CHKDSK incorrectly identifies and deletes in-use security descript

Windows XP Support >> CHKDSK incorrectly identifies and deletes in-use security descript I was troubleshooting Speed Disk (Norton Utilities defragmenter) to determine
why it would not run on the scheduler.

Here is the event log entry:

Event Type: Error
Event Source: Speed Disk service
Event Category: None
Event ID: 1027
Date: 9/25/2005
Time: 1:08:20 PM
User: N/A
Computer: DGQ28531
Description:
Optimization of Drive C: not started: Drive integrity check failed. Please
run CHKDSK /F before optimizing this drive
--end of event logâ??

And so I ran chkdsk first and Speed Disk started OK. It looks like I have to
run chkdsk /F prior to every time I want to run Speed Disk. Not being very
happy with that arrangement I decided to look into what chkdsk was finding
and fixing. I found some chkdsk associated errors in the event log. Here is
one example of what it found and fixed:

Event Type: Information
Event Source: Winlogon
Event Category: None
Event ID: 1001
Date: 9/27/2005
Time: 1:12:37 PM
User: N/A
Computer: ABC12345
Description:
Checking file system on C:
The type of the file system is NTFS.
Volume label is Main File System.
Cleaning up minor inconsistencies on the drive.
Cleaning up 12 unused index entries from index $SII of file 0x9.
Cleaning up 12 unused index entries from index $SDH of file 0x9.
Cleaning up 12 unused security descriptors.
CHKDSK is verifying Usn Journal...
Usn Journal verification completed.
CHKDSK is verifying file data (stage 4 of 5)...
File data verification completed.
CHKDSK is verifying free space (stage 5 of 5)...
Free space verification is complete.

40106272 KB total disk space.
11522908 KB in 95081 files.
34012 KB in 7769 indexes.
0 KB in bad sectors.
185552 KB in use by the system.
65536 KB occupied by the log file.
28363800 KB available on disk.

4096 bytes in each allocation unit.
10026568 total allocation units on disk.
7090950 allocation units available on disk.

Internal Info:
00 a8 01 00 cc 91 01 00 a6 40 02 00 00 00 00 00 .........@......
08 09 00 00 02 00 00 00 c1 03 00 00 00 00 00 00 ................
4c c2 8e 03 00 00 00 00 2c 00 58 2b 00 00 00 00 L.......,.X+....
e2 5b 8f 05 00 00 00 00 52 82 ba e1 02 00 00 00 .[......R.......
ec 95 2e 62 01 00 00 00 ea 43 94 7a 04 00 00 00 ...b.....C.z....
99 9e 36 00 00 00 00 00 a0 39 07 00 69 73 01 00 ..6......9..is..
00 00 00 00 00 70 4d bf 02 00 00 00 59 1e 00 00 .....pM.....Y...

Windows has finished checking your disk.
Please wait while your computer restarts.

For more information, see Help and Support Center at
http://go.microsoft.com/fwlink/events.asp.
--end of event logâ??

Associated with my past running of chkdsk there are other similar errors for
both hard drives in the event logs. Some common data to all errors is:

Cleaning up 6 unused index entries from index $SII of file 0x9.
Cleaning up 6 unused index entries from index $SDH of file 0x9.
Cleaning up 6 unused security descriptors.

Cleaning up minor inconsistencies on the drive.
Cleaning up 21 unused index entries from index $SII of file 0x9.
Cleaning up 21 unused index entries from index $SDH of file 0x9.
Cleaning up 21 unused security descriptors.

I did a Google on â??index $SII of file 0x9â?? and found this KB:
http://support.microsoft.com/kb/831374/ The CHKDSK utility incorrectly
identifies and deletes in-use security descriptors

WHOA! So running chkdsk is a more serious problem than not being able to
defrag. But I have to run chkdsk to fix the errors so the defrag program
Speed Disk will run on the scheduler.

