[Vanadiy777]

Но команды: w32tm /query /status и w32tm /query /status не отрабатывают. »

deem73,
чем они отличаются друг от друга?

[NickM]

Для начала попробуйте перегистрировать службу времени.

Код:

w32tm /unregister

и

Код:

w32tm /register

Покажите результат.

Также покажите результат:

Код:

reg query HKLM\SYSTEM\CurrentControlSet\Services\W32Time

[deem73]

Должно быть w32tm /resync

Код:

C:\Windows\System32>w32tm /unregister
The following error occurred: Access is denied. (0x80070005)

C:\Windows\System32>w32tm /unregister
The following error occurred: Access is denied. (0x80070005)

C:\Windows\System32>w32tm /unregister
The following error occurred: Access is denied. (0x80070005)

C:\Windows\System32>net stop w32time
The Windows Time service is stopping.The service name is invalid.

More help is available by typing NET HELPMSG 2185.


C:\Windows\System32>w32tm /register
The following error occurred: The system cannot find the file specified. (0x80070002)

C:\Windows\System32>reg query HKLM\SYSTEM\CurrentControlSet\Services\W32Time
ERROR: The system was unable to find the specified registry key or value.

C:\Windows\System32>

Служба исчезла. И с реестра тоже исчезли все записи. Я это лечил запуском импортом ветки реестра из другой машины windows 2008r2 (она не в домене.)

[NickM]

Я это лечил запуском импортом ветки реестра из другой машины windows 2008r2 (она не в домене.) »

Начните с проверки системных файлов, это sfc и dism.

Ветки реестра так просто не исчезают и импорт веток реестра это не панацея.

Но надо разбираться, да.

Выполняйте проверку файлов, а Я пока скину Вам права на ветку реестра.

Код:

PS C:\Windows\system32> Get-Acl -Path HKLM:\SYSTEM\CurrentControlSet\Services\W32Time | Format-List

Path   : Microsoft.PowerShell.Core\Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\W32Time
Owner  : NT AUTHORITY\СИСТЕМА
Group  : NT AUTHORITY\СИСТЕМА
Access : NT AUTHORITY\СИСТЕМА Allow  268435456
         NT AUTHORITY\СИСТЕМА Allow  FullControl
         NT AUTHORITY\LOCAL SERVICE Allow  -2147483648
         NT AUTHORITY\LOCAL SERVICE Allow  ReadKey
         NT AUTHORITY\NETWORK SERVICE Allow  ReadKey
         NT AUTHORITY\NETWORK SERVICE Allow  -2147483648
         BUILTIN\Администраторы Allow  FullControl
         BUILTIN\Администраторы Allow  268435456
         BUILTIN\Пользователи Allow  -2147483648
         BUILTIN\Пользователи Allow  ReadKey
         BUILTIN\Операторы настройки сети Allow  ReadKey
         BUILTIN\Операторы настройки сети Allow  -2147483648
Audit  :
Sddl   : O:SYG:SYD:PAI(A;CIIO;GA;;;SY)(A;;KA;;;SY)(A;CIIO;GR;;;LS)(A;;KR;;;LS)(A;;KR;;;NS)(A;CIIO;GR;;;NS)(A;;KA;;;BA)(
         A;CIIO;GA;;;BA)(A;CIIO;GR;;;BU)(A;;KR;;;BU)(A;;KR;;;NO)(A;CIIO;GR;;;NO)

[deem73]

Запустил sfc /scannow. Тут выложу результаты.
ЗЫ: dism с каким параметром давать?

[NickM]

dism с каким параметром давать? »

Код:

dism /online /cleanup-image /scanhealth

[deem73]

Результат работы sfc

Код:

C:\Windows\System32>sfc /scannow

Beginning system scan.  This process will take some time.

Beginning verification phase of system scan.
Verification 25% complete.

Windows Resource Protection could not perform the requested operation.

DISM

Код:

C:\Windows\System32>dism /online /cleanup-image /scanhealth

Deployment Image Servicing and Management tool
Version: 6.1.7600.16385

Error: 5

An error occurred while attempting to start the servicing process for the image located at C:\.
For more information, review the log file.

