View Full Version : showing all SID's in registry ? (including hidden SID's)
rtdos
April 20th 03, 05:49 PM
is there a way to show ALL SID's in registry {regedit.exe} including hidden
SID's and SID's from old users accounts ?
--
*** REPLY REQUESTED WHEN CONVENIENT ***
Jeff
http://geocities.com/rtdos
Walter Clayton
December 5th 03, 07:29 PM
You're confusing terminology which is dangerous. That part of the registry
is difficult to access for the simple reason that doing the wrong thing will
cause some really major problems up to and including locking your self out
of the system or loosing all data.
If you really want to take the chance, do a full system state backup first.
Then you simply have to set permissions on the appropriate registry
branches. If you can't figure it from that hint, then you need to stay out
of that part of the registry.
--
Walter Clayton - MS MVP(WinXP)
Associate Expert
http://www.microsoft.com/windowsxp/expertzone
Any technology distinguishable from magic is insufficiently advanced.
http://www.dts-l.org
http://support.microsoft.com/servicedesks/fileversion/default.asp
"rtdos" > wrote in message
news:BcAoa.569376$S_4.627838@rwcrnsc53...
> is there a way to show ALL SID's in registry {regedit.exe} including
> hidden
> SID's and SID's from old users accounts ?
>
> --
> *** REPLY REQUESTED WHEN CONVENIENT ***
>
> Jeff
> http://geocities.com/rtdos
>
>
rtdos
December 5th 03, 07:29 PM
i've tried that. and i still can't get access to the hidden SID's in the
registry (the old login names).
"Walter Clayton" > wrote in message
...
> You're confusing terminology which is dangerous. That part of the registry
> is difficult to access for the simple reason that doing the wrong thing
will
> cause some really major problems up to and including locking your self out
> of the system or loosing all data.
>
> If you really want to take the chance, do a full system state backup
first.
> Then you simply have to set permissions on the appropriate registry
> branches. If you can't figure it from that hint, then you need to stay out
> of that part of the registry.
>
> --
> Walter Clayton - MS MVP(WinXP)
> Associate Expert
> http://www.microsoft.com/windowsxp/expertzone
> Any technology distinguishable from magic is insufficiently advanced.
> http://www.dts-l.org
> http://support.microsoft.com/servicedesks/fileversion/default.asp
>
>
> "rtdos" > wrote in message
> news:BcAoa.569376$S_4.627838@rwcrnsc53...
> > is there a way to show ALL SID's in registry {regedit.exe} including
> > hidden
> > SID's and SID's from old users accounts ?
> >
> > --
> > *** REPLY REQUESTED WHEN CONVENIENT ***
> >
> > Jeff
> > http://geocities.com/rtdos
> >
> >
>
Walter Clayton
December 5th 03, 07:29 PM
They're there all right. If you're not getting to them, then you haven't set
permissions correctly on the appropriate branches.
--
Walter Clayton - MS MVP(WinXP)
Associate Expert
http://www.microsoft.com/windowsxp/expertzone
Any technology distinguishable from magic is insufficiently advanced.
http://www.dts-l.org
http://support.microsoft.com/servicedesks/fileversion/default.asp
"rtdos" > wrote in message
news:vOFoa.545018$3D1.299774@sccrnsc01...
> i've tried that. and i still can't get access to the hidden SID's in the
> registry (the old login names).
>
>
>
> "Walter Clayton" > wrote in message
> ...
> > You're confusing terminology which is dangerous. That part of the
> > registry
> > is difficult to access for the simple reason that doing the wrong thing
> will
> > cause some really major problems up to and including locking your self
> > out
> > of the system or loosing all data.
> >
> > If you really want to take the chance, do a full system state backup
> first.
> > Then you simply have to set permissions on the appropriate registry
> > branches. If you can't figure it from that hint, then you need to stay
> > out
> > of that part of the registry.
> >
> > --
> > Walter Clayton - MS MVP(WinXP)
> > Associate Expert
> > http://www.microsoft.com/windowsxp/expertzone
> > Any technology distinguishable from magic is insufficiently advanced.
> > http://www.dts-l.org
> > http://support.microsoft.com/servicedesks/fileversion/default.asp
> >
> >
> > "rtdos" > wrote in message
> > news:BcAoa.569376$S_4.627838@rwcrnsc53...
> > > is there a way to show ALL SID's in registry {regedit.exe} including
> > > hidden
> > > SID's and SID's from old users accounts ?
> > >
> > > --
> > > *** REPLY REQUESTED WHEN CONVENIENT ***
> > >
> > > Jeff
> > > http://geocities.com/rtdos
> > >
> > >
> >
>
>
rtdos
December 5th 03, 07:29 PM
but using an account with administrator privaleges, shouldn't i be able to
view them ?
"Walter Clayton" > wrote in message
...
> They're there all right. If you're not getting to them, then you haven't
set
> permissions correctly on the appropriate branches.
>
> --
> Walter Clayton - MS MVP(WinXP)
> Associate Expert
> http://www.microsoft.com/windowsxp/expertzone
> Any technology distinguishable from magic is insufficiently advanced.
> http://www.dts-l.org
> http://support.microsoft.com/servicedesks/fileversion/default.asp
>
>
> "rtdos" > wrote in message
> news:vOFoa.545018$3D1.299774@sccrnsc01...
> > i've tried that. and i still can't get access to the hidden SID's in
the
> > registry (the old login names).
> >
> >
> >
> > "Walter Clayton" > wrote in message
> > ...
> > > You're confusing terminology which is dangerous. That part of the
> > > registry
> > > is difficult to access for the simple reason that doing the wrong
thing
> > will
> > > cause some really major problems up to and including locking your self
> > > out
> > > of the system or loosing all data.
> > >
> > > If you really want to take the chance, do a full system state backup
> > first.
> > > Then you simply have to set permissions on the appropriate registry
> > > branches. If you can't figure it from that hint, then you need to stay
> > > out
> > > of that part of the registry.
