Security Policy screwed up????What to do???

[[email protected]]

Hi All,

I was reading up on the windows security guide for XP
(http://www.microsoft.com/downloads/details.aspx?
FamilyID=2d3e25bc-f434-4cc6-a5a7-
09a8a229f118&DisplayLang=en ) and came across some
additional settings for the sceregvl.inf file. (page
92/additional registry settings)

After I adjusted my inf file and reregistered it I came
upon a major problem. When I opened the MMC editor and
went to the security options snap in I didn't see any
listings anymore. The whole list had just vanished.
Since I know I didn't do anything wrong I would most
definitely like to know why it didnt work and why it
doesnt show any settings anymore.
Since I already used this before on my 2000 box and never
encountered any problems like this I am blaming buggy XP
for this.

Even unregistering the dll and reregistering it with the
old inf file I backed up doesnt bring back the list and
still shows up empty. (WHAT THE F... is up with that, the
logic defies me)

GRRRRRRRRRRRRRRRRRRRRRRRRrrr, what the @#%$# is going on
here. Seems like MS should have stayed with the good old
2000 code.
I've been working with windows for over 15 years now and
consider myself not to be a newbie anymore so I know that
I did everything by the book.

Exporting and importing the registry doesn't work since
crappy XP keeps nagging about keys in use so I don't
really know what part of the registry he did in fact re-
import so that also didn't help much.

Anyone out there who knows how I can make these settings
reappear and why this has happened?

Sincerely,
Bill

[Doug Knox MS-MVP]

Bill,=20

My first impression is that when you did the copy and paste from the PDF =
into the INF file, you had one or more line breaks, in the wrong place, =
since when pasting into Notepad, it appears there, exactly as it does in =
the PDF file. =20

The instructions say to make sure there are no page breaks, but it =
doesn't warn about line wraps, and virtually every line in the sections =
to be copied is wrapped. So, unless you went through and "un-wrapped" =
each and every line, this is likely your problem.

--=20
Doug Knox, MS-MVP Windows XP/ Windows Smart Display
Win 95/98/Me/XP Tweaks and Fixes
http://www.dougknox.com
--------------------------------
Per user Group Policy Restrictions for XP Home and XP Pro
http://www.dougknox.com/xp/utils/xp_securityconsole.htm
--------------------------------
Please reply only to the newsgroup so all may benefit.
Unsolicited e-mail is not answered.
=20
" > wrote in =
message ...
> Hi All,
>=20
> I was reading up on the windows security guide for XP=20
> (http://www.microsoft.com/downloads/details.aspx?
> FamilyID=3D2d3e25bc-f434-4cc6-a5a7-
> 09a8a229f118&DisplayLang=3Den ) and came across some=20
> additional settings for the sceregvl.inf file. (page=20
> 92/additional registry settings)
>=20
> After I adjusted my inf file and reregistered it I came=20
> upon a major problem. When I opened the MMC editor and=20
> went to the security options snap in I didn't see any=20
> listings anymore. The whole list had just vanished.
> Since I know I didn't do anything wrong I would most=20
> definitely like to know why it didnt work and why it=20
> doesnt show any settings anymore.
> Since I already used this before on my 2000 box and never=20
> encountered any problems like this I am blaming buggy XP=20
> for this.
>=20
> Even unregistering the dll and reregistering it with the=20
> old inf file I backed up doesnt bring back the list and=20
> still shows up empty. (WHAT THE F... is up with that, the=20
> logic defies me)
>=20
> GRRRRRRRRRRRRRRRRRRRRRRRRrrr, what the @#%$# is going on=20
> here. Seems like MS should have stayed with the good old=20
> 2000 code.
> I've been working with windows for over 15 years now and=20
> consider myself not to be a newbie anymore so I know that=20
> I did everything by the book.
>=20
> Exporting and importing the registry doesn't work since=20
> crappy XP keeps nagging about keys in use so I don't=20
> really know what part of the registry he did in fact re-
> import so that also didn't help much.
>=20
> Anyone out there who knows how I can make these settings=20
> reappear and why this has happened?
>=20
> Sincerely,
> Bill
>=20
>=20
>=20
>

[[email protected]]

Hi Doug,

Well, I told you I was no newbie,...when I copied the
text I made sure that each line had no pagebreaks and
used del to make sure that each line of text that needed
to be on one line was so.
I did that in notepad, afterwards I copied and pasted the
correct text in the inf file. (no word wrap enabled so I
could check)
So that still leaves me wondering and even so if in the
faintest remote possibility that that was the case then
why doesnt the old inf file bring back my settings?

Aaaah, the mysteries of windows I suppose.

Sincerely,
Bill


>-----Original Message-----
>Bill,
>
>My first impression is that when you did the copy and
paste from the PDF into the INF file, you had one or more
line breaks, in the wrong place, since when pasting into
Notepad, it appears there, exactly as it does in the PDF
file.
>
>The instructions say to make sure there are no page
breaks, but it doesn't warn about line wraps, and
virtually every line in the sections to be copied is
wrapped. So, unless you went through and "un-wrapped"
each and every line, this is likely your problem.
>
>--
>Doug Knox, MS-MVP Windows XP/ Windows Smart Display
>Win 95/98/Me/XP Tweaks and Fixes
>http://www.dougknox.com
>--------------------------------
>Per user Group Policy Restrictions for XP Home and XP Pro
>http://www.dougknox.com/xp/utils/xp_securityconsole.htm
>--------------------------------
>Please reply only to the newsgroup so all may benefit.
>Unsolicited e-mail is not answered.
>
"
> wrote in message
...
>> Hi All,
>>
>> I was reading up on the windows security guide for XP
>> (http://www.microsoft.com/downloads/details.aspx?
>> FamilyID=2d3e25bc-f434-4cc6-a5a7-
>> 09a8a229f118&DisplayLang=en ) and came across some
>> additional settings for the sceregvl.inf file. (page
>> 92/additional registry settings)
>>
>> After I adjusted my inf file and reregistered it I
came
>> upon a major problem. When I opened the MMC editor and
>> went to the security options snap in I didn't see any
>> listings anymore. The whole list had just vanished.
>> Since I know I didn't do anything wrong I would most
>> definitely like to know why it didnt work and why it
>> doesnt show any settings anymore.
>> Since I already used this before on my 2000 box and
never
>> encountered any problems like this I am blaming buggy
XP
>> for this.
>>
>> Even unregistering the dll and reregistering it with
the
>> old inf file I backed up doesnt bring back the list
and
>> still shows up empty. (WHAT THE F... is up with that,
the
>> logic defies me)
>>
>> GRRRRRRRRRRRRRRRRRRRRRRRRrrr, what the @#%$# is going
on
>> here. Seems like MS should have stayed with the good
old
>> 2000 code.
>> I've been working with windows for over 15 years now
and
>> consider myself not to be a newbie anymore so I know
that
>> I did everything by the book.
>>
>> Exporting and importing the registry doesn't work
since
>> crappy XP keeps nagging about keys in use so I don't
>> really know what part of the registry he did in fact
re-
>> import so that also didn't help much.
>>
>> Anyone out there who knows how I can make these
settings
>> reappear and why this has happened?
>>
>> Sincerely,
>> Bill
>>
>>
>>
>>
>.
>