The DISM log file can be found at C:\Windows\Logs\DISM\dism.log

Свежий dism.log

2022-11-08 13:26:33, Info DISM PID=10984 Successfully loaded the ImageSession at "C:\Windows\System32\Dism" - CDISMManager::LoadImageSession
2022-11-08 13:26:33, Info DISM DISM Provider Store: PID=10984 Found and Initialized the DISM Logger. - CDISMProviderStore::Internal_InitializeLogger
2022-11-08 13:26:33, Info DISM DISM Provider Store: PID=10984 Failed to get and initialize the PE Provider. Continuing by assuming that it is not a WinPE image. - CDISMProviderStore::Final_OnConnect
2022-11-08 13:26:33, Info DISM DISM Provider Store: PID=10984 Finished initializing the Provider Map. - CDISMProviderStore::Final_OnConnect
2022-11-08 13:26:33, Info DISM DISM Provider Store: PID=10984 Getting Provider DISMLogger - CDISMProviderStore::GetProvider
2022-11-08 13:26:33, Info DISM DISM Provider Store: PID=10984 Provider has previously been initialized. Returning the existing instance. - CDISMProviderStore::Internal_GetProvider
2022-11-08 13:26:33, Info DISM DISM Provider Store: PID=10984 Getting Provider DISMLogger - CDISMProviderStore::GetProvider
2022-11-08 13:26:33, Info DISM DISM Provider Store: PID=10984 Provider has previously been initialized. Returning the existing instance. - CDISMProviderStore::Internal_GetProvider
2022-11-08 13:26:33, Info DISM DISM Manager: PID=10984 Successfully created the local image session and provider store. - CDISMManager::CreateLocalImageSession
2022-11-08 13:26:33, Info DISM DISM Provider Store: PID=10984 Getting Provider DISMLogger - CDISMProviderStore::GetProvider
2022-11-08 13:26:33, Info DISM DISM Provider Store: PID=10984 Provider has previously been initialized. Returning the existing instance. - CDISMProviderStore::Internal_GetProvider
2022-11-08 13:26:33, Info DISM DISM.EXE:
2022-11-08 13:26:33, Info DISM DISM.EXE: <----- Starting Dism.exe session ----->
2022-11-08 13:26:33, Info DISM DISM.EXE:
2022-11-08 13:26:33, Info DISM DISM.EXE: Host machine information: OS Version=6.1.7601, Running architecture=amd64, Number of processors=4
2022-11-08 13:26:33, Info DISM DISM.EXE: Executing command line: dism
2022-11-08 13:26:33, Info DISM DISM Provider Store: PID=10984 Getting the collection of providers from a local provider store type. - CDISMProviderStore::GetProviderCollection
2022-11-08 13:26:33, Info DISM DISM Provider Store: PID=10984 Provider has not previously been encountered. Attempting to initialize the provider. - CDISMProviderStore::Internal_GetProvider
2022-11-08 13:26:33, Info DISM DISM Provider Store: PID=10984 Loading Provider from location C:\Windows\System32\Dism\WimProvider.dll - CDISMProviderStore::Internal_GetProvider
2022-11-08 13:26:33, Info DISM DISM Provider Store: PID=10984 Connecting to the provider located at C:\Windows\System32\Dism\WimProvider.dll. - CDISMProviderStore::Internal_LoadProvider
2022-11-08 13:26:33, Info DISM DISM Provider Store: PID=10984 Provider has not previously been encountered. Attempting to initialize the provider. - CDISMProviderStore::Internal_GetProvider
2022-11-08 13:26:33, Info DISM DISM Provider Store: PID=10984 Loading Provider from location C:\Windows\System32\Dism\FolderProvider.dll - CDISMProviderStore::Internal_GetProvider
2022-11-08 13:26:33, Info DISM DISM Provider Store: PID=10984 Connecting to the provider located at C:\Windows\System32\Dism\FolderProvider.dll. - CDISMProviderStore::Internal_LoadProvider
2022-11-08 13:26:33, Info DISM DISM Provider Store: PID=10984 Provider has not previously been encountered. Attempting to initialize the provider. - CDISMProviderStore::Internal_GetProvider
2022-11-08 13:26:33, Info DISM DISM Provider Store: PID=10984 Loading Provider from location C:\Windows\System32\Dism\CompatProvider.dll - CDISMProviderStore::Internal_GetProvider
2022-11-08 13:26:33, Info DISM DISM Provider Store: PID=10984 Connecting to the provider located at C:\Windows\System32\Dism\CompatProvider.dll. - CDISMProviderStore::Internal_LoadProvider
2022-11-08 13:26:33, Info DISM DISM.EXE: Got the collection of providers. Now enumerating them to build the command table.
2022-11-08 13:26:33, Info DISM DISM.EXE: Attempting to add the commands from provider: WimManager