KB831374 says to fix the problem obtain the latest service pack. Here is
the Windows version and service pack info for this PC:

Windows XP Home Edition Service Pack 2 (build 2600)
OS Version 5.1.2600 (WinXP Retail)
Windows XP
SP2
no verification data KB811113[SP] on 8/20/2004 (details...)
SP3
passed verification KB834707 on 10/14/2004 (details...)
passed verification KB867282 on 2/9/2005 (details...)
passed verification KB873333 on 2/9/2005 (details...)
passed verification KB873339 on 12/14/2004 (details...)
passed verification KB883939 on 6/15/2005 (details...)
passed verification KB885250 on 2/9/2005 (details...)
passed verification KB885835 on 12/14/2004 (details...)
passed verification KB885836 on 12/14/2004 (details...)
no verification data KB885884 on 10/14/2004 (details...)
passed verification KB886185 on 12/14/2004 (details...)
passed verification KB887472 on 2/9/2005 (details...)
passed verification KB887742 on 2/22/2005 (details...)
passed verification KB887797 on 12/14/2004 (details...)
passed verification KB888113 on 2/9/2005 (details...)
passed verification KB888302 on 2/9/2005 (details...)
passed verification KB890046 on 6/15/2005 (details...)
passed verification KB890047 on 2/9/2005 (details...)
passed verification KB890175 on 1/12/2005 (details...)
passed verification KB890859 on 4/13/2005 (details...)
passed verification KB890923 on 4/13/2005 (details...)
passed verification KB891781 on 2/9/2005 (details...)
passed verification KB893066 on 4/13/2005 (details...)
passed verification KB893086 on 4/13/2005 (details...)
passed verification KB893756 on 8/10/2005 (details...)
passed verification KB893803 on 4/13/2005 (details...)
passed verification KB893803V2 on 5/18/2005 (details...)
passed verification KB894391 on 8/10/2005 (details...)
passed verification KB896358 on 6/15/2005 (details...)
passed verification KB896422 on 6/15/2005 (details...)
passed verification KB896423 on 8/10/2005 (details...)
passed verification KB896428 on 6/15/2005 (details...)
passed verification KB896727 on 8/10/2005 (details...)
passed verification KB898461 on 6/29/2005 (details...)
passed verification KB899587 on 8/10/2005 (details...)
passed verification KB899588 on 8/10/2005 (details...)
passed verification KB899591 on 8/10/2005 (details...)
passed verification KB900930 on 8/1/2005 (details...)
passed verification KB901214 on 7/12/2005 (details...)
no verification data KB903235 on 7/12/2005 (details...)

The latest service pack is already installed on this PC.

So where do I go from here?

Windows XP615

Windows XP Support >> CHKDSK incorrectly identifies and deletes in-use security descript Which version of Norton Speed Disk are you running? Version 2002 or higher
was supposed to be able to be ran in XP.

Speed Disk is a part of Norton SystemWorks and/ore Norton Utilities.

