Unable to log on to the computer with an error The security policies on this computer are configured to display information about the last interactive logon activity. Manage Windows Defender settings

Let's consider a situation where, when trying to change the NTFS rights of a folder or file, a security application error occurs:

Error applying security settings to: drive:\foldername\filename Failed to enumerate objects in the container. Access denied

In order to set new permissions for such an object, you need to change the owner.

Why does this happen

This effect can happen if, for example:

  • you copied/moved files from another computer;
  • connected someone else's hard drive;
  • reinstalled the system.

The essence is the same: your account or the group it belongs to does not have access rights to change the security settings of the object.

How to change the owner of a folder or file

Let's say we have a folder c:\temp and we can't change the security settings of the files inside it:

What to do:

1. Open the folder properties.

2. Go to the tab Safety.

3. Press the button Additionally:

5. Click Additionally:

6.Search:

7. Select the user or group you want to assign as the owner of the object and click OK:

8. Click OK:

9. Check the box Replace owner of subcontainers and objects, if necessary, and press OK:

(in our case, this is necessary to change the owner of all attached files)

Now you need to wait until the new owner is applied to all files. It may take quite a while long time, if there are a lot of files. After the process is complete, you can change NTFS user rights on the Security tab.

If, when you try to change the owner, the message still pops up

If you still get the error “enumeration failed” at the end, then probably one or more nested objects not only has a new owner, but also inheritance disabled. You need to check the permissions of all subfolders and files, find an object with disabled inheritance and Change the owner of a nested object specifically by calling its own properties.

  • Worker missing Windows table , but appears along with all folders and shortcuts if you boot into Safe Mode. What do you think, admin, what could be the matter? My problems began with an active Saturday surfing the Internet, looking for a disk image from my laptop (I touched mine somewhere). I found the image I needed on one of the sites, but decided to open and look at the screenshot of the disk, located on another site - image hosting. And at that moment, I suddenly got alarmed and issued a warning that there was a virus in the folder C:\Users\Username\AppData\Local\Temp and cleaning was impossible, then the computer froze, I had to force a reboot. After the reboot, a completely empty Windows desktop awaited me, without folders or shortcuts, instead of my permanent screensaver there was another one, and even with such an image, it’s better not to tell you. I tried to launch the Task Manager using the keyboard shortcut Ctrl+Alt+Del, but after it the screen turns black and so on ad infinitum.
    I’ve been reading your articles for a long time, I immediately tried to boot into it and was successful, there is a desktop there along with folders with shortcuts in place. Unfortunately, I can’t use it, it’s disabled for me. I launched and scanned the entire system partition C:, three viruses were found, then I booted into the system and, interestingly, the alien screensaver disappeared, but the desktop was still empty. I also have an antivirus at the ready, so I think it’s useful. I booted from the disk, after a full scan another virus was found, but during normal boot the desktop still did not appear. Are there any other options for me besides ? Sergey.

Windows desktop disappeared

Friends, very often I have had to deal with this problem; at first glance, readers asked me two identical questions, but they are solved differently. Let's look at the first case first, since it is much more serious, because it concerns Windows infection by a virus.

First of all, in order to successfully deal with this problem, you need to know which system file the virus modifies and which registry settings it changes, then it will not be difficult for you to quickly fix everything. I suggest you take everything apart possible ways solutions to this problem and let's start with the simplest and fastest ones.

  • If all else fails, be sure to try the most last method in this article, it is called that If all else fails, it often helps me when my desktop disappears.
  • Of course, you need to use anti-virus treatment utilities, then fix the registry and (we'll sort it all out), but you can solve the problem and more in a simple way. I'm sure that if our first reader had System Restore enabled, which can be applied perfectly in Safe Mode, the problem would have been solved in five minutes. First of all, in such cases, you need to remember about recovery; it was invented for a reason.

So, if when we boot Windows the desktop is as empty as a wallet before payday, we try to immediately (without restarting the computer) type keyboard shortcut Ctrl+Alt+Del, Task Manager should open, then File -> New task,

We enter explorer in the input field and OK, the desktop should appear with all the shortcuts and folders.

It is the Explorer.exe file that is responsible for launching the Windows graphical shell,

which consists of the desktop, start menu, toolbars and explorer. If the Explorer.exe system file does not start along with the operating system, then the desktop will not start. The explorer.exe file is located in the C:\Windows folder.