> > >
> > > --
> > > Walter Clayton - MS MVP(WinXP)
> > > Associate Expert
> > > http://www.microsoft.com/windowsxp/expertzone
> > > Any technology distinguishable from magic is insufficiently advanced.
> > > http://www.dts-l.org
> > > http://support.microsoft.com/servicedesks/fileversion/default.asp
> > >
> > >
> > > "rtdos" > wrote in message
> > > news:BcAoa.569376$S_4.627838@rwcrnsc53...
> > > > is there a way to show ALL SID's in registry {regedit.exe}
including
> > > > hidden
> > > > SID's and SID's from old users accounts ?
> > > >
> > > > --
> > > > *** REPLY REQUESTED WHEN CONVENIENT ***
> > > >
> > > > Jeff
> > > > http://geocities.com/rtdos
> > > >
> > > >
> > >
> >
> >
>
Walter Clayton
December 5th 03, 07:29 PM
By default, no. In fact by default, no user has access to the necessary
branches.
--
Walter Clayton - MS MVP(WinXP)
Associate Expert
http://www.microsoft.com/windowsxp/expertzone
Any technology distinguishable from magic is insufficiently advanced.
http://www.dts-l.org
http://support.microsoft.com/servicedesks/fileversion/default.asp
"rtdos" > wrote in message
news:%_Goa.280085$OV.330195@rwcrnsc54...
> but using an account with administrator privaleges, shouldn't i be able to
> view them ?
>
>
> "Walter Clayton" > wrote in message
> ...
> > They're there all right. If you're not getting to them, then you haven't
> set
> > permissions correctly on the appropriate branches.
> >
> > --
> > Walter Clayton - MS MVP(WinXP)
> > Associate Expert
> > http://www.microsoft.com/windowsxp/expertzone
> > Any technology distinguishable from magic is insufficiently advanced.
> > http://www.dts-l.org
> > http://support.microsoft.com/servicedesks/fileversion/default.asp
> >
> >
> > "rtdos" > wrote in message
> > news:vOFoa.545018$3D1.299774@sccrnsc01...
> > > i've tried that. and i still can't get access to the hidden SID's in
> the
> > > registry (the old login names).
> > >
> > >
> > >
> > > "Walter Clayton" > wrote in message
> > > ...
> > > > You're confusing terminology which is dangerous. That part of the
> > > > registry
> > > > is difficult to access for the simple reason that doing the wrong
> thing
> > > will
> > > > cause some really major problems up to and including locking your
> > > > self
> > > > out
> > > > of the system or loosing all data.
> > > >
> > > > If you really want to take the chance, do a full system state backup
> > > first.
> > > > Then you simply have to set permissions on the appropriate registry
> > > > branches. If you can't figure it from that hint, then you need to
> > > > stay
> > > > out
> > > > of that part of the registry.
> > > >
> > > > --
> > > > Walter Clayton - MS MVP(WinXP)
> > > > Associate Expert
> > > > http://www.microsoft.com/windowsxp/expertzone
> > > > Any technology distinguishable from magic is insufficiently
> > > > advanced.
> > > > http://www.dts-l.org
> > > > http://support.microsoft.com/servicedesks/fileversion/default.asp
> > > >
> > > >
> > > > "rtdos" > wrote in message
> > > > news:BcAoa.569376$S_4.627838@rwcrnsc53...
> > > > > is there a way to show ALL SID's in registry {regedit.exe}
> including
> > > > > hidden
> > > > > SID's and SID's from old users accounts ?
> > > > >
> > > > > --
> > > > > *** REPLY REQUESTED WHEN CONVENIENT ***
> > > > >
> > > > > Jeff
> > > > > http://geocities.com/rtdos
> > > > >
> > > > >
> > > >
> > >
> > >
> >
>
>
Roger Abell [MVP]
December 5th 03, 07:29 PM
I do not know what you are expecting to find.
When I look I never see deleted accounts, only the=20
real, currently existing accounts are represented in=20
the SAM.
--=20
Roger=20
"rtdos" > wrote in message =
news:vOFoa.545018$3D1.299774@sccrnsc01...
> i've tried that. and i still can't get access to the hidden SID's in =
the
> registry (the old login names).
>=20
>=20
>=20
> "Walter Clayton" > wrote in message
> ...
> > You're confusing terminology which is dangerous. That part of the =
registry
> > is difficult to access for the simple reason that doing the wrong =
thing
> will
> > cause some really major problems up to and including locking your =
self out
> > of the system or loosing all data.
> >
> > If you really want to take the chance, do a full system state backup
> first.
> > Then you simply have to set permissions on the appropriate registry
> > branches. If you can't figure it from that hint, then you need to =
stay out
> > of that part of the registry.
> >
> > --
> > Walter Clayton - MS MVP(WinXP)
> > Associate Expert
> > http://www.microsoft.com/windowsxp/expertzone
> > Any technology distinguishable from magic is insufficiently =
advanced.
> > http://www.dts-l.org
> > http://support.microsoft.com/servicedesks/fileversion/default.asp
> >
> >
> > "rtdos" > wrote in message
> > news:BcAoa.569376$S_4.627838@rwcrnsc53...
> > > is there a way to show ALL SID's in registry {regedit.exe} =
including
> > > hidden
> > > SID's and SID's from old users accounts ?
> > >
> > > --
> > > *** REPLY REQUESTED WHEN CONVENIENT ***
> > >
> > > Jeff
> > > http://geocities.com/rtdos
> > >
> > >
> >
>=20
>
rtdos
December 5th 03, 07:30 PM
after I delete an account and I try to add a new account I get a message
that says "such & such can't be added. that username already exists."
"Roger Abell [MVP]" > wrote in message
...
I do not know what you are expecting to find.
When I look I never see deleted accounts, only the
real, currently existing accounts are represented in
the SAM.
--
Roger
"rtdos" > wrote in message
news:vOFoa.545018$3D1.299774@sccrnsc01...
> i've tried that. and i still can't get access to the hidden SID's in the
> registry (the old login names).
