+ Post New Thread
Results 1 to 13 of 13
Windows 7 Thread, explorer.EXE issue in Technical; Here is a weird permissions one for someone to try and explain. I'm stuck at the moment. A W7 machine ...
  1. #1

    garethedmondson's Avatar
    Join Date
    Oct 2008
    Location
    Gowerton, Swansea
    Posts
    2,309
    Thank Post
    973
    Thanked 326 Times in 194 Posts
    Blog Entries
    11
    Rep Power
    170

    explorer.EXE issue

    Here is a weird permissions one for someone to try and explain. I'm stuck at the moment.

    A W7 machine build onto the network. Admin can log in. Staff user can log in. We have not tried pupils yet. Admin has complete access to the machine as I wanted.

    Staff user cannot open anything on the desktop or from the startmenu - the following error appears:

    Explorer.EXE
    Windows cannot access the specified device, path or file. You may not have the appropriate permissions to access the item
    OK

    Now I haven't set this .exe as denied. It isn't denied on our XP machines - and we are using the same GPOs + some non-related W7 admx gpos.

    Anyone got any ideas?

    Thanks in advance

    Gareth

  2. #2

    SYNACK's Avatar
    Join Date
    Oct 2007
    Posts
    11,271
    Thank Post
    884
    Thanked 2,749 Times in 2,322 Posts
    Blog Entries
    11
    Rep Power
    785
    Do you have any software or drive restriction policies in place? Windows 7 may be applying stuff more thotoughly than XP did.

  3. #3
    tommccann's Avatar
    Join Date
    Jun 2009
    Posts
    252
    Thank Post
    46
    Thanked 39 Times in 31 Posts
    Rep Power
    0
    select start and then run and type secpol.msc to open the UAC controls.
    Then go through and turn off all of the admin restrictions and reboot.
    You can then do as you please and go back and re-enable some of the UAC controls for your own safety.

  4. #4

    garethedmondson's Avatar
    Join Date
    Oct 2008
    Location
    Gowerton, Swansea
    Posts
    2,309
    Thank Post
    973
    Thanked 326 Times in 194 Posts
    Blog Entries
    11
    Rep Power
    170
    Yeah I saw this answer on the internet when I Googled - problem is the staff user doesn't have access to the run command.

    Gareth

  5. #5

    garethedmondson's Avatar
    Join Date
    Oct 2008
    Location
    Gowerton, Swansea
    Posts
    2,309
    Thank Post
    973
    Thanked 326 Times in 194 Posts
    Blog Entries
    11
    Rep Power
    170
    Quote Originally Posted by tommccann View Post
    select start and then run and type secpol.msc to open the UAC controls.
    Then go through and turn off all of the admin restrictions and reboot.
    You can then do as you please and go back and re-enable some of the UAC controls for your own safety.

    Are these admin restrictions settable in a GPO?

    Gareth

  6. #6

    SYNACK's Avatar
    Join Date
    Oct 2007
    Posts
    11,271
    Thank Post
    884
    Thanked 2,749 Times in 2,322 Posts
    Blog Entries
    11
    Rep Power
    785
    Yes under Computer settings > Windows Settings > Security settings > Local policies > security options : - User account control *

    But I would look at finding out what is causing it rather than disabling the security, I would look at using seporate policies for XP and 7 using WMI filtering as old policies cause problems. This way you get fresh fast new policies and probably get to keep the extra security offered by the new OS.

  7. #7

    garethedmondson's Avatar
    Join Date
    Oct 2008
    Location
    Gowerton, Swansea
    Posts
    2,309
    Thank Post
    973
    Thanked 326 Times in 194 Posts
    Blog Entries
    11
    Rep Power
    170
    Quote Originally Posted by SYNACK View Post
    Yes under Computer settings > Windows Settings > Security settings > Local policies > security options : - User account control *

    But I would look at finding out what is causing it rather than disabling the security, I would look at using seporate policies for XP and 7 using WMI filtering as old policies cause problems. This way you get fresh fast new policies and probably get to keep the extra security offered by the new OS.
    Hi Synack,

    I thought about doing this - stopping the inheritance of policies from further up the LEA domain and then going through each one individually making new policies from the .admx files. Doing them in the same order etc.

    Would this work or would it take absolutely ages to do? There are quite a few policies applied further up the tree at LEA level.