2022-11-08 13:26:33, Info DISM DISM.EXE: Getting the help information collection for the provider: WimManager.
2022-11-08 13:26:33, Info DISM DISM.EXE: Registering information from the help collection from provider: WimManager.
2022-11-08 13:26:33, Info DISM DISM.EXE: Succesfully registered the Help Item with topic(wimcommands) and category(localtoplevelhelp) for the provider(WimManager).
2022-11-08 13:26:33, Info DISM DISM.EXE: Succesfully registered the Help Item with topic(cleanup-wim) and category(wimcommands) for the provider(WimManager).
2022-11-08 13:26:33, Info DISM DISM.EXE: Succesfully registered the Help Item with topic(remount-wim) and category(wimcommands) for the provider(WimManager).
2022-11-08 13:26:33, Info DISM DISM.EXE: Succesfully registered the Help Item with topic(mount-wim) and category(wimcommands) for the provider(WimManager).
2022-11-08 13:26:33, Info DISM DISM.EXE: Succesfully registered the Help Item with topic(unmount-wim) and category(wimcommands) for the provider(WimManager).
2022-11-08 13:26:33, Info DISM DISM.EXE: Succesfully registered the Help Item with topic(commit-wim) and category(wimcommands) for the provider(WimManager).
2022-11-08 13:26:33, Info DISM DISM.EXE: Succesfully registered the Help Item with topic(get-wiminfo) and category(wimcommands) for the provider(WimManager).
2022-11-08 13:26:33, Info DISM DISM.EXE: Succesfully registered the Help Item with topic(get-mountedwiminfo) and category(wimcommands) for the provider(WimManager).
2022-11-08 13:26:33, Info DISM DISM.EXE: Attempting to add the commands from provider: FolderManager
2022-11-08 13:26:33, Info DISM DISM.EXE: Attempting to add the commands from provider: DISM Log Provider
2022-11-08 13:26:33, Info DISM DISM.EXE: Attempting to add the commands from provider: Compatibility Manager
2022-11-08 13:26:33, Info DISM DISM.EXE: Getting the help information collection for the provider: Compatibility Manager.
2022-11-08 13:26:33, Info DISM DISM.EXE: Image session has been closed. Reboot required=no.
2022-11-08 13:26:33, Info DISM DISM.EXE:
2022-11-08 13:26:33, Info DISM DISM.EXE: <----- Ending Dism.exe session ----->
2022-11-08 13:26:33, Info DISM DISM.EXE:
2022-11-08 13:26:33, Info DISM DISM Image Session: PID=10984 Disconnecting the provider store - CDISMImageSession::Final_OnDisconnect
2022-11-08 13:26:33, Info DISM DISM Provider Store: PID=10984 Disconnecting Provider: WimManager - CDISMProviderStore::Internal_DisconnectProvider
2022-11-08 13:26:33, Info DISM DISM Provider Store: PID=10984 Disconnecting Provider: FolderManager - CDISMProviderStore::Internal_DisconnectProvider
2022-11-08 13:26:33, Info DISM DISM Provider Store: PID=10984 Found the OSServices. Waiting to finalize it until all other providers are unloaded. - CDISMProviderStore::Final_OnDisconnect
2022-11-08 13:26:33, Info DISM DISM Provider Store: PID=10984 Disconnecting Provider: Compatibility Manager - CDISMProviderStore::Internal_DisconnectProvider
2022-11-08 13:26:33, Info DISM DISM Provider Store: PID=10984 Releasing the local reference to DISMLogger. Stop logging. - CDISMProviderStore::Internal_DisconnectProvider
2022-11-08 14:38:00, Info DISM PID=9188 Scratch directory set to 'C:\Users\ADMINI~1\AppData\Local\Temp\1\'. - CDISMManager::put_ScratchDir
2022-11-08 14:38:00, Info DISM PID=9188 Successfully loaded the ImageSession at "C:\Windows\System32\Dism" - CDISMManager::LoadImageSession
2022-11-08 14:38:00, Info DISM DISM Provider Store: PID=9188 Found and Initialized the DISM Logger. - CDISMProviderStore::Internal_InitializeLogger
2022-11-08 14:38:00, Info DISM DISM Provider Store: PID=9188 Failed to get and initialize the PE Provider. Continuing by assuming that it is not a WinPE image. - CDISMProviderStore::Final_OnConnect
2022-11-08 14:38:00, Info DISM DISM Provider Store: PID=9188 Finished initializing the Provider Map. - CDISMProviderStore::Final_OnConnect
2022-11-08 14:38:00, Info DISM DISM Provider Store: PID=9188 Getting Provider DISMLogger - CDISMProviderStore::GetProvider
2022-11-08 14:38:00, Info DISM DISM Provider Store: PID=9188 Provider has previously been initialized. Returning the existing instance. - CDISMProviderStore::Internal_GetProvider
