Solved

How to Restore LSA part of XP Registry without a Repair Install

Posted on 2006-06-16
4
344 Views
Last Modified: 2008-01-09
I fix PCs for a living. My customer (running Windows XP Home SP2) just sent me this:

"I deleted some entries from my registry using regedit ....The entries were in folders named "LSA".    
 
Now when I try to start my computer (HP Pavilion Laptop) I get the message "lsass.exe - system error:  Object Name not found""

Is there any way to fix this (assuming I have a Windows XP Home SP2 CD) WITHOUT doing a repair install. As repair installs from a Retail CD (not the one that came with the PC; he can't find it) only work about half the time in my experience. Even from his CD (he is trying to find it) repair installs do not always work. Also some HP PCs come with Recovery CDs that can ONLY be used to reformat and return PC to state it was bought in; ie they can NOT be used for Repair installs.

(1)  Is there a way to fix this SPECIFIC WELL DEFINED PROBLEM from the Recovery Console that one gets to by booting from the CD and typing R at the first prompt.

(2) is there some way to run sfc /scannow here. To my knowledge this command only runs after a PC fully boots to the desktop. I KNOW it will not run from the recovery console BTW.

(3) Any other way to fix this short of a repair install?

Regards-Mike
0
Comment
Question by:mgross333
4 Comments
 
LVL 15

Accepted Solution

by:
venom96737 earned 500 total points
Comment Utility
the answer to question one is Yes what you are going to do is restore the registy hives located in the system volume information "Hoping they have system restore turned on" to a point before they messed with the registy.  commands are as follows starting at c:\windows
cd \
enter
cd system~1
enter
cd _resto~1
enter
dir
 inside it there are several folders named RP1, RP2. These are restore points. RP1 is the oldest restore point.

so say you want to use rp3

cd rp3  
enter
cd snapshot
enter

copy _registry_machine_system c:\windows\system32\config\system
copy _registry_machine_software c:\windows\system32\config\software

The following commands are most of the time optional however the process might not work if they are not executed

copy _registry_machine_security c:\windows\system32\config\security
copy _registry_machine_sam c:\windows\system32\config\sam
copy _registry_user_.default c:\windows\system32\config\default


Type exit to reboot the system. Start the computer normally

question 2 sfc /scannow will not help you in this situation as it is a corrtupt registry all that command does is scans the system files in system 32 folder to make sure they match up with what the default value is.

and question 3 ive answered
0
 
LVL 69

Expert Comment

by:Merete
Comment Utility
If you have not successfully logged on after the problem first occurred, press the F8 key when the operating system selection page is displayed or before the computer starts Windows. Select the Last Known Good Configuration option.

in safemode run a scan for corrupt files. At start run type in cmd then sfc /scannow
also you could try running the chkdsk /r from recovery console.
or chkdsk /f
fixboot C:
you will need an xppro cd.

You could also uninstall xpsp2 since this is just an add on and any xpsp2 cd can be used, it may help repair the missing files.
You could also slave the hdd.

But running a recovery is really the best way. It should be ok so long as you hgave his key.
If you need his product key
The Magical Jelly Bean Keyfinder
http://www.magicaljellybean.com/keyfinder.shtml


0

Featured Post

Do You Know the 4 Main Threat Actor Types?

Do you know the main threat actor types? Most attackers fall into one of four categories, each with their own favored tactics, techniques, and procedures.

Join & Write a Comment

There are 2 things you must have in order to connect to the internet behind a router, The "Gateway IP" of the router, which is usually something like 192.168.xxx.1, I've seen routers with default values of: 192.168.0.1, 192.168.1.1, 192.168.11.1, …
If you have done a reformat of your hard drive and proceeded to do a successful Windows XP installation, you may notice that a choice between two operating systems when you start up the machine. Here is how to get rid of this: Click Start Clic…
Get a first impression of how PRTG looks and learn how it works.   This video is a short introduction to PRTG, as an initial overview or as a quick start for new PRTG users.
This demo shows you how to set up the containerized NetScaler CPX with NetScaler Management and Analytics System in a non-routable Mesos/Marathon environment for use with Micro-Services applications.

772 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

10 Experts available now in Live!

Get 1:1 Help Now