>
>
>
> "Walter Clayton" > wrote in message
> ...
> > You're confusing terminology which is dangerous. That part of the
registry
> > is difficult to access for the simple reason that doing the wrong thing
> will
> > cause some really major problems up to and including locking your self
out
> > of the system or loosing all data.
> >
> > If you really want to take the chance, do a full system state backup
> first.
> > Then you simply have to set permissions on the appropriate registry
> > branches. If you can't figure it from that hint, then you need to stay
out
> > of that part of the registry.
> >
> > --
> > Walter Clayton - MS MVP(WinXP)
> > Associate Expert
> > http://www.microsoft.com/windowsxp/expertzone
> > Any technology distinguishable from magic is insufficiently advanced.
> > http://www.dts-l.org
> > http://support.microsoft.com/servicedesks/fileversion/default.asp
> >
> >
> > "rtdos" > wrote in message
> > news:BcAoa.569376$S_4.627838@rwcrnsc53...
> > > is there a way to show ALL SID's in registry {regedit.exe} including
> > > hidden
> > > SID's and SID's from old users accounts ?
> > >
> > > --
> > > *** REPLY REQUESTED WHEN CONVENIENT ***
> > >
> > > Jeff
> > > http://geocities.com/rtdos
> > >
> > >
> >
>
>
Walter Clayton
December 5th 03, 07:30 PM
You're making a dangerous invalid assumption.
How did you delete the user accounts and what options did you use? Did you
attempt to keep the ex-user's data files?
--
Walter Clayton - MS MVP(WinXP)
Associate Expert
http://www.microsoft.com/windowsxp/expertzone
Any technology distinguishable from magic is insufficiently advanced.
http://www.dts-l.org
http://support.microsoft.com/servicedesks/fileversion/default.asp
"rtdos" > wrote in message
news:XBSoa.314428$Zo.63131@sccrnsc03...
> after I delete an account and I try to add a new account I get a message
> that says "such & such can't be added. that username already exists."
>
>
>
> "Roger Abell [MVP]" > wrote in message
> ...
> I do not know what you are expecting to find.
> When I look I never see deleted accounts, only the
> real, currently existing accounts are represented in
> the SAM.
>
> --
> Roger
>
> "rtdos" > wrote in message
> news:vOFoa.545018$3D1.299774@sccrnsc01...
> > i've tried that. and i still can't get access to the hidden SID's in
> > the
> > registry (the old login names).
> >
> >
> >
> > "Walter Clayton" > wrote in message
> > ...
> > > You're confusing terminology which is dangerous. That part of the
> registry
> > > is difficult to access for the simple reason that doing the wrong
> > > thing
> > will
> > > cause some really major problems up to and including locking your self
> out
> > > of the system or loosing all data.
> > >
> > > If you really want to take the chance, do a full system state backup
> > first.
> > > Then you simply have to set permissions on the appropriate registry
> > > branches. If you can't figure it from that hint, then you need to stay
> out
> > > of that part of the registry.
> > >
> > > --
> > > Walter Clayton - MS MVP(WinXP)
> > > Associate Expert
> > > http://www.microsoft.com/windowsxp/expertzone
> > > Any technology distinguishable from magic is insufficiently advanced.
> > > http://www.dts-l.org
> > > http://support.microsoft.com/servicedesks/fileversion/default.asp
> > >
> > >
> > > "rtdos" > wrote in message
> > > news:BcAoa.569376$S_4.627838@rwcrnsc53...
> > > > is there a way to show ALL SID's in registry {regedit.exe}
> > > > including
> > > > hidden
> > > > SID's and SID's from old users accounts ?
> > > >
> > > > --
> > > > *** REPLY REQUESTED WHEN CONVENIENT ***
> > > >
> > > > Jeff
> > > > http://geocities.com/rtdos
> > > >
> > > >
> > >
> >
> >
>
>
rtdos
December 5th 03, 07:31 PM
yes i did delete EVERYTHING about the users accounts and I don have
the proper SID numbers for each account. everytime I try to use user
accounts to add these names in again it is telling me that username
already exists. more examination has proven this.
"Walter Clayton" > wrote in message >...
> You're making a dangerous invalid assumption.
>
> How did you delete the user accounts and what options did you use? Did you
> attempt to keep the ex-user's data files?
>
> --
> Walter Clayton - MS MVP(WinXP)
> Associate Expert
> http://www.microsoft.com/windowsxp/expertzone
> Any technology distinguishable from magic is insufficiently advanced.
> http://www.dts-l.org
> http://support.microsoft.com/servicedesks/fileversion/default.asp
>
>
> "rtdos" > wrote in message
> news:XBSoa.314428$Zo.63131@sccrnsc03...
> > after I delete an account and I try to add a new account I get a message
> > that says "such & such can't be added. that username already exists."
> >
> >
> >
> > "Roger Abell [MVP]" > wrote in message
> > ...
> > I do not know what you are expecting to find.
> > When I look I never see deleted accounts, only the
> > real, currently existing accounts are represented in
> > the SAM.
> >
> > --
> > Roger
> >
> > "rtdos" > wrote in message
> > news:vOFoa.545018$3D1.299774@sccrnsc01...
> > > i've tried that. and i still can't get access to the hidden SID's in
> > > the
> > > registry (the old login names).
> > >
> > >
> > >
> > > "Walter Clayton" > wrote in message
> > > ...
> > > > You're confusing terminology which is dangerous. That part of the
> registry
> > > > is difficult to access for the simple reason that doing the wrong
> > > > thing
> will
> > > > cause some really major problems up to and including locking your self
> out
> > > > of the system or loosing all data.
> > > >
> > > > If you really want to take the chance, do a full system state backup
> first.
> > > > Then you simply have to set permissions on the appropriate registry
> > > > branches. If you can't figure it from that hint, then you need to stay
> out
> > > > of that part of the registry.
> > > >
> > > > --
> > > > Walter Clayton - MS MVP(WinXP)
> > > > Associate Expert
> > > > http://www.microsoft.com/windowsxp/expertzone
> > > > Any technology distinguishable from magic is insufficiently advanced.