[Doug Knox MS-MVP]

I don't have an answer for you, at this point, Bill. I have downloaded =
the documentation, and I'll set up a Pro install under Virtual PC and =
see if I can duplicate your findings. It'll be tomorrow before I can =
get to it though.

--=20
Doug Knox, MS-MVP Windows XP/ Windows Smart Display
Win 95/98/Me/XP Tweaks and Fixes
http://www.dougknox.com
--------------------------------
Per user Group Policy Restrictions for XP Home and XP Pro
http://www.dougknox.com/xp/utils/xp_securityconsole.htm
--------------------------------
Please reply only to the newsgroup so all may benefit.
Unsolicited e-mail is not answered.
=20
" > wrote in =
message ...
> Hi Doug,
>=20
> Well, I told you I was no newbie,...when I copied the=20
> text I made sure that each line had no pagebreaks and=20
> used del to make sure that each line of text that needed=20
> to be on one line was so.
> I did that in notepad, afterwards I copied and pasted the=20
> correct text in the inf file. (no word wrap enabled so I=20
> could check)
> So that still leaves me wondering and even so if in the=20
> faintest remote possibility that that was the case then=20
> why doesnt the old inf file bring back my settings?
>=20
> Aaaah, the mysteries of windows I suppose.
>=20
> Sincerely,
> Bill
>=20
>=20
> >-----Original Message-----
> >Bill,=20
> >
> >My first impression is that when you did the copy and=20
> paste from the PDF into the INF file, you had one or more=20
> line breaks, in the wrong place, since when pasting into=20
> Notepad, it appears there, exactly as it does in the PDF=20
> file. =20
> >
> >The instructions say to make sure there are no page=20
> breaks, but it doesn't warn about line wraps, and=20
> virtually every line in the sections to be copied is=20
> wrapped. So, unless you went through and "un-wrapped"=20
> each and every line, this is likely your problem.
> >
> >--=20
> >Doug Knox, MS-MVP Windows XP/ Windows Smart Display
> >Win 95/98/Me/XP Tweaks and Fixes
> >http://www.dougknox.com
> >--------------------------------
> >Per user Group Policy Restrictions for XP Home and XP Pro
> >http://www.dougknox.com/xp/utils/xp_securityconsole.htm
> >--------------------------------
> >Please reply only to the newsgroup so all may benefit.
> >Unsolicited e-mail is not answered.
> >=20
> "=20
> > wrote in message=20
> ...
> >> Hi All,
> >>=20
> >> I was reading up on the windows security guide for XP=20
> >> (http://www.microsoft.com/downloads/details.aspx?
> >> FamilyID=3D2d3e25bc-f434-4cc6-a5a7-
> >> 09a8a229f118&DisplayLang=3Den ) and came across some=20
> >> additional settings for the sceregvl.inf file. (page=20
> >> 92/additional registry settings)
> >>=20
> >> After I adjusted my inf file and reregistered it I=20
> came=20
> >> upon a major problem. When I opened the MMC editor and=20
> >> went to the security options snap in I didn't see any=20
> >> listings anymore. The whole list had just vanished.
> >> Since I know I didn't do anything wrong I would most=20
> >> definitely like to know why it didnt work and why it=20
> >> doesnt show any settings anymore.
> >> Since I already used this before on my 2000 box and=20
> never=20
> >> encountered any problems like this I am blaming buggy=20
> XP=20
> >> for this.
> >>=20
> >> Even unregistering the dll and reregistering it with=20
> the=20
> >> old inf file I backed up doesnt bring back the list=20
> and=20
> >> still shows up empty. (WHAT THE F... is up with that,=20
> the=20
> >> logic defies me)
> >>=20
> >> GRRRRRRRRRRRRRRRRRRRRRRRRrrr, what the @#%$# is going=20
> on=20
> >> here. Seems like MS should have stayed with the good=20
> old=20
> >> 2000 code.
> >> I've been working with windows for over 15 years now=20
> and=20
> >> consider myself not to be a newbie anymore so I know=20
> that=20
> >> I did everything by the book.
> >>=20
> >> Exporting and importing the registry doesn't work=20
> since=20
> >> crappy XP keeps nagging about keys in use so I don't=20
> >> really know what part of the registry he did in fact=20
> re-
> >> import so that also didn't help much.
> >>=20
> >> Anyone out there who knows how I can make these=20
> settings=20
> >> reappear and why this has happened?
> >>=20
> >> Sincerely,
> >> Bill
> >>=20
> >>=20
> >>=20
> >>=20
> >.
> >

[[email protected]]

Doug,

That would be great, I have again tested it and used the
old inf file I had from one of my earlier ghosts and used
this on my current XP and again all settings are a noshow
so there must be something else going wrong since the inf
file cannot be corrupt.

Maybe the scecli.dll has been corrupted or something or
maybe NTFS rights come into play,...

How do I know what your test results will be from virtual
PC? Will you post it on this board or do you need my
email?