"Jerry" <EMail@HideDomain.com> wrote in message
news:EMail@HideDomain.com...
>I was troubleshooting Speed Disk (Norton Utilities defragmenter) to
>determine
> why it would not run on the scheduler.
>
> Here is the event log entry:
>
> Event Type: Error
> Event Source: Speed Disk service
> Event Category: None
> Event ID: 1027
> Date: 9/25/2005
> Time: 1:08:20 PM
> User: N/A
> Computer: DGQ28531
> Description:
> Optimization of Drive C: not started: Drive integrity check failed. Please
> run CHKDSK /F before optimizing this drive
> --end of event log-
>
> And so I ran chkdsk first and Speed Disk started OK. It looks like I have
> to
> run chkdsk /F prior to every time I want to run Speed Disk. Not being very
> happy with that arrangement I decided to look into what chkdsk was finding
> and fixing. I found some chkdsk associated errors in the event log. Here
> is
> one example of what it found and fixed:
>
> Event Type: Information
> Event Source: Winlogon
> Event Category: None
> Event ID: 1001
> Date: 9/27/2005
> Time: 1:12:37 PM
> User: N/A
> Computer: ABC12345
> Description:
> Checking file system on C:
> The type of the file system is NTFS.
> Volume label is Main File System.
> Cleaning up minor inconsistencies on the drive.
> Cleaning up 12 unused index entries from index $SII of file 0x9.
> Cleaning up 12 unused index entries from index $SDH of file 0x9.
> Cleaning up 12 unused security descriptors.
> CHKDSK is verifying Usn Journal...
> Usn Journal verification completed.
> CHKDSK is verifying file data (stage 4 of 5)...
> File data verification completed.
> CHKDSK is verifying free space (stage 5 of 5)...
> Free space verification is complete.
>
> 40106272 KB total disk space.
> 11522908 KB in 95081 files.
> 34012 KB in 7769 indexes.
> 0 KB in bad sectors.
> 185552 KB in use by the system.
> 65536 KB occupied by the log file.
> 28363800 KB available on disk.
>
> 4096 bytes in each allocation unit.
> 10026568 total allocation units on disk.
> 7090950 allocation units available on disk.
>
> Internal Info:
> 00 a8 01 00 cc 91 01 00 a6 40 02 00 00 00 00 00 .........@......
> 08 09 00 00 02 00 00 00 c1 03 00 00 00 00 00 00 ................
> 4c c2 8e 03 00 00 00 00 2c 00 58 2b 00 00 00 00 L.......,.X+....
> e2 5b 8f 05 00 00 00 00 52 82 ba e1 02 00 00 00 .[......R.......
> ec 95 2e 62 01 00 00 00 ea 43 94 7a 04 00 00 00 ...b.....C.z....
> 99 9e 36 00 00 00 00 00 a0 39 07 00 69 73 01 00 ..6......9..is..
> 00 00 00 00 00 70 4d bf 02 00 00 00 59 1e 00 00 .....pM.....Y...
>
> Windows has finished checking your disk.
> Please wait while your computer restarts.
>
>
> For more information, see Help and Support Center at
> http://go.microsoft.com/fwlink/events.asp.
> --end of event log-
>
> Associated with my past running of chkdsk there are other similar errors
> for
> both hard drives in the event logs. Some common data to all errors is:
>
> Cleaning up 6 unused index entries from index $SII of file 0x9.
> Cleaning up 6 unused index entries from index $SDH of file 0x9.
> Cleaning up 6 unused security descriptors.
>
> Cleaning up minor inconsistencies on the drive.
> Cleaning up 21 unused index entries from index $SII of file 0x9.
> Cleaning up 21 unused index entries from index $SDH of file 0x9.
> Cleaning up 21 unused security descriptors.
>
> I did a Google on "index $SII of file 0x9" and found this KB:
> http://support.microsoft.com/kb/831374/ The CHKDSK utility incorrectly
> identifies and deletes in-use security descriptors
>
> WHOA! So running chkdsk is a more serious problem than not being able to
> defrag. But I have to run chkdsk to fix the errors so the defrag program
> Speed Disk will run on the scheduler.
>
> KB831374 says to fix the problem obtain the latest service pack. Here is
> the Windows version and service pack info for this PC:
>
> Windows XP Home Edition Service Pack 2 (build 2600)
> OS Version 5.1.2600 (WinXP Retail)
> Windows XP
> SP2
> no verification data KB811113[SP] on 8/20/2004 (details...)
> SP3
> passed verification KB834707 on 10/14/2004 (details...)
> passed verification KB867282 on 2/9/2005 (details...)
> passed verification KB873333 on 2/9/2005 (details...)
> passed verification KB873339 on 12/14/2004 (details...)
> passed verification KB883939 on 6/15/2005 (details...)
> passed verification KB885250 on 2/9/2005 (details...)
> passed verification KB885835 on 12/14/2004 (details...)
> passed verification KB885836 on 12/14/2004 (details...)
> no verification data KB885884 on 10/14/2004 (details...)
> passed verification KB886185 on 12/14/2004 (details...)
> passed verification KB887472 on 2/9/2005 (details...)
> passed verification KB887742 on 2/22/2005 (details...)
> passed verification KB887797 on 12/14/2004 (details...)
> passed verification KB888113 on 2/9/2005 (details...)
> passed verification KB888302 on 2/9/2005 (details...)
> passed verification KB890046 on 6/15/2005 (details...)
> passed verification KB890047 on 2/9/2005 (details...)
> passed verification KB890175 on 1/12/2005 (details...)
> passed verification KB890859 on 4/13/2005 (details...)
> passed verification KB890923 on 4/13/2005 (details...)
> passed verification KB891781 on 2/9/2005 (details...)
> passed verification KB893066 on 4/13/2005 (details...)
> passed verification KB893086 on 4/13/2005 (details...)
> passed verification KB893756 on 8/10/2005 (details...)
> passed verification KB893803 on 4/13/2005 (details...)
> passed verification KB893803V2 on 5/18/2005 (details...)
> passed verification KB894391 on 8/10/2005 (details...)
> passed verification KB896358 on 6/15/2005 (details...)
> passed verification KB896422 on 6/15/2005 (details...)
> passed verification KB896423 on 8/10/2005 (details...)
> passed verification KB896428 on 6/15/2005 (details...)
> passed verification KB896727 on 8/10/2005 (details...)
> passed verification KB898461 on 6/29/2005 (details...)
> passed verification KB899587 on 8/10/2005 (details...)
> passed verification KB899588 on 8/10/2005 (details...)
> passed verification KB899591 on 8/10/2005 (details...)
> passed verification KB900930 on 8/1/2005 (details...)
> passed verification KB901214 on 7/12/2005 (details...)
> no verification data KB903235 on 7/12/2005 (details...)
>
> The latest service pack is already installed on this PC.
>
> So where do I go from here?
>