> > > > http://www.dts-l.org
> > > > http://support.microsoft.com/servicedesks/fileversion/default.asp
> > > >
> > > >
> > > > "rtdos" > wrote in message
> > > > news:BcAoa.569376$S_4.627838@rwcrnsc53...
> > > > > is there a way to show ALL SID's in registry {regedit.exe}
> > > > > including
> > > > > hidden
> > > > > SID's and SID's from old users accounts ?
> > > > >
> > > > > --
> > > > > *** REPLY REQUESTED WHEN CONVENIENT ***
> > > > >
> > > > > Jeff
> > > > > http://geocities.com/rtdos
> > > > >
> > > > >
> > > >
> > >
> > >
> >
> >
Mark L. Ferguson
December 5th 03, 07:31 PM
This sounds like the userpasswords2 bug that appears when you demote a user to
Limited. If you did that, Walter has a good reg hack to fix it.
--
Mark L. Ferguson TabletPC MVP
Email address : Subject: "QZ" + anything
All email without "QZ" in the subject line will be automatically deleted.
marfer's notes for XP > http://www.geocities.com/marfer_mvp/xp_notes.htm
..
"rtdos" > wrote in message
m...
> yes i did delete EVERYTHING about the users accounts and I don have
> the proper SID numbers for each account. everytime I try to use user
> accounts to add these names in again it is telling me that username
> already exists. more examination has proven this.
>
>
>
> "Walter Clayton" > wrote in message
>...
> > You're making a dangerous invalid assumption.
> >
> > How did you delete the user accounts and what options did you use? Did you
> > attempt to keep the ex-user's data files?
> >
> > --
> > Walter Clayton - MS MVP(WinXP)
> > Associate Expert
> > http://www.microsoft.com/windowsxp/expertzone
> > Any technology distinguishable from magic is insufficiently advanced.
> > http://www.dts-l.org
> > http://support.microsoft.com/servicedesks/fileversion/default.asp
> >
> >
> > "rtdos" > wrote in message
> > news:XBSoa.314428$Zo.63131@sccrnsc03...
> > > after I delete an account and I try to add a new account I get a message
> > > that says "such & such can't be added. that username already exists."
> > >
> > >
> > >
> > > "Roger Abell [MVP]" > wrote in message
> > > ...
> > > I do not know what you are expecting to find.
> > > When I look I never see deleted accounts, only the
> > > real, currently existing accounts are represented in
> > > the SAM.
> > >
> > > --
> > > Roger
> > >
> > > "rtdos" > wrote in message
> > > news:vOFoa.545018$3D1.299774@sccrnsc01...
> > > > i've tried that. and i still can't get access to the hidden SID's in
> > > > the
> > > > registry (the old login names).
> > > >
> > > >
> > > >
> > > > "Walter Clayton" > wrote in message
> > > > ...
> > > > > You're confusing terminology which is dangerous. That part of the
> > registry
> > > > > is difficult to access for the simple reason that doing the wrong
> > > > > thing
> > will
> > > > > cause some really major problems up to and including locking your self
> > out
> > > > > of the system or loosing all data.
> > > > >
> > > > > If you really want to take the chance, do a full system state backup
> > first.
> > > > > Then you simply have to set permissions on the appropriate registry
> > > > > branches. If you can't figure it from that hint, then you need to stay
> > out
> > > > > of that part of the registry.
> > > > >
> > > > > --
> > > > > Walter Clayton - MS MVP(WinXP)
> > > > > Associate Expert
> > > > > http://www.microsoft.com/windowsxp/expertzone
> > > > > Any technology distinguishable from magic is insufficiently advanced.
> > > > > http://www.dts-l.org
> > > > > http://support.microsoft.com/servicedesks/fileversion/default.asp
> > > > >
> > > > >
> > > > > "rtdos" > wrote in message
> > > > > news:BcAoa.569376$S_4.627838@rwcrnsc53...
> > > > > > is there a way to show ALL SID's in registry {regedit.exe}
> > > > > > including
> > > > > > hidden
> > > > > > SID's and SID's from old users accounts ?
> > > > > >
> > > > > > --
> > > > > > *** REPLY REQUESTED WHEN CONVENIENT ***
> > > > > >
> > > > > > Jeff
> > > > > > http://geocities.com/rtdos
> > > > > >
> > > > > >
> > > > >
> > > >
> > > >
> > >
> > >
Walter Clayton
December 5th 03, 07:31 PM
I can delete and readd accounts at will on both HE and Pro via the User
control panel applet.
So you've done something very non-standard to get into the state you
indicate.
If, as Mark indicated, you've been playing with "control userpasswords2" on
HE, you may have hosed things. Seriously so. So what I need to know is
exactly what you've done and in precisely what order, especially if you've
been using "control userpasswords2" and this is an HE machine I'll have to
repro to give you a specific set of instructions. Randomly fumbling around
in this area of the registry is dangerous. The issue Mark referred to is
where some one uses "control userpasswords2" on HE in an attempt to set a
user to Power user status. That causes an issue similar to what you're
observing.
One other things that bothers me, is your still using the wrong terminology.
This issue has nothing to do with SIDs unless you've been playing with 3rd
party tools without understanding what you're doing. And if you have been
doing that, then I need to know what tool(s) and what you've done.
--
Walter Clayton - MS MVP(WinXP)
Associate Expert
http://www.microsoft.com/windowsxp/expertzone
Any technology distinguishable from magic is insufficiently advanced.
http://www.dts-l.org
http://support.microsoft.com/servicedesks/fileversion/default.asp
"rtdos" > wrote in message
m...
> yes i did delete EVERYTHING about the users accounts and I don have
> the proper SID numbers for each account. everytime I try to use user
> accounts to add these names in again it is telling me that username
> already exists. more examination has proven this.
>
>
>
> "Walter Clayton" > wrote in message
> >...
> > You're making a dangerous invalid assumption.