    Gareth

  8. #8

    garethedmondson's Avatar
    Join Date
    Oct 2008
    Location
    Gowerton, Swansea
    Posts
    2,309
    Thank Post
    973
    Thanked 326 Times in 194 Posts
    Blog Entries
    11
    Rep Power
    170
    Quote Originally Posted by SYNACK View Post
    Yes under Computer settings > Windows Settings > Security settings > Local policies > security options : - User account control *
    Okay - total noob question here, but which option do you think I need to set? I've got them all in front of me :-)

    Gareth

  9. #9

    SYNACK's Avatar
    Join Date
    Oct 2007
    Posts
    11,271
    Thank Post
    884
    Thanked 2,749 Times in 2,322 Posts
    Blog Entries
    11
    Rep Power
    785
    Yes this would work, the less policies the better as they each take time to run through on every logon.

    You could use the GPMC or RSoP to show you what policy settings are actually applied then copy the ones that you actually need into a new policy. You may need to make sure that the LEA does not have any written policies that tell you not to do this though as they may have some setting configured centrally that they want to be able to change globaly. You may be able to get it going by just making new local domain policies, however if it is the LEA ones causing the issue initially the only way my be to block inheritance. I would contact them and ask them to add WMI filtering to their existing ones if this is the case which would limit them to XP and allow your newer stations to function correctly.

  10. #10

    garethedmondson's Avatar
    Join Date
    Oct 2008
    Location
    Gowerton, Swansea
    Posts
    2,309
    Thank Post
    973
    Thanked 326 Times in 194 Posts
    Blog Entries
    11
    Rep Power
    170
    Hi Synack,

    I've put in WMI filtering so Windows 7 machines only pick up the new Windows 7 policies - but unless I set the others with WMI filtering does it mean they will pick up the XP ones regardless?

    Gareth

  11. #11

    SYNACK's Avatar
    Join Date
    Oct 2007
    Posts
    11,271
    Thank Post
    884
    Thanked 2,749 Times in 2,322 Posts
    Blog Entries
    11
    Rep Power
    785
    Quote Originally Posted by garethedmondson View Post
    Okay - total noob question here, but which option do you think I need to set? I've got them all in front of me :-)

    Gareth
    Not sure, I still think it may be to do with other policies as I posted above (post 2), just followed up in case it was what tommccann thought and it was also a good question

  12. #12

    SYNACK's Avatar
    Join Date
    Oct 2007
    Posts
    11,271
    Thank Post
    884
    Thanked 2,749 Times in 2,322 Posts
    Blog Entries
    11
    Rep Power
    785
    Quote Originally Posted by garethedmondson View Post
    Hi Synack,

    I've put in WMI filtering so Windows 7 machines only pick up the new Windows 7 policies - but unless I set the others with WMI filtering does it mean they will pick up the XP ones regardless?

    Gareth
    Yes they will pick them up unless they to have filters, if it has no filter it will apply to everything.

  13. #13

    garethedmondson's Avatar
    Join Date
    Oct 2008
    Location
    Gowerton, Swansea
    Posts
    2,309
    Thank Post
    973
    Thanked 326 Times in 194 Posts
    Blog Entries
    11
    Rep Power
    170
    There we go - have blocked all inheritance on the folder and am setting up my Windows 7 policies from scratch just to try things out.

    Gareth



SHARE:
+ Post New Thread

Similar Threads

  1. No Explorer.exe on Login
    By cgiuk in forum Windows
    Replies: 12
    Last Post: 20th November 2009, 10:03 PM
  2. explorer.exe crashing
    By Little-Miss in forum Windows Server 2000/2003
    Replies: 4
    Last Post: 30th October 2009, 09:52 AM
  3. NEED HELP QUICK! - EXPLORER.EXE NOT LOADING
    By WithoutMotive in forum Windows
    Replies: 18
    Last Post: 18th October 2008, 06:17 PM
  4. Explorer.exe crashing on Log out / Shutdown
    By googlemad in forum Windows
    Replies: 0
    Last Post: 17th September 2008, 10:33 AM
  5. how to set proxy for explorer.exe
    By randomconept in forum General Chat
    Replies: 8
    Last Post: 22nd October 2007, 12:23 PM

Thread Information

Users Browsing this Thread

There are currently 1 users browsing this thread. (0 members and 1 guests)

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •