To reference this old post:
https://www.techrepublic.com.com/5208-7343-0.html?forumID=101&threadID=253233
I had a nasty PAV malware on a friends computer. It appeared to have screwed up the permission all around the board. I was able to remove the junky files and reg keys and re-enable the UAC effectively cleaning the machine. However, the same scenario still exists as in the referenced post above. Any standard user that logs in seems to not have permission to run explorer.exe or any other neccessary service with the exception of the following:
csrss.exe
dwm.exe
taskmgr.exe
winlogon.exe
According to MS this happens when certain users are removed from the users group. I added them via
net localgroup users user /add
to no avail.
Any suggestions???