> >
> > How did you delete the user accounts and what options did you use? Did
> > you
> > attempt to keep the ex-user's data files?
> >
> > --
> > Walter Clayton - MS MVP(WinXP)
> > Associate Expert
> > http://www.microsoft.com/windowsxp/expertzone
> > Any technology distinguishable from magic is insufficiently advanced.
> > http://www.dts-l.org
> > http://support.microsoft.com/servicedesks/fileversion/default.asp
> >
> >
> > "rtdos" > wrote in message
> > news:XBSoa.314428$Zo.63131@sccrnsc03...
> > > after I delete an account and I try to add a new account I get a
> > > message
> > > that says "such & such can't be added. that username already exists."
> > >
> > >
> > >
> > > "Roger Abell [MVP]" > wrote in message
> > > ...
> > > I do not know what you are expecting to find.
> > > When I look I never see deleted accounts, only the
> > > real, currently existing accounts are represented in
> > > the SAM.
> > >
> > > --
> > > Roger
> > >
> > > "rtdos" > wrote in message
> > > news:vOFoa.545018$3D1.299774@sccrnsc01...
> > > > i've tried that. and i still can't get access to the hidden SID's
> > > > in
> > > > the
> > > > registry (the old login names).
> > > >
> > > >
> > > >
> > > > "Walter Clayton" > wrote in message
> > > > ...
> > > > > You're confusing terminology which is dangerous. That part of the
> > registry
> > > > > is difficult to access for the simple reason that doing the wrong
> > > > > thing
> > will
> > > > > cause some really major problems up to and including locking your
> > > > > self
> > out
> > > > > of the system or loosing all data.
> > > > >
> > > > > If you really want to take the chance, do a full system state
> > > > > backup
> > first.
> > > > > Then you simply have to set permissions on the appropriate
> > > > > registry
> > > > > branches. If you can't figure it from that hint, then you need to
> > > > > stay
> > out
> > > > > of that part of the registry.
> > > > >
> > > > > --
> > > > > Walter Clayton - MS MVP(WinXP)
> > > > > Associate Expert
> > > > > http://www.microsoft.com/windowsxp/expertzone
> > > > > Any technology distinguishable from magic is insufficiently
> > > > > advanced.
> > > > > http://www.dts-l.org
> > > > > http://support.microsoft.com/servicedesks/fileversion/default.asp
> > > > >
> > > > >
> > > > > "rtdos" > wrote in message
> > > > > news:BcAoa.569376$S_4.627838@rwcrnsc53...
> > > > > > is there a way to show ALL SID's in registry {regedit.exe}
> > > > > > including
> > > > > > hidden
> > > > > > SID's and SID's from old users accounts ?
> > > > > >
> > > > > > --
> > > > > > *** REPLY REQUESTED WHEN CONVENIENT ***
> > > > > >
> > > > > > Jeff
> > > > > > http://geocities.com/rtdos
> > > > > >
> > > > > >
> > > > >
> > > >
> > > >
> > >
> > >
rtdos
December 5th 03, 07:31 PM
no i didn't intially use useraccount2 to deactivate or remove these
accounts. first i clicked on my computer then properties and adanced and
user profiles. deleted the assoc. files that way and then through
useraccounts HE. however, when I try to add accounts with the same or
similiar names i get a message that says "account / username already exists"
is there any way to fix this ?
everything works fine on my computer and nothing out of the ordinary (as far
as users accounts and privaleges go) except this.
these accounts i am talking about (the hidden ones) do not show up in my
normal log in screen but when i press CTRL+ALT+DEL twice to get the classic
login, I type the hidden username and it logins in normally (like I just
created the account) but when I look at my comptuer (the properties then
advanced then user profiles) or useraccounts HE or useraccounts2 nothing is
there.
now am i making sense ?
"Walter Clayton" > wrote in message
...
> I can delete and readd accounts at will on both HE and Pro via the User
> control panel applet.
>
> So you've done something very non-standard to get into the state you
> indicate.
>
> If, as Mark indicated, you've been playing with "control userpasswords2"
on
> HE, you may have hosed things. Seriously so. So what I need to know is
> exactly what you've done and in precisely what order, especially if you've
> been using "control userpasswords2" and this is an HE machine I'll have to
> repro to give you a specific set of instructions. Randomly fumbling around
> in this area of the registry is dangerous. The issue Mark referred to is
> where some one uses "control userpasswords2" on HE in an attempt to set a
> user to Power user status. That causes an issue similar to what you're
> observing.
>
> One other things that bothers me, is your still using the wrong
terminology.
> This issue has nothing to do with SIDs unless you've been playing with 3rd
> party tools without understanding what you're doing. And if you have been
> doing that, then I need to know what tool(s) and what you've done.
>
> --
> Walter Clayton - MS MVP(WinXP)
> Associate Expert
> http://www.microsoft.com/windowsxp/expertzone
> Any technology distinguishable from magic is insufficiently advanced.
> http://www.dts-l.org
> http://support.microsoft.com/servicedesks/fileversion/default.asp
>
>
> "rtdos" > wrote in message
> m...
> > yes i did delete EVERYTHING about the users accounts and I don have
> > the proper SID numbers for each account. everytime I try to use user
> > accounts to add these names in again it is telling me that username
> > already exists. more examination has proven this.
> >
> >
> >
> > "Walter Clayton" > wrote in message
> > >...
> > > You're making a dangerous invalid assumption.
> > >
> > > How did you delete the user accounts and what options did you use? Did
> > > you
> > > attempt to keep the ex-user's data files?
> > >
> > > --
> > > Walter Clayton - MS MVP(WinXP)
> > > Associate Expert
> > > http://www.microsoft.com/windowsxp/expertzone
> > > Any technology distinguishable from magic is insufficiently advanced.
> > > http://www.dts-l.org
> > > http://support.microsoft.com/servicedesks/fileversion/default.asp
> > >
> > >
> > > "rtdos" > wrote in message
> > > news:XBSoa.314428$Zo.63131@sccrnsc03...