Sincerely,
B


>-----Original Message-----
>I don't have an answer for you, at this point, Bill. I
have downloaded the documentation, and I'll set up a Pro
install under Virtual PC and see if I can duplicate your
findings. It'll be tomorrow before I can get to it
though.
>
>--
>Doug Knox, MS-MVP Windows XP/ Windows Smart Display
>Win 95/98/Me/XP Tweaks and Fixes
>http://www.dougknox.com
>--------------------------------
>Per user Group Policy Restrictions for XP Home and XP Pro
>http://www.dougknox.com/xp/utils/xp_securityconsole.htm
>--------------------------------
>Please reply only to the newsgroup so all may benefit.
>Unsolicited e-mail is not answered.
>
"
> wrote in message
...
>> Hi Doug,
>>
>> Well, I told you I was no newbie,...when I copied the
>> text I made sure that each line had no pagebreaks and
>> used del to make sure that each line of text that
needed
>> to be on one line was so.
>> I did that in notepad, afterwards I copied and pasted
the
>> correct text in the inf file. (no word wrap enabled so
I
>> could check)
>> So that still leaves me wondering and even so if in
the
>> faintest remote possibility that that was the case
then
>> why doesnt the old inf file bring back my settings?
>>
>> Aaaah, the mysteries of windows I suppose.
>>
>> Sincerely,
>> Bill
>>
>>
>> >-----Original Message-----
>> >Bill,
>> >
>> >My first impression is that when you did the copy and
>> paste from the PDF into the INF file, you had one or
more
>> line breaks, in the wrong place, since when pasting
into
>> Notepad, it appears there, exactly as it does in the
PDF
>> file.
>> >
>> >The instructions say to make sure there are no page
>> breaks, but it doesn't warn about line wraps, and
>> virtually every line in the sections to be copied is
>> wrapped. So, unless you went through and "un-wrapped"
>> each and every line, this is likely your problem.
>> >
>> >--
>> >Doug Knox, MS-MVP Windows XP/ Windows Smart Display
>> >Win 95/98/Me/XP Tweaks and Fixes
>> >http://www.dougknox.com
>> >--------------------------------
>> >Per user Group Policy Restrictions for XP Home and XP
Pro
>>
>http://www.dougknox.com/xp/utils/xp_securityconsole.htm
>> >--------------------------------
>> >Please reply only to the newsgroup so all may benefit.
>> >Unsolicited e-mail is not answered.
>> >
>> "
>> > wrote in message
>> ...
>> >> Hi All,
>> >>
>> >> I was reading up on the windows security guide for
XP
>> >> (http://www.microsoft.com/downloads/details.aspx?
>> >> FamilyID=2d3e25bc-f434-4cc6-a5a7-
>> >> 09a8a229f118&DisplayLang=en ) and came across some
>> >> additional settings for the sceregvl.inf file.
(page
>> >> 92/additional registry settings)
>> >>
>> >> After I adjusted my inf file and reregistered it I
>> came
>> >> upon a major problem. When I opened the MMC editor
and
>> >> went to the security options snap in I didn't see
any
>> >> listings anymore. The whole list had just vanished.
>> >> Since I know I didn't do anything wrong I would
most
>> >> definitely like to know why it didnt work and why
it
>> >> doesnt show any settings anymore.
>> >> Since I already used this before on my 2000 box and
>> never
>> >> encountered any problems like this I am blaming
buggy
>> XP
>> >> for this.
>> >>
>> >> Even unregistering the dll and reregistering it
with
>> the
>> >> old inf file I backed up doesnt bring back the list
>> and
>> >> still shows up empty. (WHAT THE F... is up with
that,
>> the
>> >> logic defies me)
>> >>
>> >> GRRRRRRRRRRRRRRRRRRRRRRRRrrr, what the @#%$# is
going
>> on
>> >> here. Seems like MS should have stayed with the
good
>> old
>> >> 2000 code.
>> >> I've been working with windows for over 15 years
now
>> and
>> >> consider myself not to be a newbie anymore so I
know
>> that
>> >> I did everything by the book.
>> >>
>> >> Exporting and importing the registry doesn't work
>> since
>> >> crappy XP keeps nagging about keys in use so I
don't
>> >> really know what part of the registry he did in
fact
>> re-
>> >> import so that also didn't help much.
>> >>
>> >> Anyone out there who knows how I can make these
>> settings
>> >> reappear and why this has happened?
>> >>
>> >> Sincerely,
>> >> Bill
>> >>
>> >>
>> >>
>> >>
>> >.
>> >
>.
>

[Doug Knox MS-MVP]

I'll post my findings here, Bill.

