACLS C:\Windows\Winsxs
So far so good...
C:\Windows\system32>TAKEOWN /F C:\Windows\WinSXS /A
SUCCESS: The file (or folder): "C:\Windows\WinSXS" now owned by the administrato
rs group.
C:\Windows\system32>ICACLS C:\Windows\Winsxs /grant AdministratorsOI)(CI)(F)
processed file: C:\Windows\Winsxs
Successfully processed 1 files; Failed processing 0 files
C:\Windows\system32>ICACLS C:\Windows\Winsxs /setowner "NT SERVICE\TrustedInstal
ler"
processed file: C:\Windows\Winsxs
Successfully processed 1 files; Failed processing 0 files
C:\Windows\system32>ICACLS C:\Windows\Winsxs /grant:r AdministratorsOI)(CI)(RX
)
processed file: C:\Windows\Winsxs
Successfully processed 1 files; Failed processing 0 files
C:\Windows\system32>ICACLS C:\Windows\Winsxs
C:\Windows\Winsxs BUILTIN\AdministratorsOI)(CI)(RX)
NT AUTHORITY\SYSTEMOI)(CI)(RX)
BUILTIN\UsersOI)(CI)(RX)
NT SERVICE\TrustedInstallerOI)(CI)(F)
Successfully processed 1 files; Failed processing 0 files
Then I rebooted and ran the next list of commands you gave me in post #30:
C:\Windows\system32>ICACLS C:\Windows\winsxs
C:\Windows\winsxs BUILTIN\AdministratorsOI)(CI)(RX)
NT AUTHORITY\SYSTEMOI)(CI)(RX)
BUILTIN\UsersOI)(CI)(RX)
NT SERVICE\TrustedInstallerOI)(CI)(F)
Successfully processed 1 files; Failed processing 0 files
C:\Windows\system32>ICACLS C:\Windows\winsxs\x86_volume.inf_31bf3856ad364e35_6.1
.7600.17122_none_15cad1ba5d3abbe6
C:\Windows\winsxs\x86_volume.inf_31bf3856ad364e35_6.1.7600.17122_none_15cad1ba5d
3abbe6 NT AUTHORITY\SYSTEMI)(OI)(CI)(RX)
BUILTIN\UsersI)(OI)(CI)(RX)
NT SERVICE\TrustedInstallerI)(OI)(CI)(F)
Successfully processed 1 files; Failed processing 0 files
C:\Windows\system32>ICACLS C:\Windows\winsxs\x86_avc.inf_31bf3856ad364e35_6.1.76
00.16385_none_ac2fa38af371acee
C:\Windows\winsxs\x86_avc.inf_31bf3856ad364e35_6.1.7600.16385_none_ac2fa38af371a
cee NT AUTHORITY\SYSTEMI)(OI)(CI)(RX)
BUILTIN\UsersI)(OI)(CI)(RX)
NT SERVICE\TrustedInstallerI)(OI)(CI)(F)
Successfully processed 1 files; Failed processing 0 files
Looks like so far, so good. What next?
That's got all the permissions back where they should be - at last! :) (I think!)
Now - where were we on the real problem?
Here are the latest log files.
sfc / scannow looks to have gone well:
C:\Windows\system32>sfc /scannow
Beginning system scan. This process will take some time.
Beginning verification phase of system scan.
Verification 100% complete.
Windows Resource Protection did not find any integrity violations.
Looks like CheckSUR still has a few complaints. So... what's next?
OK - here's the errors with CheckSUR...
Code:Checking Package Watchlist (f) CBS Watchlist Package Missing 0x80070002 Microsoft-Windows-EmbeddedCore-Package~31bf3856ad364e35~x86~~0.0.0.0 Package_for_KB980218~31bf3856ad364e35~x86~~6.1.1.2 Package registry presence failed, possibly an orphaned package on package watchlist (f) CBS Watchlist Package Missing 0x80070002 Microsoft-Windows-Foundation-Package~31bf3856ad364e35~x86~~0.0.0.0 Package_for_KB980218~31bf3856ad364e35~x86~~6.1.1.2 Package registry presence failed, possibly an orphaned package on package watchlist Checking Component Watchlist Checking Packages (f) CBS Registry Error 0x80070002 Package_2_for_KB977178~31bf3856ad364e35~x86~~6.1.2.0 failed to get CurrentState (f) CBS Registry Error 0x80070002 Package_2_for_KB977178~31bf3856ad364e35~x86~~6.1.2.0 failed to get Visibility (f) CBS Registry Error 0x80070002 Package_2_for_KB980218~31bf3856ad364e35~x86~~6.1.1.2 failed to get Visibility
I need to have a look at your COMPONENTS registry hive
Please copy the C:\Windows\System32\config\COMPONENTS file (no extension) to your desktop and then compress it - upload the compressed file to your favoured fileshare site (preferably Dropbox or SkyDrive) and post a link.
At first glance, that file looks very small - it's only about 26MB as opposed to the more normal 40-45MB.
It'll take me a while to check through it - if you haven't heard by Friday, Shout! :)
It's one of the registry hives - the one which (roughly speaking) keeps a record of all installed Windows software variants and status.
Looking at the results above, and at your hive, it seems that you have very few updates installed - but you do have/had one hotfix installed (KB977178) which appears perhaps to be getting in the way
Please attempt uninstalling this update - then run CheckSUR and SFC again and post the new logs.