> > > > after I delete an account and I try to add a new account I get a
> > > > message
> > > > that says "such & such can't be added. that username already
exists."
> > > >
> > > >
> > > >
> > > > "Roger Abell [MVP]" > wrote in message
> > > > ...
> > > > I do not know what you are expecting to find.
> > > > When I look I never see deleted accounts, only the
> > > > real, currently existing accounts are represented in
> > > > the SAM.
> > > >
> > > > --
> > > > Roger
> > > >
> > > > "rtdos" > wrote in message
> > > > news:vOFoa.545018$3D1.299774@sccrnsc01...
> > > > > i've tried that. and i still can't get access to the hidden SID's
> > > > > in
> > > > > the
> > > > > registry (the old login names).
> > > > >
> > > > >
> > > > >
> > > > > "Walter Clayton" > wrote in message
> > > > > ...
> > > > > > You're confusing terminology which is dangerous. That part of
the
> > > registry
> > > > > > is difficult to access for the simple reason that doing the
wrong
> > > > > > thing
> > > will
> > > > > > cause some really major problems up to and including locking
your
> > > > > > self
> > > out
> > > > > > of the system or loosing all data.
> > > > > >
> > > > > > If you really want to take the chance, do a full system state
> > > > > > backup
> > > first.
> > > > > > Then you simply have to set permissions on the appropriate
> > > > > > registry
> > > > > > branches. If you can't figure it from that hint, then you need
to
> > > > > > stay
> > > out
> > > > > > of that part of the registry.
> > > > > >
> > > > > > --
> > > > > > Walter Clayton - MS MVP(WinXP)
> > > > > > Associate Expert
> > > > > > http://www.microsoft.com/windowsxp/expertzone
> > > > > > Any technology distinguishable from magic is insufficiently
> > > > > > advanced.
> > > > > > http://www.dts-l.org
> > > > > >
http://support.microsoft.com/servicedesks/fileversion/default.asp
> > > > > >
> > > > > >
> > > > > > "rtdos" > wrote in message
> > > > > > news:BcAoa.569376$S_4.627838@rwcrnsc53...
> > > > > > > is there a way to show ALL SID's in registry {regedit.exe}
> > > > > > > including
> > > > > > > hidden
> > > > > > > SID's and SID's from old users accounts ?
> > > > > > >
> > > > > > > --
> > > > > > > *** REPLY REQUESTED WHEN CONVENIENT ***
> > > > > > >
> > > > > > > Jeff
> > > > > > > http://geocities.com/rtdos
> > > > > > >
> > > > > > >
> > > > > >
> > > > >
> > > > >
> > > >
> > > >
>
>
Walter Clayton
December 5th 03, 07:31 PM
Were these accounts that you created or were they on the machine when you
received it?
And yes, it sounds like you did some things backwards (deleting the user
account you simply follow the prompts; there's no need to manually delete
anything from the standard data structure. You implied that you deleted the
data first then the user account), but I'm more concerned at present as to
specifically what kind of accounts you're attempting to delete. As was
mentioned elsewhere, there are some accounts that the system requires to
function and will not show up in most places, although they can be logged
into. Deleting these accounts will render your machine nothing more than a
high priced door stop.
--
Walter Clayton - MS MVP(WinXP)
Associate Expert
http://www.microsoft.com/windowsxp/expertzone
Any technology distinguishable from magic is insufficiently advanced.
http://www.dts-l.org
http://support.microsoft.com/servicedesks/fileversion/default.asp
"rtdos" > wrote in message
news:R1Xoa.556867$L1.162183@sccrnsc02...
> no i didn't intially use useraccount2 to deactivate or remove these
> accounts. first i clicked on my computer then properties and adanced and
> user profiles. deleted the assoc. files that way and then through
> useraccounts HE. however, when I try to add accounts with the same or
> similiar names i get a message that says "account / username already
> exists"
>
> is there any way to fix this ?
>
> everything works fine on my computer and nothing out of the ordinary (as
> far
> as users accounts and privaleges go) except this.
>
> these accounts i am talking about (the hidden ones) do not show up in my
> normal log in screen but when i press CTRL+ALT+DEL twice to get the
> classic
> login, I type the hidden username and it logins in normally (like I just
> created the account) but when I look at my comptuer (the properties then
> advanced then user profiles) or useraccounts HE or useraccounts2 nothing
> is
> there.
>
> now am i making sense ?
>
>
> "Walter Clayton" > wrote in message
> ...
> > I can delete and readd accounts at will on both HE and Pro via the User
> > control panel applet.
> >
> > So you've done something very non-standard to get into the state you
> > indicate.
> >
> > If, as Mark indicated, you've been playing with "control userpasswords2"
> on
> > HE, you may have hosed things. Seriously so. So what I need to know is
> > exactly what you've done and in precisely what order, especially if
> > you've
> > been using "control userpasswords2" and this is an HE machine I'll have
> > to
> > repro to give you a specific set of instructions. Randomly fumbling
> > around
> > in this area of the registry is dangerous. The issue Mark referred to is
> > where some one uses "control userpasswords2" on HE in an attempt to set
> > a
> > user to Power user status. That causes an issue similar to what you're
> > observing.
> >
> > One other things that bothers me, is your still using the wrong
> terminology.
> > This issue has nothing to do with SIDs unless you've been playing with
> > 3rd
> > party tools without understanding what you're doing. And if you have
> > been
> > doing that, then I need to know what tool(s) and what you've done.
> >
> > --
> > Walter Clayton - MS MVP(WinXP)
> > Associate Expert
> > http://www.microsoft.com/windowsxp/expertzone
> > Any technology distinguishable from magic is insufficiently advanced.
> > http://www.dts-l.org
> > http://support.microsoft.com/servicedesks/fileversion/default.asp
> >
> >
> > "rtdos" > wrote in message
> > m...
> > > yes i did delete EVERYTHING about the users accounts and I don have
> > > the proper SID numbers for each account. everytime I try to use user
> > > accounts to add these names in again it is telling me that username
> > > already exists. more examination has proven this.