--=20
Doug Knox, MS-MVP Windows XP/ Windows Smart Display
Win 95/98/Me/XP Tweaks and Fixes
http://www.dougknox.com
--------------------------------
Per user Group Policy Restrictions for XP Home and XP Pro
http://www.dougknox.com/xp/utils/xp_securityconsole.htm
--------------------------------
Please reply only to the newsgroup so all may benefit.
Unsolicited e-mail is not answered.
=20
" > wrote in =
message ...
> Doug,
>=20
> That would be great, I have again tested it and used the=20
> old inf file I had from one of my earlier ghosts and used=20
> this on my current XP and again all settings are a noshow=20
> so there must be something else going wrong since the inf=20
> file cannot be corrupt.
>=20
> Maybe the scecli.dll has been corrupted or something or=20
> maybe NTFS rights come into play,...
>=20
> How do I know what your test results will be from virtual=20
> PC? Will you post it on this board or do you need my=20
> email?
>=20
> Sincerely,
> B
>=20
>=20
> >-----Original Message-----
> >I don't have an answer for you, at this point, Bill. I=20
> have downloaded the documentation, and I'll set up a Pro=20
> install under Virtual PC and see if I can duplicate your=20
> findings. It'll be tomorrow before I can get to it=20
> though.
> >
> >--=20
> >Doug Knox, MS-MVP Windows XP/ Windows Smart Display
> >Win 95/98/Me/XP Tweaks and Fixes
> >http://www.dougknox.com
> >--------------------------------
> >Per user Group Policy Restrictions for XP Home and XP Pro
> >http://www.dougknox.com/xp/utils/xp_securityconsole.htm
> >--------------------------------
> >Please reply only to the newsgroup so all may benefit.
> >Unsolicited e-mail is not answered.
> >=20
> "=20
> > wrote in message=20
> ...
> >> Hi Doug,
> >>=20
> >> Well, I told you I was no newbie,...when I copied the=20
> >> text I made sure that each line had no pagebreaks and=20
> >> used del to make sure that each line of text that=20
> needed=20
> >> to be on one line was so.
> >> I did that in notepad, afterwards I copied and pasted=20
> the=20
> >> correct text in the inf file. (no word wrap enabled so=20
> I=20
> >> could check)
> >> So that still leaves me wondering and even so if in=20
> the=20
> >> faintest remote possibility that that was the case=20
> then=20
> >> why doesnt the old inf file bring back my settings?
> >>=20
> >> Aaaah, the mysteries of windows I suppose.
> >>=20
> >> Sincerely,
> >> Bill
> >>=20
> >>=20
> >> >-----Original Message-----
> >> >Bill,=20
> >> >
> >> >My first impression is that when you did the copy and=20
> >> paste from the PDF into the INF file, you had one or=20
> more=20
> >> line breaks, in the wrong place, since when pasting=20
> into=20
> >> Notepad, it appears there, exactly as it does in the=20
> PDF=20
> >> file. =20
> >> >
> >> >The instructions say to make sure there are no page=20
> >> breaks, but it doesn't warn about line wraps, and=20
> >> virtually every line in the sections to be copied is=20
> >> wrapped. So, unless you went through and "un-wrapped"=20
> >> each and every line, this is likely your problem.
> >> >
> >> >--=20
> >> >Doug Knox, MS-MVP Windows XP/ Windows Smart Display
> >> >Win 95/98/Me/XP Tweaks and Fixes
> >> >http://www.dougknox.com
> >> >--------------------------------
> >> >Per user Group Policy Restrictions for XP Home and XP=20
> Pro
> >>=20
> >http://www.dougknox.com/xp/utils/xp_securityconsole.htm
> >> >--------------------------------
> >> >Please reply only to the newsgroup so all may benefit.
> >> >Unsolicited e-mail is not answered.
> >> >=20
> >> "=20
> >> > wrote in message=20
> >> ...
> >> >> Hi All,
> >> >>=20
> >> >> I was reading up on the windows security guide for=20
> XP=20
> >> >> (http://www.microsoft.com/downloads/details.aspx?
> >> >> FamilyID=3D2d3e25bc-f434-4cc6-a5a7-
> >> >> 09a8a229f118&DisplayLang=3Den ) and came across some=20
> >> >> additional settings for the sceregvl.inf file.=20
> (page=20
> >> >> 92/additional registry settings)
> >> >>=20
> >> >> After I adjusted my inf file and reregistered it I=20
> >> came=20
> >> >> upon a major problem. When I opened the MMC editor=20
> and=20
> >> >> went to the security options snap in I didn't see=20
> any=20
> >> >> listings anymore. The whole list had just vanished.
> >> >> Since I know I didn't do anything wrong I would=20
> most=20
> >> >> definitely like to know why it didnt work and why=20
> it=20
> >> >> doesnt show any settings anymore.
> >> >> Since I already used this before on my 2000 box and=20
> >> never=20
> >> >> encountered any problems like this I am blaming=20
> buggy=20
> >> XP=20
> >> >> for this.
> >> >>=20
> >> >> Even unregistering the dll and reregistering it=20
> with=20
> >> the=20
> >> >> old inf file I backed up doesnt bring back the list=20
> >> and=20
> >> >> still shows up empty. (WHAT THE F... is up with=20
> that,=20
> >> the=20
> >> >> logic defies me)
> >> >>=20
> >> >> GRRRRRRRRRRRRRRRRRRRRRRRRrrr, what the @#%$# is=20
> going=20
> >> on=20
> >> >> here. Seems like MS should have stayed with the=20
> good=20
> >> old=20
> >> >> 2000 code.
> >> >> I've been working with windows for over 15 years=20
> now=20
> >> and=20
> >> >> consider myself not to be a newbie anymore so I=20
> know=20
> >> that=20
> >> >> I did everything by the book.
> >> >>=20
> >> >> Exporting and importing the registry doesn't work=20
> >> since=20
> >> >> crappy XP keeps nagging about keys in use so I=20
> don't=20
> >> >> really know what part of the registry he did in=20
> fact=20
> >> re-
> >> >> import so that also didn't help much.
> >> >>=20
> >> >> Anyone out there who knows how I can make these=20
> >> settings=20
> >> >> reappear and why this has happened?
> >> >>=20
> >> >> Sincerely,
> >> >> Bill
> >> >>=20
> >> >>=20
> >> >>=20
> >> >>=20
> >> >.
> >> >
> >.
> >

[Doug Knox MS-MVP]

Bill,

I was unable to reproduce your situation. I did run across a couple of =
things that I thought might cause it, but didn't in my testing.

1) When you copy the text from the PDF, you not only have to contend =
with the line breaks, you also have to contend with the individual page =
numbers from the PDF file. 101 winds up at the end of:

MACHINE\System\CurrentControlSet\Services\AFD\Para meters\MaximumDynamicBa=
cklog,4,%MaximumDynamicBacklog%,3,10000|%MaximumDy namicBacklog0%,15000|%M=
aximumDynamicBacklog1%,20000|%MaximumDynamicBacklo g2%,40000|%MaximumDynam=
icBacklog3%,80000|%MaximumDynamicBacklog4%,160000| %MaximumDynamicBacklog5=
%

And 101 and 102 wind up as individual lines in the Strings section.

However, I tried it both ways, with and without, and re-registering the =
SCECLI.DLL each time. The only thing that did happen was the =
description entries in the right pane of GPEDIT had some errors.

2) The other thought was the SCEREGVL.PNF file, being present. This is =
like a pre-compiled INF file, and at times, the presence of a matching =
PNF file can over-ride the changes in the INF file. So, I left it in =
place, re-registered the DLL, deleted it, re-registered the DLL, with no =
change.

--=20
Doug Knox, MS-MVP Windows XP/ Windows Smart Display
Win 95/98/Me/XP Tweaks and Fixes
http://www.dougknox.com
--------------------------------
Per user Group Policy Restrictions for XP Home and XP Pro
http://www.dougknox.com/xp/utils/xp_securityconsole.htm
--------------------------------
Please reply only to the newsgroup so all may benefit.
Unsolicited e-mail is not answered.
=20
"Doug Knox MS-MVP" > wrote in message =
...
I'll post my findings here, Bill.