Windows XP Support >> CHKDSK incorrectly identifies and deletes in-use security descript Norton Speed Disk SDNTC.exe version 18.0.0.62 which is part of Norton
SystemWorks 2005 Premier Revision 8.02

Since posting this problem I found this in the general newsgroup:
http://groups.google.com/group/microsoft.public.windowsxp.general/browse_thread/thread/f3d110e33a3fe1a0/a4158e04fd8d302a?lnk=st&q=index+$SDH&rnum=1&hl=en#a4158e04fd8d302a

They seem to think it is a NU 2002 problem, but fail to specifically
identify the problem. Because there is a KB at Microsoft I am not so sure it
is a Norton problem. I'm still looking for an answer.

Maybe someone that is running Win XP Home SP2 without Norton Systemworks
could check their event logs to see if they have the error?

Jerry

"Yves Leclerc" wrote:

> Which version of Norton Speed Disk are you running? Version 2002 or higher
> was supposed to be able to be ran in XP.
>
> Speed Disk is a part of Norton SystemWorks and/ore Norton Utilities.
>
>
> "Jerry" <EMail@HideDomain.com> wrote in message
> news:EMail@HideDomain.com...
> >I was troubleshooting Speed Disk (Norton Utilities defragmenter) to
> >determine
> > why it would not run on the scheduler.
> >
> > Here is the event log entry:
> >
> > Event Type: Error
> > Event Source: Speed Disk service
> > Event Category: None
> > Event ID: 1027
> > Date: 9/25/2005
> > Time: 1:08:20 PM
> > User: N/A
> > Computer: DGQ28531
> > Description:
> > Optimization of Drive C: not started: Drive integrity check failed. Please
> > run CHKDSK /F before optimizing this drive
> > --end of event log-
> >
> > And so I ran chkdsk first and Speed Disk started OK. It looks like I have
> > to
> > run chkdsk /F prior to every time I want to run Speed Disk. Not being very
> > happy with that arrangement I decided to look into what chkdsk was finding
> > and fixing. I found some chkdsk associated errors in the event log. Here
> > is
> > one example of what it found and fixed:
> >
> > Event Type: Information
> > Event Source: Winlogon
> > Event Category: None
> > Event ID: 1001
> > Date: 9/27/2005
> > Time: 1:12:37 PM
> > User: N/A
> > Computer: ABC12345
> > Description:
> > Checking file system on C:
> > The type of the file system is NTFS.
> > Volume label is Main File System.
> > Cleaning up minor inconsistencies on the drive.
> > Cleaning up 12 unused index entries from index $SII of file 0x9.
> > Cleaning up 12 unused index entries from index $SDH of file 0x9.
> > Cleaning up 12 unused security descriptors.
> > CHKDSK is verifying Usn Journal...
> > Usn Journal verification completed.
> > CHKDSK is verifying file data (stage 4 of 5)...
> > File data verification completed.
> > CHKDSK is verifying free space (stage 5 of 5)...
> > Free space verification is complete.
> >
> > 40106272 KB total disk space.
> > 11522908 KB in 95081 files.
> > 34012 KB in 7769 indexes.
> > 0 KB in bad sectors.
> > 185552 KB in use by the system.
> > 65536 KB occupied by the log file.
> > 28363800 KB available on disk.
> >
> > 4096 bytes in each allocation unit.
> > 10026568 total allocation units on disk.
> > 7090950 allocation units available on disk.
> >
> > Internal Info:
> > 00 a8 01 00 cc 91 01 00 a6 40 02 00 00 00 00 00 .........@......
> > 08 09 00 00 02 00 00 00 c1 03 00 00 00 00 00 00 ................
> > 4c c2 8e 03 00 00 00 00 2c 00 58 2b 00 00 00 00 L.......,.X+....
> > e2 5b 8f 05 00 00 00 00 52 82 ba e1 02 00 00 00 .[......R.......
> > ec 95 2e 62 01 00 00 00 ea 43 94 7a 04 00 00 00 ...b.....C.z....
> > 99 9e 36 00 00 00 00 00 a0 39 07 00 69 73 01 00 ..6......9..is..
> > 00 00 00 00 00 70 4d bf 02 00 00 00 59 1e 00 00 .....pM.....Y...
> >
> > Windows has finished checking your disk.
> > Please wait while your computer restarts.
> >
> >
> > For more information, see Help and Support Center at
