如何解决PE的Administrator文件夹打不开的问题

martin313

最近折腾 win11.22000.2538 的 双用户（System与Administrator）PE，发现附图中的Administrator文件夹打不开，请问如何解决？

存在2个问题：一是Administrator文件夹打不开，文件夹默认位置错误；二是在Administrator用户下，无法用bitlocker，而System用户下正常可用。

故障现象：双击一闪而过

用 AB Commander （第三方文件浏览器）双击此Administrator文件夹，提示“系统找不到指定文件”

1.缺文件？
2.缺注册表？
3.缓存不够？

今天彻底解决这个“顽疾”，办法见28、30楼！

2010hook

右键查看属性的“安全”页，看看有没有当前用户的访问权限！

martin313

2010hook 发表于 2023-11-2 14:52
右键查看属性的“安全”页，看看有没有当前用户的访问权限！

没有“属性”

sairen139

AB Commander的界面和你截图一样？和原生资源管理器这么像？？

martin313

sairen139 发表于 2023-11-2 17:45
AB Commander的界面和你截图一样？和原生资源管理器这么像？？

我的AB Commander的界面是这样的

rbwrbw

都不怎么玩windos了

martin313

rbwrbw 发表于 2023-11-2 18:50
都不怎么玩windos了

玩手机了吧
手机屏幕小，还是少玩为好

nathan6498

学习学习

martin313

尝试了一下，好像也不是缺注册表的原因

难道是权限不够？如何赋予权限？

martin313

好像也不是权限问题，用春哥附体打开，提示“系统找不到指定文件”，不知缺啥文件？

martin313

用以下方法，也不行：

用管理员取得administrator文件夹的所有权

新建记事本文件输入以下内容 并把文件后缀改成 .reg 然后双击 确定

Windows Registry Editor Version 5.00
[HKEY_CLASSES_ROOT\*\shell\runas]
@="管理员取得所有权"
"NoWorkingDirectory"=""[HKEY_CLASSES_ROOT\*\shell\runas\command]
@="cmd.exe /c takeown /f \"%1\" && icacls \"%1\" /grant administrators:F"
"IsolatedCommand"="cmd.exe /c takeown /f \"%1\" && icacls \"%1\" /grant administrators:F"[HKEY_CLASSES_ROOT\exefile\shell\runas2]
@="管理员取得所有权"

smine

martin313 发表于 2023-11-2 14:59
没有“属性”

选择创建快捷方式，把创建好的快捷方式文件发出来

martin313

smine 发表于 2023-11-4 15:46
选择创建快捷方式，把创建好的快捷方式文件发出来

截图可以吗

smine

martin313 发表于 2023-11-4 16:02
截图可以吗

我晚上看看

martin313

smine 发表于 2023-11-4 16:12
我晚上看看

谢谢
快捷键文件也上传了：https://www.123pan.com/s/jKNSVv-FPutv.html

smine

martin313 发表于 2023-11-4 16:20
谢谢
快捷键文件也上传了：https://www.123pan.com/s/jKNSVv-FPutv.html

你这个快捷方式的目标很奇怪，暂时没有好办法

martin313

smine 发表于 2023-11-4 20:25
你这个快捷方式的目标很奇怪，暂时没有好办法

哦
谢谢

那只能暂时搁置

martin313

smine 发表于 2023-11-4 20:25
你这个快捷方式的目标很奇怪，暂时没有好办法

这2天还碰到一个奇怪的事情，制作PE相同的方案，简体中文版可以实现system与admin双用户任意切换，但繁体中文版与英文版PE，死活不行，文件列表都几乎一样，也就是语言包的文件夹名称不一样，zh-cn、zh-tw、en-us的区别，咋就不行，很是奇怪！！！

启动到system都正常，但繁体版与英文版切换到admin就进不了桌面，黑屏显示，鼠标一直闪！

martin313

繁体版PE不能切换至Admin用户，好像是 logonui.exe 报错的原因

2010hook

martin313 发表于 2023-11-2 14:59
没有“属性”

