SFC problem - Keeps asking to insert XP Disc 2

[joydivision]

Got a clients machine which had a rootkit, I removed it, replaced the MBR etc but at the last minute I discovered I could not delete system restore profiles. CC Cleaner said it could not respond to the RPC server, Disk cleanup just did nothing.

The RPC service is enabled, but I have noticed system restore is not, when I try and enable the system restore service it says access denied.

So I tried SFC /scannow. Now I may have mucked this up as I didn't have the Media centre CD, so I used my XP Pro SP3 CD which appeared to work, but then half way through it says insert Disc 2.

I then spent hours looking through my CDs and found the a Media Centre 2005 CD, I used Nlite to slipstream SP3 into it but when I insert that it still keeps saying to insert XP Professional Disc 2.

Anyway round this as I really don't want to N&P?

 

[mraikes]

My understanding is that disk 2 is the media center specific portion, and that disk one is essentially just xp pro.

So if (like virtually everyone) your client isn't actually using it as a media center, you could probably cancel or skip the disk two requests with little consequence.

 

[joydivision]

Thanks,

What about the access denied bit when I try and turn on System Restore?

 

[mraikes]

Have you checked the security settings on the System Volume Information folder? Maybe something was changed there.

 

[joydivision]

Permissions are all fine

 

[parker.casey]

Disk 2 from MCE, and MCE doesn't play nicely with having SP3 slipped into it.

 

[joydivision]

Sorted it now, I used the group policy fix to sort out all the permisions, deleted all the restore profiles manually but it didn't didn't work. The fix which cured it was to reinstall System Restore from the sr.inf and then used the i386 folder from my slip streamed CD.

Now worked perfectly