> > http://go.microsoft.com/fwlink/events.asp.
> > --end of event log-
> >
> > Associated with my past running of chkdsk there are other similar errors
> > for
> > both hard drives in the event logs. Some common data to all errors is:
> >
> > Cleaning up 6 unused index entries from index $SII of file 0x9.
> > Cleaning up 6 unused index entries from index $SDH of file 0x9.
> > Cleaning up 6 unused security descriptors.
> >
> > Cleaning up minor inconsistencies on the drive.
> > Cleaning up 21 unused index entries from index $SII of file 0x9.
> > Cleaning up 21 unused index entries from index $SDH of file 0x9.
> > Cleaning up 21 unused security descriptors.
> >
> > I did a Google on "index $SII of file 0x9" and found this KB:
> > http://support.microsoft.com/kb/831374/ The CHKDSK utility incorrectly
> > identifies and deletes in-use security descriptors
> >
> > WHOA! So running chkdsk is a more serious problem than not being able to
> > defrag. But I have to run chkdsk to fix the errors so the defrag program
> > Speed Disk will run on the scheduler.
> >
> > KB831374 says to fix the problem obtain the latest service pack. Here is
> > the Windows version and service pack info for this PC:
> >
> > Windows XP Home Edition Service Pack 2 (build 2600)
> > OS Version 5.1.2600 (WinXP Retail)
> > Windows XP
> > SP2
> > no verification data KB811113[SP] on 8/20/2004 (details...)
> > SP3
> > passed verification KB834707 on 10/14/2004 (details...)
> > passed verification KB867282 on 2/9/2005 (details...)
> > passed verification KB873333 on 2/9/2005 (details...)
> > passed verification KB873339 on 12/14/2004 (details...)
> > passed verification KB883939 on 6/15/2005 (details...)
> > passed verification KB885250 on 2/9/2005 (details...)
> > passed verification KB885835 on 12/14/2004 (details...)
> > passed verification KB885836 on 12/14/2004 (details...)
> > no verification data KB885884 on 10/14/2004 (details...)
> > passed verification KB886185 on 12/14/2004 (details...)
> > passed verification KB887472 on 2/9/2005 (details...)
> > passed verification KB887742 on 2/22/2005 (details...)
> > passed verification KB887797 on 12/14/2004 (details...)
> > passed verification KB888113 on 2/9/2005 (details...)
> > passed verification KB888302 on 2/9/2005 (details...)
> > passed verification KB890046 on 6/15/2005 (details...)
> > passed verification KB890047 on 2/9/2005 (details...)
> > passed verification KB890175 on 1/12/2005 (details...)
> > passed verification KB890859 on 4/13/2005 (details...)
> > passed verification KB890923 on 4/13/2005 (details...)
> > passed verification KB891781 on 2/9/2005 (details...)
> > passed verification KB893066 on 4/13/2005 (details...)
> > passed verification KB893086 on 4/13/2005 (details...)
> > passed verification KB893756 on 8/10/2005 (details...)
> > passed verification KB893803 on 4/13/2005 (details...)
> > passed verification KB893803V2 on 5/18/2005 (details...)
> > passed verification KB894391 on 8/10/2005 (details...)
> > passed verification KB896358 on 6/15/2005 (details...)
> > passed verification KB896422 on 6/15/2005 (details...)
> > passed verification KB896423 on 8/10/2005 (details...)
> > passed verification KB896428 on 6/15/2005 (details...)
> > passed verification KB896727 on 8/10/2005 (details...)
> > passed verification KB898461 on 6/29/2005 (details...)
> > passed verification KB899587 on 8/10/2005 (details...)
> > passed verification KB899588 on 8/10/2005 (details...)
> > passed verification KB899591 on 8/10/2005 (details...)
> > passed verification KB900930 on 8/1/2005 (details...)
> > passed verification KB901214 on 7/12/2005 (details...)
> > no verification data KB903235 on 7/12/2005 (details...)
> >
> > The latest service pack is already installed on this PC.
> >
> > So where do I go from here?
> >
>
>
>