我想起来了，是缺少用户变量注册表值！

martin313

2010hook 发表于 2023-11-5 21:02
我想起来了，是缺少用户变量注册表值！

这个正常系统里，也是没有属性的

martin313

2010hook 发表于 2023-11-5 21:02
我想起来了，是缺少用户变量注册表值！

刚刚测试了

加了环境变量，也无效

martin313

smine 发表于 2023-11-4 20:25
你这个快捷方式的目标很奇怪，暂时没有好办法

请教老大，PE下运行VBS脚本文件的话，补充以下文件，是否足够：

"Program Files"\"Common Files"\System\ado\msado15.dll
Windows\System32\vbscript.dll
Windows\System32\zh-CN\vbscript.dll.mui

无犹启动

学习学习

tilltotell007

学习了

martin313

这个问题，至今还未解决

难道是权限问题？

martin313

2010hook 发表于 2023-11-5 21:02
我想起来了，是缺少用户变量注册表值！

怎么补？

martin313

最近测试这个自制的双用户PE，发现不仅仅存在Administrator系统文件夹打不开的问题，还存在A用户下，Bitlocker无法正常使用的问题。于是今天下决心解决，经过与论坛win10全能版的注册表对比，一番折腾后，总算彻底解决！方法如下：

一、补充文件
WindowsTrustedRT.sys        
WindowsTrustedRTProxy.inf        
WindowsTrustedRTProxy.sys        

二、补充注册表（其中有些注册表是多余的，不管那么多了，胡子眉毛一把抓，反正不算多）
call RegCopy "HKLM\System\ControlSet001\Services\WindowsTrustedRT"
call RegCopy "HKLM\System\ControlSet001\Services\WindowsTrustedRTProxy"
call RegCopy "HKLM\System\DriverDatabase\DeviceIds\{4d36e97d-e325-11ce-bfc1-08002be10318}"
call RegCopy "HKLM\System\DriverDatabase\DeviceIds\{4E815EE1-20F8-41EF-8CFF-3C283F02D722}"
call RegCopy "HKLM\System\DriverDatabase\DriverInfFiles\WindowsTrustedRTProxy.inf"

