remove runonce.exe from server 2012 R2

When we boot up a test Windows Server 2012 R2 we get the alternative shell command - runonce.exe.  We can't seem to get into the GUI.  We can run notepad, powershell, Task Manager but not Explorer, MMC, etc.  We tried to delete/rename the runonce.exe but it says we don't have sufficient rights - we are logged in as administrator.  We have tried the attrib command but the file is marked as A and we can't seem to change that attribute.  Any suggestions?  Thanks in advance.
lineonecorpAsked:
Who is Participating?

[Product update] Infrastructure Analysis Tool is now available with Business Accounts.Learn More

x
I wear a lot of hats...

"The solutions and answers provided on Experts Exchange have been extremely helpful to me over the last few years. I wear a lot of hats - Developer, Database Administrator, Help Desk, etc., so I know a lot of things but not a lot about one thing. Experts Exchange gives me answers from people who do know a lot about one thing, in a easy to use platform." -Todd S.

Cliff GaliherCommented:
Sounds like you are running minshell, it was a minimal shell in 2012 R2, meant to have a smaller security footprint and require less patching.

If you want the full GUI, you have to install it. In 2012, that's a powershell command.
0
JohnBusiness Consultant (Owner)Commented:
If you installed the GUI, then use Autoruns (Microsoft Sysinternals) to remove the runonce entry .
0
Cliff GaliherCommented:
Since explorer and mmc won't open, I don't think the OP installed the GUI. Minshell will run notepad and basic apps, but not mmc or explorer. Behavior is consistent with minshell.
0
How the Cloud Can Help You as an MSSP

Today, every Managed Security Service Provider (MSSP) needs a platform to deliver effective and efficient security-as-a-service to their customers. Scale, elasticity and profitability are a few of the many features that a Cloud platform offers. Register today to learn more!

lineonecorpAuthor Commented:
Thanks for the quick response.  It was all ok for years with GUI.  It's a test computer so a lot of people fool around with it.  It's possible somebody lately installed minshell.  If so how do I get rid of it.
0
Cliff GaliherCommented:
You don't install minshell over the GUI. Think of it like nesting dolls. There is server core. Then you can install minshell which is bigger and encompasses core. Then you can install the full GUI, which is bigger covers the minshell.

If someone was messing around then they UNINSTALLED the GUI. So you don't get rid of minshell to fix the problem... That'd leave you with server core.  You instead reinstall the GUI. As I said in my first response.
0

Experts Exchange Solution brought to you by

Your issues matter to us.

Facing a tech roadblock? Get the help and guidance you need from experienced professionals who care. Ask your question anytime, anywhere, with no hassle.

Start your 7-day free trial
lineonecorpAuthor Commented:
Thanks guys,

GUI is back
0
lineonecorpAuthor Commented:
GUI is back on the server
0
JohnBusiness Consultant (Owner)Commented:
Thanks for the update.
0
It's more than this solution.Get answers and train to solve all your tech problems - anytime, anywhere.Try it for free Edge Out The Competitionfor your dream job with proven skills and certifications.Get started today Stand Outas the employee with proven skills.Start learning today for free Move Your Career Forwardwith certification training in the latest technologies.Start your trial today
Powershell

From novice to tech pro — start learning today.