You may ask me: - Why didn’t the Explorer.exe file start on its own and you need to force it to start. You can answer this way: - We are lucky, friends, yes, yes, we are lucky - malware just changed some important parameters registry responsible for launching the Explorer.exe file (but did not change the file itself). Instead of the file Explorer.exe and the desktop it started malicious application, the process of which can be seen in the Task Manager. How can I fix a damaged registry and make Explorer.exe start on its own? Of course, apply system restore, this is the easiest method. Apply system restore.

Important Note: Friends, sometimes a malicious program modifies or deletes the Explorer.exe file itself. If this article does not help you, read another one, it describes a method for extracting the explorer.exe file from Windows distribution 7 and replacing the faulty file with it.

In exactly half of the cases the problem will be solved and the next time you boot you will see your desktop, then you can check the system for viruses. By the way, you can immediately call system recovery in the Task Manager - File -> New task, enter rstrui.exe in the input field, but this is in Windows 7 and 8. In Windows XP you need to type %systemroot%\system32\restore\rstrui.exe

Safe Mode If the task manager does not open in normal mode, boot into safe mode,

In most cases, you will see your desktop. Apply system restore and roll back a day.

If in safe mode there is also an empty desktop, but you have system recovery enabled, then you can type Ctrl+Alt+Del, the Task Manager will open, then File -> New task, enter explorer.exe in the input field, the desktop will appear or enter immediately command rstrui.exe, system recovery will start, roll back and check the computer for viruses. It is also advisable to restore the system Windows files.


Safe Mode with Command Line Support

In safe mode with command line support, type explorer.exe in the command line, the desktop opens, then run system restore, edit the registry, and so on.

We can immediately start system recovery with the command rstrui.exe

In Windows XP, type %systemroot%\system32\restore\rstrui.exe

System restore does not work for some reason

If in all modes system recovery does not work and does not solve the problem, and the desktop is still empty during normal boot, then we go to the registry and manually correct the parameters changed by the virus.

The Explorer.exe application deserves special mention in our entire story, as I already said, it is responsible for launching the Windows graphical shell, which consists of the desktop, start menu, toolbars and explorer.

It is the Explorer.exe file that in our case is attacked by viruses and, if successful, they modify it, as a result of this modification - the Explorer.exe file infected with a virus and a lifeless Windows desktop. But in some cases, viruses do not touch the Explorer.exe file, but change some registry settings. As a result, when the operating system boots, it does NOT refer to the Explorer.exe file, but to a completely different virus file. As a result, graphic Windows shell won't load again. How to fix the registry if system restore did not work for us?
IN safe mode, launch the registry - Start -> Run and type regedit in the input field,

The registry will open. If in safe mode you also have an empty desktop, then try the keyboard shortcut Ctrl+Alt+Del, the Task Manager will open, then File -> New task, enter regedit in the input field.

First of all, you need to look at the problem in the registry branch:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon look at the line “shell” it should have the value “explorer.exe”. And in our case, instead of explorer.exe there is the value c:\users\Your username\appdata\local\temp\2lfg38m0.exe

This means that instead of the Windows desktop, the 2lfg38m0.exe virus will be loaded from the temp folder.

If at this time we manage to launch the task manager, then instead of the system process Explorer.exe we will see some malicious process, in our case 2lfg38m0.exe.


In the same thread, look at another line “Userinit” It should have the value “C:\Windows\system32\userinit.exe”, there should be nothing after the comma. In our case, again the value is c:\users\Username\appdata\local\temp\2lfg38m0.exe

All this needs to be removed and the registry restored to normal. We correct both values ​​in the registry.

Let's look at another registry branch
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer, if there is a parameter: NoDesktop, then its value should be 0, but in no case 1. In general, the NoDesktop parameter can be deleted.

Using the name of the virus 2lfg38m0.exe, I search the registry and find another modified value. Branch

HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Winlogon\ the Shell parameter contains the full path to the virus file
c:\users\Username\appdata\local\temp\2lfg38m0.exe, delete all this, there should be nothing here at all.

Shell parameter must be empty

Explorer.exe file

All this is good, but we have considered the solution to the problem from one side, that is, the Explorer.exe file is not infected, but the virus has made malicious changes in the registry. We performed a system restore, scanned our Windows with anti-virus utilities and removed viruses, then fixed the registry, that’s basically it, the problem is solved and after booting into normal mode we have a desktop.