Windows XP Support >> CHKDSK incorrectly identifies and deletes in-use security descript This is a Microsoft problem!

KB831374 states that you should NOT ignore this problem. The recommended
fix is useless. I have the latest service pack and I still have the problem.
XP Home does not have
the vrfydsk.exe utility so it is impossible to determine if real Security
Descriptor file corruption occurs.

http://support.microsoft.com/default.aspx?scid=kb;en-us;831374

The CHKDSK utility incorrectly identifies and deletes in-use security
descriptors
View products that this article applies to.
Article ID : 831374
Last Review : September 13, 2005
Revision : 6.1
For a Microsoft Windows 2000 version of this article, see 831375
(http://support.microsoft.com/kb/831375/).
On This Page
SYMPTOMS
CAUSE
RESOLUTION
Windows Server 2003
Hotfix information
Prerequisites
Restart requirement
Hotfix replacement information
File information
Windows XP
STATUS
MORE INFORMATION
APPLIES TO

SYMPTOMS
When you run the chkdsk command in fix mode, and you use the /F switch or
the /R switch with this command, access control lists (ACLs) on some files
may revert to their default values. This problem may occur if the volume
contains more than 4,194,303 files. For example, this problem occurs in the
following Chkdsk output:

Checking file system on J:
The type of the file system is NTFS.
Volume label is MYVOLUME.

Cleaning up minor inconsistencies on the drive.
Cleaning up 1496 unused index entries from index $SII of file 0x9.
Cleaning up 1496 unused index entries from index $SDH of file 0x9.
Cleaning up 1496 unused security descriptors.
CHKDSK discovered free space marked as allocated in the
master file table (MFT) bitmap.
Windows has made corrections to the file system.

1576209407 KB total disk space.
1514676116 KB in 4232266 files.
1523236 KB in 302192 indexes.
0 KB in bad sectors.
4671195 KB in use by the system.
65536 KB occupied by the log file.
55338860 KB available on disk.

4096 bytes in each allocation unit.
394052351 total allocation units on disk.
13834715 allocation units available on disk.
Back to the top

CAUSE
This problem occurs because the Chkdsk utility may not find references to
all the security IDs if the master file table is larger than 4 gigabytes (GB)
or if there are more than 4,194,303 files on the volume. Therefore, the
undiscovered security descriptors are reset.
Back to the top

RESOLUTION
We recommend that you immediately apply the appropriate service pack or
hotfix on any computer that is currently vulnerable to the loss of security
descriptors.

