[xtern0]

While this may not necessarily be the solution in all cases (and apparently not this one): One should check their Local Security Policy >> User Rights Assignment >> "Impersonate a client after authentication", it should have "SERVICE" listed along with "Administrators"

If "SERVICE" has been removed, either intentionally or via malware, icons will be absent, as well as a number of other oddities (search not functioning, etc.).

Should help the wayward admin trying to uneff what a self-proclaimed "power user" has borked.

Cheers,

X