call RegCopy "HKLM\System\ControlSet001\Services\ahcache"
call RegCopy "HKLM\System\ControlSet001\Services\AWEAlloc"
call RegCopy "HKLM\System\ControlSet001\Services\BDESVC"
call RegCopy "HKLM\System\ControlSet001\Services\Beep"
call RegCopy "HKLM\System\ControlSet001\Services\Browser"
call RegCopy "HKLM\System\ControlSet001\Services\camsvc"
call RegCopy "HKLM\System\ControlSet001\Services\CertPropSvc"
call RegCopy "HKLM\System\ControlSet001\Services\CompositeBus"
call RegCopy "HKLM\System\ControlSet001\Services\DisplayEnhancementService"
call RegCopy "HKLM\System\ControlSet001\Services\Dnscache"
call RegCopy "HKLM\System\ControlSet001\Services\dot3svc"
call RegCopy "HKLM\System\ControlSet001\Services\Eaphost"
call RegCopy "HKLM\System\ControlSet001\Services\EventLog"
call RegCopy "HKLM\System\ControlSet001\Services\EventSystem"
call RegCopy "HKLM\System\ControlSet001\Services\fdPHost"
call RegCopy "HKLM\System\ControlSet001\Services\FDResPub"
call RegCopy "HKLM\System\ControlSet001\Services\FontCache"
call RegCopy "HKLM\System\ControlSet001\Services\FrameServer"
call RegCopy "HKLM\System\ControlSet001\Services\gpsvc"
call RegCopy "HKLM\System\ControlSet001\Services\HfcDisableService"
call RegCopy "HKLM\System\ControlSet001\Services\hidspi"
call RegCopy "HKLM\System\ControlSet001\Services\HTTP"
call RegCopy "HKLM\System\ControlSet001\Services\iaStorAC"
call RegCopy "HKLM\System\ControlSet001\Services\iaStorAfs"
call RegCopy "HKLM\System\ControlSet001\Services\iaStorAfsService"
call RegCopy "HKLM\System\ControlSet001\Services\intelpep"
call RegCopy "HKLM\System\ControlSet001\Services\IpFilterDriver"
call RegCopy "HKLM\System\ControlSet001\Services\iphlpsvc"
call RegCopy "HKLM\System\ControlSet001\Services\IPNAT"
call RegCopy "HKLM\System\ControlSet001\Services\KeyIso"
call RegCopy "HKLM\System\ControlSet001\Services\LanmanServer"
call RegCopy "HKLM\System\ControlSet001\Services\LanmanWorkstation"
call RegCopy "HKLM\System\ControlSet001\Services\lltdio"
call RegCopy "HKLM\System\ControlSet001\Services\LPDSVC"
call RegCopy "HKLM\System\ControlSet001\Services\monitor"
call RegCopy "HKLM\System\ControlSet001\Services\mpssvc"
call RegCopy "HKLM\System\ControlSet001\Services\MRxDAV"
call RegCopy "HKLM\System\ControlSet001\Services\mrxsmb10"
call RegCopy "HKLM\System\ControlSet001\Services\MsBridge"
call RegCopy "HKLM\System\ControlSet001\Services\mshidumdf"
call RegCopy "HKLM\System\ControlSet001\Services\MSiSCSI"
call RegCopy "HKLM\System\ControlSet001\Services\MSKSSRV"
call RegCopy "HKLM\System\ControlSet001\Services\MsLldp"
call RegCopy "HKLM\System\ControlSet001\Services\MSPCLOCK"
call RegCopy "HKLM\System\ControlSet001\Services\MSPQM"
call RegCopy "HKLM\System\ControlSet001\Services\MSTEE"
call RegCopy "HKLM\System\ControlSet001\Services\NcdAutoSetup"
call RegCopy "HKLM\System\ControlSet001\Services\NdisCap"
call RegCopy "HKLM\System\ControlSet001\Services\NdisImPlatform"
call RegCopy "HKLM\System\ControlSet001\Services\NdisImPlatformMp"
call RegCopy "HKLM\System\ControlSet001\Services\NdisVirtualBus"
call RegCopy "HKLM\System\ControlSet001\Services\Netlogon"
call RegCopy "HKLM\System\ControlSet001\Services\npsvctrig"
call RegCopy "HKLM\System\ControlSet001\Services\PolicyAgent"
call RegCopy "HKLM\System\ControlSet001\Services\ProfSvc"
call RegCopy "HKLM\System\ControlSet001\Services\Ramdisk"
call RegCopy "HKLM\System\ControlSet001\Services\RasAuto"
call RegCopy "HKLM\System\ControlSet001\Services\RasMan"
call RegCopy "HKLM\System\ControlSet001\Services\rdpbus"
call RegCopy "HKLM\System\ControlSet001\Services\RDPDR"
call RegCopy "HKLM\System\ControlSet001\Services\RDPNP"
call RegCopy "HKLM\System\ControlSet001\Services\RDPUDD"
call RegCopy "HKLM\System\ControlSet001\Services\RdpVideoMiniport"
call RegCopy "HKLM\System\ControlSet001\Services\RemoteAccess"
call RegCopy "HKLM\System\ControlSet001\Services\rspndr"
call RegCopy "HKLM\System\ControlSet001\Services\RstMwService"
call RegCopy "HKLM\System\ControlSet001\Services\seclogon"
call RegCopy "HKLM\System\ControlSet001\Services\SENS"
call RegCopy "HKLM\System\ControlSet001\Services\SessionEnv"
call RegCopy "HKLM\System\ControlSet001\Services\SharedAccess"
call RegCopy "HKLM\System\ControlSet001\Services\ShellHWDetection"
call RegCopy "HKLM\System\ControlSet001\Services\smbdirect"
call RegCopy "HKLM\System\ControlSet001\Services\Spooler"
call RegCopy "HKLM\System\ControlSet001\Services\SSDPSRV"
call RegCopy "HKLM\System\ControlSet001\Services\SstpSvc"
call RegCopy "HKLM\System\ControlSet001\Services\stisvc"
call RegCopy "HKLM\System\ControlSet001\Services\swprv"