We recommend that you inventory servers and workstations in your
organization and then install preventive software on any computers that are
at risk. We recommend that you apply any preventive fix to new computers
before you deploy the new computers for test or production use. We recommend
that you inform server administrators, helpdesk administrators, and support
professionals that they should install preventive fixes before the following
operations are executed:
â?¢ chkdsk /F
â?¢ chkdsk /R
â?¢ autochk
Note IT operations guides should also install preventive fixes before these
commands are executed.
Back to the top

Windows Server 2003
Hotfix information
A supported hotfix is now available from Microsoft, but it is only intended
to correct the problem that is described in this article. Only apply it to
systems that are experiencing this specific problem. This hotfix may receive
additional testing. Therefore, if you are not severely affected by this
problem, we recommend that you wait for the next Microsoft Windows Server
2003 service pack that contains this hotfix.

To resolve this problem immediately, contact Microsoft Product Support
Services to obtain the hotfix. For a complete list of Microsoft Product
Support Services phone numbers and information about support costs, visit the
following Microsoft Web site:
http://support.microsoft.com/default.aspx?scid=fh;%5Bln%5D;cntactms(http://support.microsoft.com/default.aspx?scid=fh;%5Bln%5D;cntactms)
Note In special cases, charges that are ordinarily incurred for support
calls may be canceled if a Microsoft Support Professional determines that a
specific update will resolve your problem. The usual support costs will apply
to additional support questions and issues that do not qualify for the
specific update in question.
Prerequisites
No prerequisites are required.
Restart requirement
You must restart your computer after you apply this hotfix.
Hotfix replacement information
This hotfix does not replace any other hotfixes.
File information
The English version of this hotfix has the file attributes (or later file
attributes) that are listed in the following table. The dates and times for
these files are listed in coordinated universal time (UTC). When you view the
file information, it is converted to local time. To find the difference
between UTC and local time, use the Time Zone tab in the Date and Time tool
in Control Panel. Date Time Version Size File name
Platform
----------------------------------------------------------------------
11-Dec-2003 19:21 5.2.3790.109 831,488 Untfs.dll IA64
11-Dec-2003 19:25 5.2.3790.109 308,224 Untfs.dll x86
25-Oct-2003 00:13 271 Branches.inf
11-Nov-2003 21:04 9,981 Kb831374.cat
11-Nov-2003 20:45 354 Updatebr.inf
11-Nov-2003 20:45 5,972 Update_rtmqfe.inf

Back to the top

Windows XP
To resolve this problem, obtain the latest service pack for Windows XP. For
more information, click the following article number to view the article in
the Microsoft Knowledge Base:
322389 (http://support.microsoft.com/kb/322389/) How to obtain the latest
Windows XP service pack
Back to the top

STATUS
Microsoft has confirmed that this is a problem in the Microsoft products
that are listed in the "Applies to" section.
Back to the top

MORE INFORMATION
Even when this hotfix is installed, it is still possible for Chkdsk to reset
permissions back to default settings. You can use the Vrfydsk.exe utility to
determine whether real Security Descriptor file corruption occurs on a
volume. You can save the Vrfydsk.exe utility output to a text file. If the
resulting output file contains the following repair entry, the default
security may be set on some files and directories.
CHKDSK is verifying security descriptors (stage 3 of 3)... Repairing the
security file record segment. <----- REAL CORRUPTION OCCURRED Deleting an
index entry with Id #### from index $SII of file 9. Deleting an index entry
with Id #### from index $SII of file 9.

For additional information about the vrfydsk.exe utility, click the
following article number to view the article in the Microsoft Knowledge Base:
837326 (http://support.microsoft.com/kb/837326/) How to use the Vrfydsk.exe
tool to check a volume for errors without taking the volume offline in
Windows Server 2003
For additional information, click the following article number to view the
article in the Microsoft Knowledge Base:
824684 (http://support.microsoft.com/kb/824684/) Description of the standard
terminology that is used to describe Microsoft software updates
For more information about security descriptors, search Help and Support
Center for "security descriptors."
Back to the top

--------------------------------------------------------------------------------

APPLIES TO
â?¢ Microsoft Windows Server 2003, Enterprise Edition for Itanium-based Systems
â?¢ Microsoft Windows Server 2003, Enterprise Edition (32-bit x86)
â?¢ Microsoft Windows Server 2003, Standard Edition (32-bit x86)
â?¢ Microsoft Windows Server 2003, Web Edition
â?¢ Microsoft Windows XP Professional
â?¢ Microsoft Windows XP Home Edition