2022-11-08 14:38:00, Info DISM DISM Provider Store: PID=9188 Getting Provider DISMLogger - CDISMProviderStore::GetProvider
2022-11-08 14:38:00, Info DISM DISM Provider Store: PID=9188 Provider has previously been initialized. Returning the existing instance. - CDISMProviderStore::Internal_GetProvider
2022-11-08 14:38:00, Info DISM DISM Manager: PID=9188 Successfully created the local image session and provider store. - CDISMManager::CreateLocalImageSession
2022-11-08 14:38:00, Info DISM DISM Provider Store: PID=9188 Getting Provider DISMLogger - CDISMProviderStore::GetProvider
2022-11-08 14:38:00, Info DISM DISM Provider Store: PID=9188 Provider has previously been initialized. Returning the existing instance. - CDISMProviderStore::Internal_GetProvider
2022-11-08 14:38:00, Info DISM DISM.EXE:
2022-11-08 14:38:00, Info DISM DISM.EXE: <----- Starting Dism.exe session ----->
2022-11-08 14:38:00, Info DISM DISM.EXE:
2022-11-08 14:38:00, Info DISM DISM.EXE: Host machine information: OS Version=6.1.7601, Running architecture=amd64, Number of processors=4
2022-11-08 14:38:00, Info DISM DISM.EXE: Executing command line: dism /online /cleanup-image /scanhealth
2022-11-08 14:38:00, Info DISM DISM Provider Store: PID=9188 Getting Provider FolderManager - CDISMProviderStore::GetProvider
2022-11-08 14:38:00, Info DISM DISM Provider Store: PID=9188 Provider has not previously been encountered. Attempting to initialize the provider. - CDISMProviderStore::Internal_GetProvider
2022-11-08 14:38:00, Info DISM DISM Provider Store: PID=9188 Loading Provider from location C:\Windows\System32\Dism\FolderProvider.dll - CDISMProviderStore::Internal_GetProvider
2022-11-08 14:38:00, Info DISM DISM Provider Store: PID=9188 Connecting to the provider located at C:\Windows\System32\Dism\FolderProvider.dll. - CDISMProviderStore::Internal_LoadProvider
2022-11-08 14:38:00, Info DISM DISM Provider Store: PID=9188 Getting Provider FolderManager - CDISMProviderStore::GetProvider
2022-11-08 14:38:00, Info DISM DISM Provider Store: PID=9188 Provider has previously been initialized. Returning the existing instance. - CDISMProviderStore::Internal_GetProvider
2022-11-08 14:38:02, Error DISM DismHostLib: Failed to create dismhost.exe servicing process.
2022-11-08 14:38:02, Error DISM DISM Manager: PID=9188 Failed to create Dism Image Session in host. - CDISMManager::LoadImageSession(hr:0x80070005)
2022-11-08 14:38:02, Warning DISM DISM Manager: PID=9188 A problem ocurred loading the image session. Retrying... - CDISMManager::CreateImageSession(hr:0x80070005)
2022-11-08 14:38:02, Error DISM DismHostLib: Failed to create dismhost.exe servicing process.
2022-11-08 14:38:02, Error DISM DISM Manager: PID=9188 Failed to create Dism Image Session in host. - CDISMManager::LoadImageSession(hr:0x80070005)
2022-11-08 14:38:02, Error DISM DISM Manager: PID=9188 Failed to load the image session from the temporary location: C:\Users\ADMINI~1\AppData\Local\Temp\1\A1B98AE2-C718-43E8-A597-F3E1B7CF099C - CDISMManager::CreateImageSession(hr:0x80070005)
2022-11-08 14:38:02, Error DISM DISM.EXE: Could not load the image session. HRESULT=80070005
2022-11-08 14:38:02, Error DISM DISM.EXE: Unable to start the servicing process for the image at 'C:\'. HRESULT=80070005
2022-11-08 14:38:02, Info DISM DISM.EXE: Image session has been closed. Reboot required=no.
2022-11-08 14:38:02, Info DISM DISM.EXE:
2022-11-08 14:38:02, Info DISM DISM.EXE: <----- Ending Dism.exe session ----->
2022-11-08 14:38:02, Info DISM DISM.EXE:
2022-11-08 14:38:02, Info DISM DISM Image Session: PID=9188 Disconnecting the provider store - CDISMImageSession::Final_OnDisconnect
2022-11-08 14:38:02, Info DISM DISM Provider Store: PID=9188 Disconnecting Provider: FolderManager - CDISMProviderStore::Internal_DisconnectProvider
2022-11-08 14:38:02, Info DISM DISM Provider Store: PID=9188 Found the OSServices. Waiting to finalize it until all other providers are unloaded. - CDISMProviderStore::Final_OnDisconnect
2022-11-08 14:38:02, Info DISM DISM Provider Store: PID=9188 Releasing the local reference to DISMLogger. Stop logging. - CDISMProviderStore::Internal_DisconnectProvider