call RegCopy "HKLM\System\ControlSet001\Services\TsUsbGD"
call RegCopy "HKLM\System\ControlSet001\Services\tsusbhub"
call RegCopy "HKLM\System\ControlSet001\Services\tunnel"
call RegCopy "HKLM\System\ControlSet001\Services\UcmCx0101"
call RegCopy "HKLM\System\ControlSet001\Services\UcmTcpciCx0101"
call RegCopy "HKLM\System\ControlSet001\Services\UcmUcsiAcpiClient"
call RegCopy "HKLM\System\ControlSet001\Services\UcmUcsiCx0101"
call RegCopy "HKLM\System\ControlSet001\Services\UmRdpService"
call RegCopy "HKLM\System\ControlSet001\Services\upnphost"
call RegCopy "HKLM\System\ControlSet001\Services\usbaudio2"
call RegCopy "HKLM\System\ControlSet001\Services\usbcir"
call RegCopy "HKLM\System\ControlSet001\Services\usbehci"
call RegCopy "HKLM\System\ControlSet001\Services\usbprint"
call RegCopy "HKLM\System\ControlSet001\Services\UserManager"
call RegCopy "HKLM\System\ControlSet001\Services\vmbus"
call RegCopy "HKLM\System\ControlSet001\Services\W32Time"
call RegCopy "HKLM\System\ControlSet001\Services\wcncsvc"
call RegCopy "HKLM\System\ControlSet001\Services\WdmCompanionFilter"
call RegCopy "HKLM\System\ControlSet001\Services\WebClient"
call RegCopy "HKLM\System\ControlSet001\Services\WerSvc"
call RegCopy "HKLM\System\ControlSet001\Services\Winsock"
call RegCopy "HKLM\System\ControlSet001\Services\WinSock2"
call RegCopy "HKLM\System\ControlSet001\Services\WlanSvc"
call RegCopy "HKLM\System\ControlSet001\Services\wmiApSrv"
call RegCopy "HKLM\System\ControlSet001\Services\WMPNetworkSvc"
call RegCopy "HKLM\System\ControlSet001\Services\WudfPf"
call RegCopy "HKLM\System\ControlSet001\Services\WUDFWpdFs"

martin313

至此，我所关心关注的有关PE的所有问题，全部解决了，剩下点点小瑕疵就忽略了！

martin313

注册表可进一步减少为如下：

call RegCopy "HKLM\System\ControlSet001\Services\WindowsTrustedRT"
call RegCopy "HKLM\System\ControlSet001\Services\WindowsTrustedRTProxy"
call RegCopy "HKLM\System\DriverDatabase\DeviceIds\{4d36e97d-e325-11ce-bfc1-08002be10318}"
call RegCopy "HKLM\System\DriverDatabase\DeviceIds\{4E815EE1-20F8-41EF-8CFF-3C283F02D722}"
call RegCopy "HKLM\System\DriverDatabase\DriverInfFiles\WindowsTrustedRTProxy.inf"

call RegCopy "HKLM\System\ControlSet001\Services\BDESVC"
call RegCopy "HKLM\System\ControlSet001\Services\Netlogon"
call RegCopy "HKLM\System\ControlSet001\Services\ProfSvc"
call RegCopy "HKLM\System\ControlSet001\Services\seclogon"
call RegCopy "HKLM\System\ControlSet001\Services\UserManager"