--=20
Doug Knox, MS-MVP Windows XP/ Windows Smart Display
Win 95/98/Me/XP Tweaks and Fixes
http://www.dougknox.com
--------------------------------
Per user Group Policy Restrictions for XP Home and XP Pro
http://www.dougknox.com/xp/utils/xp_securityconsole.htm
--------------------------------
Please reply only to the newsgroup so all may benefit.
Unsolicited e-mail is not answered.
=20
" > wrote in =
message ...
> Doug,
>=20
> That would be great, I have again tested it and used the=20
> old inf file I had from one of my earlier ghosts and used=20
> this on my current XP and again all settings are a noshow=20
> so there must be something else going wrong since the inf=20
> file cannot be corrupt.
>=20
> Maybe the scecli.dll has been corrupted or something or=20
> maybe NTFS rights come into play,...
>=20
> How do I know what your test results will be from virtual=20
> PC? Will you post it on this board or do you need my=20
> email?
>=20
> Sincerely,
> B
>=20
>=20
> >-----Original Message-----
> >I don't have an answer for you, at this point, Bill. I=20
> have downloaded the documentation, and I'll set up a Pro=20
> install under Virtual PC and see if I can duplicate your=20
> findings. It'll be tomorrow before I can get to it=20
> though.
> >
> >--=20
> >Doug Knox, MS-MVP Windows XP/ Windows Smart Display
> >Win 95/98/Me/XP Tweaks and Fixes
> >http://www.dougknox.com
> >--------------------------------
> >Per user Group Policy Restrictions for XP Home and XP Pro
> >http://www.dougknox.com/xp/utils/xp_securityconsole.htm
> >--------------------------------
> >Please reply only to the newsgroup so all may benefit.
> >Unsolicited e-mail is not answered.
> >=20
> "=20
> > wrote in message=20
> ...
> >> Hi Doug,
> >>=20
> >> Well, I told you I was no newbie,...when I copied the=20
> >> text I made sure that each line had no pagebreaks and=20
> >> used del to make sure that each line of text that=20
> needed=20
> >> to be on one line was so.
> >> I did that in notepad, afterwards I copied and pasted=20
> the=20
> >> correct text in the inf file. (no word wrap enabled so=20
> I=20
> >> could check)
> >> So that still leaves me wondering and even so if in=20
> the=20
> >> faintest remote possibility that that was the case=20
> then=20
> >> why doesnt the old inf file bring back my settings?
> >>=20
> >> Aaaah, the mysteries of windows I suppose.
> >>=20
> >> Sincerely,
> >> Bill
> >>=20
> >>=20
> >> >-----Original Message-----
> >> >Bill,=20
> >> >
> >> >My first impression is that when you did the copy and=20
> >> paste from the PDF into the INF file, you had one or=20
> more=20
> >> line breaks, in the wrong place, since when pasting=20
> into=20
> >> Notepad, it appears there, exactly as it does in the=20
> PDF=20
> >> file. =20
> >> >
> >> >The instructions say to make sure there are no page=20
> >> breaks, but it doesn't warn about line wraps, and=20
> >> virtually every line in the sections to be copied is=20
> >> wrapped. So, unless you went through and "un-wrapped"=20
> >> each and every line, this is likely your problem.
> >> >
> >> >--=20
> >> >Doug Knox, MS-MVP Windows XP/ Windows Smart Display
> >> >Win 95/98/Me/XP Tweaks and Fixes
> >> >http://www.dougknox.com
> >> >--------------------------------
> >> >Per user Group Policy Restrictions for XP Home and XP=20
> Pro
> >>=20
> >http://www.dougknox.com/xp/utils/xp_securityconsole.htm
> >> >--------------------------------
> >> >Please reply only to the newsgroup so all may benefit.
> >> >Unsolicited e-mail is not answered.
> >> >=20
> >> "=20
> >> > wrote in message=20
> >> ...
> >> >> Hi All,
> >> >>=20
> >> >> I was reading up on the windows security guide for=20
> XP=20
> >> >> (http://www.microsoft.com/downloads/details.aspx?
> >> >> FamilyID=3D2d3e25bc-f434-4cc6-a5a7-
> >> >> 09a8a229f118&DisplayLang=3Den ) and came across some=20
> >> >> additional settings for the sceregvl.inf file.=20
> (page=20
> >> >> 92/additional registry settings)
> >> >>=20
> >> >> After I adjusted my inf file and reregistered it I=20
> >> came=20
> >> >> upon a major problem. When I opened the MMC editor=20
> and=20
> >> >> went to the security options snap in I didn't see=20
> any=20
> >> >> listings anymore. The whole list had just vanished.
> >> >> Since I know I didn't do anything wrong I would=20
> most=20
> >> >> definitely like to know why it didnt work and why=20
> it=20
> >> >> doesnt show any settings anymore.
> >> >> Since I already used this before on my 2000 box and=20
> >> never=20
> >> >> encountered any problems like this I am blaming=20
> buggy=20
> >> XP=20
> >> >> for this.
> >> >>=20
> >> >> Even unregistering the dll and reregistering it=20
> with=20
> >> the=20
> >> >> old inf file I backed up doesnt bring back the list=20
> >> and=20
> >> >> still shows up empty. (WHAT THE F... is up with=20
> that,=20
> >> the=20
> >> >> logic defies me)
> >> >>=20
> >> >> GRRRRRRRRRRRRRRRRRRRRRRRRrrr, what the @#%$# is=20
> going=20
> >> on=20
> >> >> here. Seems like MS should have stayed with the=20
> good=20
> >> old=20
> >> >> 2000 code.
> >> >> I've been working with windows for over 15 years=20
> now=20
> >> and=20
> >> >> consider myself not to be a newbie anymore so I=20
> know=20
> >> that=20
> >> >> I did everything by the book.
> >> >>=20
> >> >> Exporting and importing the registry doesn't work=20
> >> since=20
> >> >> crappy XP keeps nagging about keys in use so I=20
> don't=20
> >> >> really know what part of the registry he did in=20
> fact=20
> >> re-
> >> >> import so that also didn't help much.
> >> >>=20
> >> >> Anyone out there who knows how I can make these=20
> >> settings=20
> >> >> reappear and why this has happened?
> >> >>=20
> >> >> Sincerely,
> >> >> Bill
> >> >>=20
> >> >>=20
> >> >>=20
> >> >>=20
> >> >.
> >> >
> >.
> >

[[email protected]]

Hi Doug,

Thanks for looking into it. As for your advice on the page numbers, I didn't copy them as one whole
section so I didn't have any page numbers inbetween the registry keys.
I have now been able to add all registry settings in the document without getting the same error but
for one setting it does however still happen which is :