But the problem may be different, the Explorer.exe file may be infected or deleted altogether, and even if we want to, even with a normal registry, we will not be able to load the Windows desktop. Therefore, if you have when loading operating system it turns out - explorer.exe error or explorer.exe application error and sometimes it's just a black screen.

This means that you need to enter Safe Mode or Safe Mode with Command Prompt support and perform recovery system files . How to do this?

Select safe mode with command line support.

Type sfc /scannow on the command line.

Windows system files are checked and restored; sometimes the system may ask you to insert a Windows installation disk into the drive. Our file - Explorer.exe will be restored.

AVZ utility

At the end of the answer to the first letter, I would like to give an example of the well-known AVZ utility. If everything said above does not help, you can use this utility.
Let's go to the website of the utility developer - Oleg Zaitsev.
http://z-oleg.com/secur/avz/download.php
Download the utility

Please note here that many users make a mistake when launching the utility. Press CRTL+ALT+DEL, the task manager appears, click File-> New task, in the field that opens, enter the full path to the avz.exe file. For example, my file avz.exe is located in the folder C:\Users\Username\Desktop\avz4\avz.exe

So we type C:\Users\Your Username\Desktop\avz4\avz.exe

The main program window opens

We update the AVZ utility. File –> database update

File->System Restore

Check the boxes on item 9. Removing debuggers system processes" and 16. Key recovery launch Explorer, then click “Perform selected operations”.


Reply to the second letter

Quite recently I had a similar case. One of my friends in the screen settings found, in addition to the main Samsung monitor, something else unknown to him Display device: VGA. He became interested and made it the main screen, then clicked Apply.

After this, the monitor screen turned black, restarting the computer did not help, the Ctrl+Alt+Del key combination did not help either - the task manager did not appear. What helped was this: when you booted the computer, you had to press F-8, the troubleshooting menu will open, in which you need to select Loading the latest successful configuration that's all. You could also enter safe mode and apply system restore.

Another time there was a completely funny incident. The security guards in our organization decided at night to connect to one system unit two monitors and they were doing something there, probably playing. In the morning we turned off the computer and disconnected the second monitor, then turned on the computer, and there was an empty desktop. I was the first to arrive at work, they run to me, they say help me, otherwise everything on the computer is gone, and soon the bosses will come.

I go to help and think what’s missing there after all. I sit down at the computer and say - what’s missing? And they show me at the monitor with their hands - look, there is nothing.

I tried Ctrl+Alt+Del, the task manager did not appear, I looked, but the mouse pointer was on the desktop, then I right-clicked on the desktop without much hope and a menu appeared, selected Screen Resolution, I see two monitors in the Screen settings, made it the main one the monitor is active and Apply, the desktop appears.

If all else fails

There is another little-known way to restore Windows 7 boot after a failure, and I’ll tell you about it. At first glance, it may seem difficult to many, but nevertheless it often helps me out.
The fact is, friends, that a very large part of the problems due to which you cannot boot Windows 7 lie in registry errors. And Windows 7 would not be Windows 7 if it did not have a mechanism that protects registry files. Such a mechanism exists and creates archival copies registry in the RegBack folder every 10 days, regardless of whether you have system recovery enabled or not.

If you can't solve problems with loading Windows 7 you should try replacing the existing (and apparently damaged) registry files from the Config folder archive files from the RegBack folder. To do this, we will have to boot the computer from the installation Windows disk 7 or disk Windows recovery 7.

Boot into the recovery environment, select command line

and type in it – notepad , we get into Notepad, then File and Open.

We go into the real explorer, click My Computer. Now we need system disk C:, please note, the drive letters here may be mixed up, but the system drive C:, I think you can recognize it by the system drive letters located inside Windows folders and Program Files.

We go to the folder C:\Windows\System32\Config, here are the active registry files, specify the File Type - All files and see our registry files, we also see the RegBack folder, in which every 10 days the Task Scheduler makes a backup copy of the registry keys.

So, we will replace the existing registry files from the Config folder backup files registry from the RegBack folder.
So, first of all, let’s delete from the C:\Windows\System32\Config folder the files SAM, SECURITY, SOFTWARE, DEFAULT, SYSTEM, which are responsible for all registry hives,

and in their place we will copy and paste files with the same names, but from backup copy, that is, from the RegBack folder.

