Guest Anders Posted March 26, 2008 Posted March 26, 2008 Hello! I have a by misstake set to low SDDL permissions on the Service Control Manager it self... this is the command i used to set the wrong SDDL (locking my self out...) sc sdset scmanager D:(A;;CCLCRPRC;;;AU) resulting in only read access... the correct command should have been: sc sdset scmanager D:(A;;CCLCRPRC;;;AU)(A;;CCLCRPWPRC;;;SY)(A;;KA;;;BA)S:(AU;FA;KA;;;WD)(AU;OIIOFA;GA;;;WD) Will reset back to RTM values according to this http://support.microsoft.com/kb/907460 1. Where does those SDDL values for the SCM its self get saved? 2. How do I revert to the original values now when only have readaccess fo AU (geting access denied, ehen trying to reset)? Could a reinstall of SP2 correct this problem? Best Regards Anders
Guest Tom_Reeleezee Posted March 27, 2008 Posted March 27, 2008 Re: How to reset SDDL values for SCM Hello Anders, I have about the same problem. By mistake i used a space in the SDDL string, because of this my access is now alo readonly "sc sdshow scmanager" now shows D:(A;;CC;;;AU)(A;;CCLCRPRC;;;IU)S:(AU;FA;KA;;;WD)(AU;OIIOFA;GA;;;WD) I've already tried to reinstall SP2, but no luck Have you found a solution for this problem ? Kind Regards, Tom
Guest Tom_Reeleezee Posted March 27, 2008 Posted March 27, 2008 Re: How to reset SDDL values for SCM Hello, I've just solved my problem after an extensive search in google. you can simply reset als scmanager permissions bij removing this key from the registry of jour computer HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\ServiceGroupOrder \Security Just delete this key and reboot your computer after this the security settings for scmanager wil be reset to there default value Kind Regards, Tom
Guest Anders Posted March 30, 2008 Posted March 30, 2008 Re: How to reset SDDL values for SCM Thank you very much Tom! Your tips worked perfectly! Have a nice day / Anders "Tom_Reeleezee" wrote: > Hello, > > I've just solved my problem after an extensive search in google. > > you can simply reset als scmanager permissions bij removing this key > from the registry of jour computer > > HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\ServiceGroupOrder > \Security > > Just delete this key and reboot your computer > after this the security settings for scmanager wil be reset to there > default value > > Kind Regards, > Tom > >
Recommended Posts