> > >
> > >
> > >
> > > "Walter Clayton" > wrote in message
> > > >...
> > > > You're making a dangerous invalid assumption.
> > > >
> > > > How did you delete the user accounts and what options did you use?
> > > > Did
> > > > you
> > > > attempt to keep the ex-user's data files?
> > > >
> > > > --
> > > > Walter Clayton - MS MVP(WinXP)
> > > > Associate Expert
> > > > http://www.microsoft.com/windowsxp/expertzone
> > > > Any technology distinguishable from magic is insufficiently
> > > > advanced.
> > > > http://www.dts-l.org
> > > > http://support.microsoft.com/servicedesks/fileversion/default.asp
> > > >
> > > >
> > > > "rtdos" > wrote in message
> > > > news:XBSoa.314428$Zo.63131@sccrnsc03...
> > > > > after I delete an account and I try to add a new account I get a
> > > > > message
> > > > > that says "such & such can't be added. that username already
> exists."
> > > > >
> > > > >
> > > > >
> > > > > "Roger Abell [MVP]" > wrote in message
> > > > > ...
> > > > > I do not know what you are expecting to find.
> > > > > When I look I never see deleted accounts, only the
> > > > > real, currently existing accounts are represented in
> > > > > the SAM.
> > > > >
> > > > > --
> > > > > Roger
> > > > >
> > > > > "rtdos" > wrote in message
> > > > > news:vOFoa.545018$3D1.299774@sccrnsc01...
> > > > > > i've tried that. and i still can't get access to the hidden
> > > > > > SID's
> > > > > > in
> > > > > > the
> > > > > > registry (the old login names).
> > > > > >
> > > > > >
> > > > > >
> > > > > > "Walter Clayton" > wrote in message
> > > > > > ...
> > > > > > > You're confusing terminology which is dangerous. That part of
> the
> > > > registry
> > > > > > > is difficult to access for the simple reason that doing the
> wrong
> > > > > > > thing
> > > > will
> > > > > > > cause some really major problems up to and including locking
> your
> > > > > > > self
> > > > out
> > > > > > > of the system or loosing all data.
> > > > > > >
> > > > > > > If you really want to take the chance, do a full system state
> > > > > > > backup
> > > > first.
> > > > > > > Then you simply have to set permissions on the appropriate
> > > > > > > registry
> > > > > > > branches. If you can't figure it from that hint, then you need
> to
> > > > > > > stay
> > > > out
> > > > > > > of that part of the registry.
> > > > > > >
> > > > > > > --
> > > > > > > Walter Clayton - MS MVP(WinXP)
> > > > > > > Associate Expert
> > > > > > > http://www.microsoft.com/windowsxp/expertzone
> > > > > > > Any technology distinguishable from magic is insufficiently
> > > > > > > advanced.
> > > > > > > http://www.dts-l.org
> > > > > > >
> http://support.microsoft.com/servicedesks/fileversion/default.asp
> > > > > > >
> > > > > > >
> > > > > > > "rtdos" > wrote in message
> > > > > > > news:BcAoa.569376$S_4.627838@rwcrnsc53...
> > > > > > > > is there a way to show ALL SID's in registry {regedit.exe}
> > > > > > > > including
> > > > > > > > hidden
> > > > > > > > SID's and SID's from old users accounts ?
> > > > > > > >
> > > > > > > > --
> > > > > > > > *** REPLY REQUESTED WHEN CONVENIENT ***
> > > > > > > >
> > > > > > > > Jeff
> > > > > > > > http://geocities.com/rtdos
> > > > > > > >
> > > > > > > >
> > > > > > >
> > > > > >
> > > > > >
> > > > >
> > > > >
> >
> >
>
>
rtdos
December 5th 03, 07:32 PM
yes, these were normal users accounts that i created.
"Walter Clayton" > wrote in message
...
> Were these accounts that you created or were they on the machine when you
> received it?
>
> And yes, it sounds like you did some things backwards (deleting the user
> account you simply follow the prompts; there's no need to manually delete
> anything from the standard data structure. You implied that you deleted
the
> data first then the user account), but I'm more concerned at present as to
> specifically what kind of accounts you're attempting to delete. As was
> mentioned elsewhere, there are some accounts that the system requires to
> function and will not show up in most places, although they can be logged
> into. Deleting these accounts will render your machine nothing more than a
> high priced door stop.
>
>
> --
> Walter Clayton - MS MVP(WinXP)
> Associate Expert
> http://www.microsoft.com/windowsxp/expertzone
> Any technology distinguishable from magic is insufficiently advanced.
> http://www.dts-l.org
> http://support.microsoft.com/servicedesks/fileversion/default.asp
>
>
> "rtdos" > wrote in message
> news:R1Xoa.556867$L1.162183@sccrnsc02...
> > no i didn't intially use useraccount2 to deactivate or remove these
> > accounts. first i clicked on my computer then properties and adanced
and
> > user profiles. deleted the assoc. files that way and then through
> > useraccounts HE. however, when I try to add accounts with the same or
> > similiar names i get a message that says "account / username already
> > exists"
> >
> > is there any way to fix this ?
> >
> > everything works fine on my computer and nothing out of the ordinary (as
> > far
> > as users accounts and privaleges go) except this.
> >
> > these accounts i am talking about (the hidden ones) do not show up in my
> > normal log in screen but when i press CTRL+ALT+DEL twice to get the
> > classic
> > login, I type the hidden username and it logins in normally (like I just
> > created the account) but when I look at my comptuer (the properties then
> > advanced then user profiles) or useraccounts HE or useraccounts2 nothing
> > is
> > there.
> >
> > now am i making sense ?
> >
> >
> > "Walter Clayton" > wrote in message
> > ...
> > > I can delete and readd accounts at will on both HE and Pro via the
User
> > > control panel applet.
> > >
> > > So you've done something very non-standard to get into the state you
> > > indicate.