REG key
----------
MACHINE\System\CurrentControlSet\Services\Tcpip\Pa rameters\TcpMaxConnectResponseRetransmissions,4,%T cpMaxConnectResponseRetransmissions%,3,0|%TcpMaxCo nnectResponseRetransmissions0%,1|%TcpMaxConnectRes ponseRetransmissions1%,2|%TcpMaxConnectResponseRet ransmi
ssions2%,3|%TcpMaxConnectResponseRetransmissions3% MACHINE\System\CurrentControlSet\Services\Tcpip\Pa rameters\TcpMaxDataRetransmissions,4,%TcpMaxDataRe transmissions%,1

Matching Strings
--------------------
TcpMaxConnectResponseRetransmissions = "MSS: (TcpMaxConnectResponseRetransmissions) SYN-ACK
retransmissions when a connection request is not acknowledged"

TcpMaxConnectResponseRetransmissions0 = "No retransmission, half-open connections dropped after 3
seconds"

TcpMaxConnectResponseRetransmissions1 = "3 seconds, half-open connections dropped after 9 seconds"

TcpMaxConnectResponseRetransmissions2 = "3 & 6 seconds, half-open connections dropped after 21
seconds"

TcpMaxConnectResponseRetransmissions3 = "3, 6, & 9 seconds, half-open connections dropped after 45
seconds"

Each time I add this one and register the inf file I am unable to see the settings in the security
options page in the MMC editor until I manually deleted the registry key under SecEdit.
This will be pretty hard for you to recreate if not near impossible on your box since I think this
is just one of those things that could have a thousand reasons I suppose.
I will just forget about this one registry setting for now and will install a virtual PC like you
and test it on that see if I can get it to work or find out why it goes wrong. Anyways thnx for the
interest and trouble you put into this.

Kind Regards.





On Tue, 17 Feb 2004 23:08:38 -0500, "Doug Knox MS-MVP" > wrote:

>Bill,
>
>I was unable to reproduce your situation. I did run across a couple of things that I thought might cause it, but didn't in my testing.
>
>1) When you copy the text from the PDF, you not only have to contend with the line breaks, you also have to contend with the individual page numbers from the PDF file. 101 winds up at the end of:
>
>MACHINE\System\CurrentControlSet\Services\AFD\Para meters\MaximumDynamicBacklog,4,%MaximumDynamicBack log%,3,10000|%MaximumDynamicBacklog0%,15000|%Maxim umDynamicBacklog1%,20000|%MaximumDynamicBacklog2%, 40000|%MaximumDynamicBacklog3%,80000|%MaximumDynam icBac
klog4%,160000|%MaximumDynamicBacklog5%
>
>And 101 and 102 wind up as individual lines in the Strings section.
>
>However, I tried it both ways, with and without, and re-registering the SCECLI.DLL each time. The only thing that did happen was the description entries in the right pane of GPEDIT had some errors.
>
>2) The other thought was the SCEREGVL.PNF file, being present. This is like a pre-compiled INF file, and at times, the presence of a matching PNF file can over-ride the changes in the INF file. So, I left it in place, re-registered the DLL, deleted it,
re-registered the DLL, with no change.
>
>--
>Doug Knox, MS-MVP Windows XP/ Windows Smart Display
>Win 95/98/Me/XP Tweaks and Fixes
>http://www.dougknox.com
>--------------------------------
>Per user Group Policy Restrictions for XP Home and XP Pro
>http://www.dougknox.com/xp/utils/xp_securityconsole.htm
>--------------------------------
>Please reply only to the newsgroup so all may benefit.
>Unsolicited e-mail is not answered.
>
>"Doug Knox MS-MVP" > wrote in message ...
>I'll post my findings here, Bill.

[Doug Knox MS-MVP]

Bill,

You say that you have this working except for one setting. Its hard to =
tell with the way this wraps, but you have two Registry entries listed =
here.

MACHINE\System\CurrentControlSet\Services\Tcpip\Pa rameters\TcpMaxConnectR=
esponseRetransmissions,4,%TcpMaxConnectResponseRet ransmissions%,3,0|%TcpM=
axConnectResponseRetransmissions0%,1|%TcpMaxConnec tResponseRetransmission=
s1%,2|%TcpMaxConnectResponseRetransmissions2%,3|%T cpMaxConnectResponseRet=
ransmissions3%

And

MACHINE\System\CurrentControlSet\Services\Tcpip\Pa rameters\TcpMaxDataRetr=
ansmissions,4,%TcpMaxDataRetransmissions%,1

Someone sent me this same information from your post via ICQ, and the =
first thing I noticed was that the two seemed to be one continuous =
entry. And here, you're saying that its one entry, when it is in fact =
two.