[NickM]

Результат »

Хех, совсем не радужно, у Вас таки и на проверки не хватает прав..

Возможно, что и с самой системой не всё так хорошо, как Вам кажется.

Может какая предыстория у Неё имеется и о которой Вы умалчиваете?

Вместо этой выжимки, лучше прикрепите содержимое директории:

Код:

C:\Windows\Logs\CBS\

Когда наблюдается проблема с правами доступа, иногда помогает логгирование с помощью "Process Monitor".

а %Temp% у Вас стандартный или куда перенесён?

а у

Код:

C:\Users\ADMINI~1\AppData\Local\Temp\

какие права доступа?

UPD:
Как вариант, что бы исключить возможную ошибку %Temp% директории, использовать параметр:

Код:

/ScratchDir             - Задает путь к каталогу временных файлов.

[deem73]

директория CBS

Код:

C:\Windows\System32>dir C:\Windows\Logs\CBS\
 Volume in drive C has no label.
 Volume Serial Number is CE93-9FC1

 Directory of C:\Windows\Logs\CBS

06.09.2022  15:53    <DIR>          .
06.09.2022  15:53    <DIR>          ..
26.10.2022  09:28        18*260*590 CBS.log
24.10.2020  14:45         1*484*733 CbsPersist_20210116111812.cab
22.01.2021  10:42         1*386*396 CbsPersist_20210322071311.cab
26.05.2021  14:55         1*331*623 CbsPersist_20210526214300.cab
04.08.2021  21:24         1*015*030 CbsPersist_20210805034906.cab
02.09.2021  09:23         7*882*869 CbsPersist_20220906135231.cab
24.10.2020  11:39         1*276*172 DeepClean.log
08.11.2022  13:31               444 FilterList.log
               8 File(s)     32*637*857 bytes
               2 Dir(s)  164*417*130*496 bytes free

Директория %temp%

Код:

C:\Windows\System32>dir %temp%
 Volume in drive C has no label.
 Volume Serial Number is CE93-9FC1

 Directory of C:\Users\ADMINI~1\AppData\Local\Temp\1

08.11.2022  14:38    <DIR>          .
08.11.2022  14:38    <DIR>          ..
07.11.2022  15:58    <DIR>          McAfeeLogs
28.10.2022  13:40    <DIR>          msohtmlclip
07.11.2022  12:55    <DIR>          msohtmlclip1
26.10.2022  11:43    <DIR>          WPDNSE
               0 File(s)              0 bytes
               6 Dir(s)  164*417*064*960 bytes free

Права доступа обыкновенные: Сам пользователь AdminXXX, группа администраторы, и SYSTEM. Права полные.

Про /ScratchDir не совсем понятно с какой командой применять?


Предыстория нехорошая. Была два года назад атака вируса-криптора. Сервак был остановлен. Слетевшая винда восстановлена, все основные и главные глюки были исправлены. После чего на винду были накатаны все обновы взятые из сайта симпликс. Осталось по мелочам, которое добиваю по мере сил и времени. По уму, проще на это всё забить, и накатить винду по новой. Но на винде дофига всего крутится и сидеть ночами не хочется. Хочется точечно взять и поисправлять сбоящие элементы. По правам доступа интересно, потому, что есть и другие глюки - например очень медленная авторизация пользователя в домене, если его учетка не закэширована на рабочей станции.