Note: The SAM, SECURITY, SOFTWARE, DEFAULT, SYSTEM files cannot be deleted all together; delete them one by one. Then copy the same files from the RegBack folder in their place.
Good day everyone, dear forum participants, I really, really hope for your help!
I crawled through the entire forum, gleaned a lot of information, but did not find my specific case.
The situation is as follows: there is Lenovo laptop and OS Windows 7 Ultimate (32 bit).
Behavior: it turns on, boots normally, 30-40 seconds after turning on it hangs tightly. It is Explorer that hangs, and when I try to open the task manager after 2 minutes it displays “the login process was unable to display the Windows security settings.” The most interesting thing is that HDD indicator at this moment it simply goes out, and the disk itself spins quietly, sometimes shuffling its heads. The processor is also at zero. And, when it freezes, the appearance of the taskbar changes from normal to simplified (or whatever it is).
It all started after uninstalling Kaspersky Endpoint Security: uninstalled, rebooted, started installing ESET Nod 32, which crashed with an error during the installation stage. Rebooted... and away we go.
1. I checked the disk for viruses by connecting it to my laptop, only 21 “malware” were found, which were mercilessly demolished. This did not save the situation.
2. I checked the disk for bad sectors - everything is fine.
3. Everything is fine with the hardware - I tested it. Even on old HDD rolled the axle from the same installation disk- everything works.
4. Safe mode does not open (scrolls through the list of services and drivers, black screen - reboots to normal mode) neither by itself nor with command line support.
5. Removed all programs that could in any way affect the operation of the system. In autostart - nothing!
6. Removed all drivers from Lenovo.
7. I removed all contextual links from Explorer, except those from Microsoft. I tried them too, but for some reason they reappear upon restart.
8. I can’t roll back because automatic recovery was not enabled “during life.”
9. Tried all the recovery tools available with ERD.

“Take and reinstall” is not possible, since the laptop has VipNET Monitor, the reinstallation of which will cost a pretty penny and will also take time (their specialists promise to arrive only in a month).

P.S. Currently, the system starts and works without freezing only in diagnostic mode. I tried to reinstall Windows under the guise of updating it (from the original installation disk), but the system starts complaining, saying it doesn’t see the disk. Apparently due to disabled services and drivers. IN normal mode It is not possible to complete the installation, because after unpacking the installation files everything freezes. If you need screenshots or something else, I'll do everything.

I ask for help, the situation is very serious, and time is running out...

Quite often, Windows users, regardless of the version of the system they are using, when trying to open files or run installers, including drivers, may see a message on the screen stating that Internet security settings did not allow opening the file. But the saddest thing is that this applies to any files and programs, and not just those that were downloaded from World Wide Web. Why this happens and how to fix the problem, read on. To do this, you can use several simple methods, preventing security parameters from interfering.

Files cannot be opened: what is the reason?

Indeed, such a situation is not uncommon. It would be nice if this only applied to opening files, but this can happen even when you try to change the time and date. And anyway, what does the Internet have to do with it?

The fact is that the system is to blame for the notification that the Internet security settings did not allow the files to be opened. Windows protection, which interacts closely with installed settings built-in browser. In other words, the same “Defender” ( Windows Defender) is directly linked to the default browser for accessing web resources. Taken together, the parameters of both applications block the execution of programs, opening files, or carrying out any other actions in the system. But it is possible to fight this manifestation of “concern” for the user’s safety.

Unblocking installers

First, let's look at an example with installation file using the example of the 7z archiver installer. Indeed, sometimes Windows may issue a warning that your Internet security settings prevented you from opening a file.

We assume that it was downloaded from the Internet. In this case, the system refers to the fact that the object was downloaded from an unknown resource and was blocked for security reasons. You can fix the problem through the properties menu, called via RMB on the file itself in Explorer. On the properties tab at the bottom there may be an “Unlock” button, which you need to click, save the changes, and then restart the installation.

If such a button is missing, or these actions have no effect, and the message that Internet security settings did not allow you to open the file appears again, you can use the unlock string through the Unlocker utility in context menu, of course, if this program is installed (at least in Windows 7 it is). If none of these methods help, move on to the next settings.

