How to reset SDDL values for SCM

[Guest Anders]

Hello!

 

I have a by misstake set to low SDDL permissions on the Service Control

Manager it self...

this is the command i used to set the wrong SDDL (locking my self out...)

sc sdset scmanager D:(A;;CCLCRPRC;;;AU)

resulting in only read access...

 

the correct command should have been:

sc sdset scmanager

D:(A;;CCLCRPRC;;;AU)(A;;CCLCRPWPRC;;;SY)(A;;KA;;;BA)S:(AU;FA;KA;;;WD)(AU;OIIOFA;GA;;;WD)

Will reset back to RTM values according to this

http://support.microsoft.com/kb/907460

 

1. Where does those SDDL values for the SCM its self get saved?

2. How do I revert to the original values now when only have readaccess fo

AU (geting access denied, ehen trying to reset)?

 

Could a reinstall of SP2 correct this problem?

 

Best Regards

Anders

[Guest Tom_Reeleezee]

Re: How to reset SDDL values for SCM

 

Hello Anders,

 

I have about the same problem.

By mistake i used a space in the SDDL string, because of this my

access is now alo readonly

 

"sc sdshow scmanager"

now shows

 

D:(A;;CC;;;AU)(A;;CCLCRPRC;;;IU)S:(AU;FA;KA;;;WD)(AU;OIIOFA;GA;;;WD)

 

I've already tried to reinstall SP2, but no luck

 

Have you found a solution for this problem ?

 

Kind Regards,

Tom

[Guest Tom_Reeleezee]

Re: How to reset SDDL values for SCM

 

Hello,

 

I've just solved my problem after an extensive search in google.

 

you can simply reset als scmanager permissions bij removing this key

from the registry of jour computer

 

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\ServiceGroupOrder

\Security

 

Just delete this key and reboot your computer

after this the security settings for scmanager wil be reset to there

default value

 

Kind Regards,

Tom

[Guest Anders]

Re: How to reset SDDL values for SCM

 

Thank you very much Tom!

Your tips worked perfectly!

 

Have a nice day

/

Anders

 

"Tom_Reeleezee" wrote:

> Hello,

>

> I've just solved my problem after an extensive search in google.

>

> you can simply reset als scmanager permissions bij removing this key

> from the registry of jour computer

>

> HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\ServiceGroupOrder

> \Security

>

> Just delete this key and reboot your computer

> after this the security settings for scmanager wil be reset to there

> default value

>

> Kind Regards,

> Tom

>

>