--=20
Doug Knox, MS-MVP Windows XP/ Windows Smart Display
Win 95/98/Me/XP Tweaks and Fixes
http://www.dougknox.com
--------------------------------
Per user Group Policy Restrictions for XP Home and XP Pro
http://www.dougknox.com/xp/utils/xp_securityconsole.htm
--------------------------------
Please reply only to the newsgroup so all may benefit.
Unsolicited e-mail is not answered.
=20
> wrote in message =
...
> Hi Doug,
>=20
> Thanks for looking into it. As for your advice on the page numbers, I =
didn't copy them as one whole
> section so I didn't have any page numbers inbetween the registry keys.
> I have now been able to add all registry settings in the document =
without getting the same error but
> for one setting it does however still happen which is :=20
>=20
> REG key
> ----------
> =
MACHINE\System\CurrentControlSet\Services\Tcpip\Pa rameters\TcpMaxConnectR=
esponseRetransmissions,4,%TcpMaxConnectResponseRet ransmissions%,3,0|%TcpM=
axConnectResponseRetransmissions0%,1|%TcpMaxConnec tResponseRetransmission=
s1%,2|%TcpMaxConnectResponseRetransmissions2%,3|%T cpMaxConnectResponseRet=
ransmissions3%MACHINE\System\CurrentControlSet\Ser vices\Tcpip\Parameters\=
TcpMaxDataRetransmissions,4,%TcpMaxDataRetransmiss ions%,1
>=20
> Matching Strings
> --------------------
> TcpMaxConnectResponseRetransmissions =3D "MSS: =
(TcpMaxConnectResponseRetransmissions) SYN-ACK
> retransmissions when a connection request is not acknowledged"
>=20
> TcpMaxConnectResponseRetransmissions0 =3D "No retransmission, =
half-open connections dropped after 3
> seconds"
>=20
> TcpMaxConnectResponseRetransmissions1 =3D "3 seconds, half-open =
connections dropped after 9 seconds"
>=20
> TcpMaxConnectResponseRetransmissions2 =3D "3 & 6 seconds, half-open =
connections dropped after 21
> seconds"
>=20
> TcpMaxConnectResponseRetransmissions3 =3D "3, 6, & 9 seconds, =
half-open connections dropped after 45
> seconds"
>=20
> Each time I add this one and register the inf file I am unable to see =
the settings in the security
> options page in the MMC editor until I manually deleted the registry =
key under SecEdit.=20
> This will be pretty hard for you to recreate if not near impossible on =
your box since I think this
> is just one of those things that could have a thousand reasons I =
suppose.
> I will just forget about this one registry setting for now and will =
install a virtual PC like you
> and test it on that see if I can get it to work or find out why it =
goes wrong. Anyways thnx for the
> interest and trouble you put into this.
>=20
> Kind Regards.
>=20
>=20
>=20
>=20
>=20
> On Tue, 17 Feb 2004 23:08:38 -0500, "Doug Knox MS-MVP" =
> wrote:
>=20
> >Bill,
> >
> >I was unable to reproduce your situation. I did run across a couple =
of things that I thought might cause it, but didn't in my testing.
> >
> >1) When you copy the text from the PDF, you not only have to contend =
with the line breaks, you also have to contend with the individual page =
numbers from the PDF file. 101 winds up at the end of:
> >
> =
>MACHINE\System\CurrentControlSet\Services\AFD\Para meters\MaximumDynamicB=
acklog,4,%MaximumDynamicBacklog%,3,10000|%MaximumD ynamicBacklog0%,15000|%=
MaximumDynamicBacklog1%,20000|%MaximumDynamicBackl og2%,40000|%MaximumDyna=
micBacklog3%,80000|%MaximumDynamicBacklog4%,160000 |%MaximumDynamicBacklog=
5%
> >
> >And 101 and 102 wind up as individual lines in the Strings section.
> >
> >However, I tried it both ways, with and without, and re-registering =
the SCECLI.DLL each time. The only thing that did happen was the =
description entries in the right pane of GPEDIT had some errors.
> >
> >2) The other thought was the SCEREGVL.PNF file, being present. This =
is like a pre-compiled INF file, and at times, the presence of a =
matching PNF file can over-ride the changes in the INF file. So, I left =
it in place, re-registered the DLL, deleted it, re-registered the DLL, =
with no change.
> >
> >--=20
> >Doug Knox, MS-MVP Windows XP/ Windows Smart Display
> >Win 95/98/Me/XP Tweaks and Fixes
> >http://www.dougknox.com
> >--------------------------------
> >Per user Group Policy Restrictions for XP Home and XP Pro
> >http://www.dougknox.com/xp/utils/xp_securityconsole.htm
> >--------------------------------
> >Please reply only to the newsgroup so all may benefit.
> >Unsolicited e-mail is not answered.
> >=20
> >"Doug Knox MS-MVP" > wrote in message =
...
> >I'll post my findings here, Bill.
>

[[email protected]]

Darnit Doug,

I can't for the love of God figure out how I missed that one :-(
Thats it, after putting that second registry setting back correctly it worked and the setting is now
activated and the security page is showing the settings.
I must have overlooked this since the key
MACHINE\System\CurrentControlSet\Services\Tcpip\Pa rameters\TcpMaxConnectResponseRetransmissions....
was actually there in the registry so I never tried to look further in the inf file.
That darn line just had to be that long and thats why I overlooked it.
But anyways,...thats problem SOLVED :-) thnx

Kind Regards.

On Wed, 18 Feb 2004 00:55:54 -0500, "Doug Knox MS-MVP" > wrote:

>Bill,
>
>You say that you have this working except for one setting. Its hard to tell with the way this wraps, but you have two Registry entries listed here.
>
>MACHINE\System\CurrentControlSet\Services\Tcpip\Pa rameters\TcpMaxConnectResponseRetransmissions,4,%T cpMaxConnectResponseRetransmissions%,3,0|%TcpMaxCo nnectResponseRetransmissions0%,1|%TcpMaxConnectRes ponseRetransmissions1%,2|%TcpMaxConnectResponseRet ransm
issions2%,3|%TcpMaxConnectResponseRetransmissions3 %
>
>And
>
>MACHINE\System\CurrentControlSet\Services\Tcpip\Pa rameters\TcpMaxDataRetransmissions,4,%TcpMaxDataRe transmissions%,1
>
>Someone sent me this same information from your post via ICQ, and the first thing I noticed was that the two seemed to be one continuous entry. And here, you're saying that its one entry, when it is in fact two.

[Kelly]

Doug is good! :o) At least for your thread, he only had to download a pdf.
I have seen him go to the extreme of installing the Portuguese version of
Windows XP to help someone.
--
All the Best,
Kelly

MS-MVP Win98/XP
[AE-Windows® XP]

Troubleshooting Windows XP
http://www.kellys-korner-xp.com

Utilities for Windows XP
http://www.kellys-korner-xp.com/xp_u.htm#xp_util


> wrote in message
...
> Darnit Doug,
>
> I can't for the love of God figure out how I missed that one :-(
> Thats it, after putting that second registry setting back correctly it
worked and the setting is now
> activated and the security page is showing the settings.
> I must have overlooked this since the key
>
MACHINE\System\CurrentControlSet\Services\Tcpip\Pa rameters\TcpMaxConnectResp
onseRetransmissions....
> was actually there in the registry so I never tried to look further in the
inf file.
> That darn line just had to be that long and thats why I overlooked it.
> But anyways,...thats problem SOLVED :-) thnx
>
> Kind Regards.
>
> On Wed, 18 Feb 2004 00:55:54 -0500, "Doug Knox MS-MVP" >
wrote:
>
> >Bill,
> >
> >You say that you have this working except for one setting. Its hard to
tell with the way this wraps, but you have two Registry entries listed here.
> >
>
>MACHINE\System\CurrentControlSet\Services\Tcpip\Pa rameters\TcpMaxConnectRes
ponseRetransmissions,4,%TcpMaxConnectResponseRetra nsmissions%,3,0|%TcpMaxCon
nectResponseRetransmissions0%,1|%TcpMaxConnectResp onseRetransmissions1%,2|%T
cpMaxConnectResponseRetransmissions2%,3|%TcpMaxCon nectResponseRetransmission
s3%
> >
> >And
> >
>
>MACHINE\System\CurrentControlSet\Services\Tcpip\Pa rameters\TcpMaxDataRetran
smissions,4,%TcpMaxDataRetransmissions%,1
> >
> >Someone sent me this same information from your post via ICQ, and the
first thing I noticed was that the two seemed to be one continuous entry.
And here, you're saying that its one entry, when it is in fact two.
>

[[email protected]]

"I have seen him go to the extreme of installing the Portuguese version of
Windows XP to help someone."