If Windows security prevents these files from being opened: Resetting the internal browser settings

To begin, in the “Control Panel” through the “Network Center” section, select the Internet properties item. In it you need to use the transition to additional settings.

On the tab of the same name, you need to click the reset button at the bottom, and in the next step, check the box next to the line for deleting personal data.

If even after this the desired effect is not achieved, use the security tab, where in the selection area you first click the icon of dangerous sites, and then the button for changing the “Other” security level. In a new window, the three .NET Framework components are set to enable, and then the reset button is clicked. After this, the actions described in the first step are performed, after which the system is completely rebooted.

Manage Windows Defender settings

One of the biggest problems Windows users- “Defender”, who is able to block whatever he wants (and for completely unknown reasons).

In order to remove the message that Internet security settings did not allow you to open a file, you need to enter its settings through the Control Panel, deactivate the real-time protection line in the settings section and save the changes.

Note: in Windows 8.1, the “Administrator” item is used in the settings, and in Windows 10, protection is disabled using a special slider.

Actions with the system registry

Finally, changing some parameters and keys can give the desired effect system registry. You can call the editor through the “Run” console by entering the regedit command in it (running as an administrator is required).

Through the HKLM branch you need to go to the Internet Settings section and use the Zones directory there, which contains subfolders with numbers. If among them there are objects designated by letters rather than numbers, they need to be deleted (in the example above, this is the L directory). After removal, as in previous cases, computer system need to reboot.

Brief summary

Here, in fact, are all the methods that allow you to get rid of the occurrence of such unpleasant situations. In general, fixing the problem looks quite simple, but it is recommended to start with the IE and Defender settings. As an additional measure, users of the seventh modification of the system need to check whether the SP2 service pack is installed (its absence can also provoke the occurrence of such failures). If, after disabling everything that was described above, the message no longer appears, you can basically leave the registry alone, but it’s still worth checking.

Unable to log on to the computer, error The security policies on this computer are configured to display information about the last interactive login activity-01

Hello everyone, today I want to talk about how to solve the error Security policies on this computer are configured to display information about the last interactive login operation. The story is this: one of my friends messed with the security policies in the domain, and as a result, when he tried to log into the domain controller, he received this error. Next, I will tell you why it is and how to solve it.

The first thing you need to do is restart your computer, go into the BIOS and set boot priorities from the CD-ROM. You can get into the BIOS by pressing F2 or Delete.

Unable to log on to the computer, error The security policies on this computer are configured to display information about the last interactive login activity-02

Save the settings with F10 and click Yes.

Unable to log into the computer, error The security policies on this computer are configured to display information about the last interactive login operation-03

The download will begin from the installation disk, since I have a DC on Windows Server 2008 R2 and boot disk corresponding.

Unable to log on to the computer, error The security policies on this computer are configured to display information about the last interactive login activity-05

go to System Restore.

Unable to log on to the computer, error The security policies on this computer are configured to display information about the last interactive login activity-06

Unable to log into the computer, error The security policies on this computer are configured to display information about the last interactive login activity-07

Open the command line.

Unable to log on to the computer, error The security policies on this computer are configured to display information about the last interactive login activity-08

go to the drive with Windows\system32, in my case it’s drive e: and run the dir command to see the folder structure.

Now you need to rename the Utilman.exe file and replace it with cmd.exe.

ren Utilman.exe Utilman.fake

copy cmd.exe Utilman.exe

Reboot and click the icon in the lower left corner

Open the registry editor with the regedit command.

Let's go there HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System and you need to remove the parameter DisplayLastLogonInfo.

Everything can now be logged in. There is another option, in case there is no parameter in the registry, this is to edit the group policy. We write on the command line,

gpedit.msc

The last interactive input is configured through the object group policy. To report the last online logon to the directory service, you must configure the following setting for a GPO that has domain controllers under its control scope:

"Computer Configuration | Policies | Administrative Templates | Windows components| Options Windows login| Display information about previous login attempts when a user logs in" = "Enabled

Now let's put the Utilman.exe file back in its place. Delete Utilman.exe, copy Utilman.fake to your desktop and rename it Utilman.exe, and then copy it to Windows\system32

Unable to log on to the computer, error The security policies on this computer are configured to display information about the last interactive login operation-18

Share