As BA Baracus would say..."that crazy foo" :-)
He's a dedicated chap alright, I think he just loves what he does by helping people out with their
problems. I like a good puzzle just like the next one and I also tweak and look up as much as I can
about the system I'm using be it 2000, XP, 98,...but when I'm stumped I turn to places where people
like Doug might provide me with an answer. Good place this and always quick responses. Three tumbs
up!

Kind Regards.

On Wed, 18 Feb 2004 00:37:45 -0600, "Kelly" > wrote:

>Doug is good! :o) At least for your thread, he only had to download a pdf.
>I have seen him go to the extreme of installing the Portuguese version of
>Windows XP to help someone.

[Doug Knox MS-MVP]

Hey, we're all human, Bill! Glad to help.

--=20
Doug Knox, MS-MVP Windows XP/ Windows Smart Display
Win 95/98/Me/XP Tweaks and Fixes
http://www.dougknox.com
--------------------------------
Per user Group Policy Restrictions for XP Home and XP Pro
http://www.dougknox.com/xp/utils/xp_securityconsole.htm
--------------------------------
Please reply only to the newsgroup so all may benefit.
Unsolicited e-mail is not answered.
=20
> wrote in message =
...
> Darnit Doug,
>=20
> I can't for the love of God figure out how I missed that one :-(
> Thats it, after putting that second registry setting back correctly it =
worked and the setting is now
> activated and the security page is showing the settings.
> I must have overlooked this since the key
> =
MACHINE\System\CurrentControlSet\Services\Tcpip\Pa rameters\TcpMaxConnectR=
esponseRetransmissions....
> was actually there in the registry so I never tried to look further in =
the inf file.
> That darn line just had to be that long and thats why I overlooked it.
> But anyways,...thats problem SOLVED :-) thnx
>=20
> Kind Regards.
>=20
> On Wed, 18 Feb 2004 00:55:54 -0500, "Doug Knox MS-MVP" =
> wrote:
>=20
> >Bill,
> >
> >You say that you have this working except for one setting. Its hard =
to tell with the way this wraps, but you have two Registry entries =
listed here.
> >
> =
>MACHINE\System\CurrentControlSet\Services\Tcpip\Pa rameters\TcpMaxConnect=
ResponseRetransmissions,4,%TcpMaxConnectResponseRe transmissions%,3,0|%Tcp=
MaxConnectResponseRetransmissions0%,1|%TcpMaxConne ctResponseRetransmissio=
ns1%,2|%TcpMaxConnectResponseRetransmissions2%,3|% TcpMaxConnectResponseRe=
transmissions3%
> >
> >And
> >
> =
>MACHINE\System\CurrentControlSet\Services\Tcpip\Pa rameters\TcpMaxDataRet=
ransmissions,4,%TcpMaxDataRetransmissions%,1
> >
> >Someone sent me this same information from your post via ICQ, and the =
first thing I noticed was that the two seemed to be one continuous =
entry. And here, you're saying that its one entry, when it is in fact =
two.
>

[Doug Knox MS-MVP]

<blush>

--=20
Doug Knox, MS-MVP Windows XP/ Windows Smart Display
Win 95/98/Me/XP Tweaks and Fixes
http://www.dougknox.com
--------------------------------
Per user Group Policy Restrictions for XP Home and XP Pro
http://www.dougknox.com/xp/utils/xp_securityconsole.htm
--------------------------------
Please reply only to the newsgroup so all may benefit.
Unsolicited e-mail is not answered.
=20
"Kelly" > wrote in message =
...
> Doug is good! :o) At least for your thread, he only had to download =
a pdf.
> I have seen him go to the extreme of installing the Portuguese version =
of
> Windows XP to help someone.
> --=20
> All the Best,
> Kelly
>=20
> MS-MVP Win98/XP
> [AE-Windows=AE XP]
>=20
> Troubleshooting Windows XP
> http://www.kellys-korner-xp.com
>=20
> Utilities for Windows XP
> http://www.kellys-korner-xp.com/xp_u.htm#xp_util
>=20
>=20
> > wrote in message
> ...
> > Darnit Doug,
> >
> > I can't for the love of God figure out how I missed that one :-(
> > Thats it, after putting that second registry setting back correctly =
it
> worked and the setting is now
> > activated and the security page is showing the settings.
> > I must have overlooked this since the key
> >
> =
MACHINE\System\CurrentControlSet\Services\Tcpip\Pa rameters\TcpMaxConnectR=
esp
> onseRetransmissions....
> > was actually there in the registry so I never tried to look further =
in the
> inf file.
> > That darn line just had to be that long and thats why I overlooked =
it.
> > But anyways,...thats problem SOLVED :-) thnx
> >
> > Kind Regards.
> >
> > On Wed, 18 Feb 2004 00:55:54 -0500, "Doug Knox MS-MVP" =
>
> wrote:
> >
> > >Bill,
> > >
> > >You say that you have this working except for one setting. Its =
hard to
> tell with the way this wraps, but you have two Registry entries listed =
here.
> > >
> >
> =
>MACHINE\System\CurrentControlSet\Services\Tcpip\Pa rameters\TcpMaxConnect=
Res
> =
ponseRetransmissions,4,%TcpMaxConnectResponseRetra nsmissions%,3,0|%TcpMax=
Con
> =
nectResponseRetransmissions0%,1|%TcpMaxConnectResp onseRetransmissions1%,2=
|%T
> =
cpMaxConnectResponseRetransmissions2%,3|%TcpMaxCon nectResponseRetransmiss=
ion
> s3%
> > >
> > >And
> > >
> >
> =
>MACHINE\System\CurrentControlSet\Services\Tcpip\Pa rameters\TcpMaxDataRet=
ran
> smissions,4,%TcpMaxDataRetransmissions%,1
> > >
> > >Someone sent me this same information from your post via ICQ, and =
the
> first thing I noticed was that the two seemed to be one continuous =
entry.
> And here, you're saying that its one entry, when it is in fact two.
> >
>=20
>