> > >
> > > If, as Mark indicated, you've been playing with "control
userpasswords2"
> > on
> > > HE, you may have hosed things. Seriously so. So what I need to know is
> > > exactly what you've done and in precisely what order, especially if
> > > you've
> > > been using "control userpasswords2" and this is an HE machine I'll
have
> > > to
> > > repro to give you a specific set of instructions. Randomly fumbling
> > > around
> > > in this area of the registry is dangerous. The issue Mark referred to
is
> > > where some one uses "control userpasswords2" on HE in an attempt to
set
> > > a
> > > user to Power user status. That causes an issue similar to what you're
> > > observing.
> > >
> > > One other things that bothers me, is your still using the wrong
> > terminology.
> > > This issue has nothing to do with SIDs unless you've been playing with
> > > 3rd
> > > party tools without understanding what you're doing. And if you have
> > > been
> > > doing that, then I need to know what tool(s) and what you've done.
> > >
> > > --
> > > Walter Clayton - MS MVP(WinXP)
> > > Associate Expert
> > > http://www.microsoft.com/windowsxp/expertzone
> > > Any technology distinguishable from magic is insufficiently advanced.
> > > http://www.dts-l.org
> > > http://support.microsoft.com/servicedesks/fileversion/default.asp
> > >
> > >
> > > "rtdos" > wrote in message
> > > m...
> > > > yes i did delete EVERYTHING about the users accounts and I don have
> > > > the proper SID numbers for each account. everytime I try to use
user
> > > > accounts to add these names in again it is telling me that username
> > > > already exists. more examination has proven this.
> > > >
> > > >
> > > >
> > > > "Walter Clayton" > wrote in message
> > > > >...
> > > > > You're making a dangerous invalid assumption.
> > > > >
> > > > > How did you delete the user accounts and what options did you use?
> > > > > Did
> > > > > you
> > > > > attempt to keep the ex-user's data files?
> > > > >
> > > > > --
> > > > > Walter Clayton - MS MVP(WinXP)
> > > > > Associate Expert
> > > > > http://www.microsoft.com/windowsxp/expertzone
> > > > > Any technology distinguishable from magic is insufficiently
> > > > > advanced.
> > > > > http://www.dts-l.org
> > > > > http://support.microsoft.com/servicedesks/fileversion/default.asp
> > > > >
> > > > >
> > > > > "rtdos" > wrote in message
> > > > > news:XBSoa.314428$Zo.63131@sccrnsc03...
> > > > > > after I delete an account and I try to add a new account I get a
> > > > > > message
> > > > > > that says "such & such can't be added. that username already
> > exists."
> > > > > >
> > > > > >
> > > > > >
> > > > > > "Roger Abell [MVP]" > wrote in message
> > > > > > ...
> > > > > > I do not know what you are expecting to find.
> > > > > > When I look I never see deleted accounts, only the
> > > > > > real, currently existing accounts are represented in
> > > > > > the SAM.
> > > > > >
> > > > > > --
> > > > > > Roger
> > > > > >
> > > > > > "rtdos" > wrote in message
> > > > > > news:vOFoa.545018$3D1.299774@sccrnsc01...
> > > > > > > i've tried that. and i still can't get access to the hidden
> > > > > > > SID's
> > > > > > > in
> > > > > > > the
> > > > > > > registry (the old login names).
> > > > > > >
> > > > > > >
> > > > > > >
> > > > > > > "Walter Clayton" > wrote in message
> > > > > > > ...
> > > > > > > > You're confusing terminology which is dangerous. That part
of
> > the
> > > > > registry
> > > > > > > > is difficult to access for the simple reason that doing the
> > wrong
> > > > > > > > thing
> > > > > will
> > > > > > > > cause some really major problems up to and including locking
> > your
> > > > > > > > self
> > > > > out
> > > > > > > > of the system or loosing all data.
> > > > > > > >
> > > > > > > > If you really want to take the chance, do a full system
state
> > > > > > > > backup
> > > > > first.
> > > > > > > > Then you simply have to set permissions on the appropriate
> > > > > > > > registry
> > > > > > > > branches. If you can't figure it from that hint, then you
need
> > to
> > > > > > > > stay
> > > > > out
> > > > > > > > of that part of the registry.
> > > > > > > >
> > > > > > > > --
> > > > > > > > Walter Clayton - MS MVP(WinXP)
> > > > > > > > Associate Expert
> > > > > > > > http://www.microsoft.com/windowsxp/expertzone
> > > > > > > > Any technology distinguishable from magic is insufficiently
> > > > > > > > advanced.
> > > > > > > > http://www.dts-l.org
> > > > > > > >
> > http://support.microsoft.com/servicedesks/fileversion/default.asp
> > > > > > > >
> > > > > > > >
> > > > > > > > "rtdos" > wrote in message
> > > > > > > > news:BcAoa.569376$S_4.627838@rwcrnsc53...
> > > > > > > > > is there a way to show ALL SID's in registry {regedit.exe}
> > > > > > > > > including
> > > > > > > > > hidden
> > > > > > > > > SID's and SID's from old users accounts ?
> > > > > > > > >
> > > > > > > > > --
> > > > > > > > > *** REPLY REQUESTED WHEN CONVENIENT ***
> > > > > > > > >
> > > > > > > > > Jeff
> > > > > > > > > http://geocities.com/rtdos
> > > > > > > > >
> > > > > > > > >
> > > > > > > >
> > > > > > >
> > > > > > >
> > > > > >
> > > > > >
> > >
> > >
> >
> >
>
Walter Clayton
December 5th 03, 07:32 PM
OK. What exactly was the sequence of events when you removed the accounts?
Did you delete the user data structures under "Documents and settings" and
then attempt to remove the users via the User applet? Or did you use the
remove function that is part of "control userpasswords2"?
I have to know exactly what you did and in what order or I'm not going to be
able to help. And don't be embarrassed if you think you did something
"stupid" out of ignorance. It sounds like you did the latter under the
circumstances, but I can't help if you're not telling me everything. As is,
I still don't see how you got into the mess you have. The reason why I'm not
revealing the detail at present is the simple fact that the data structure
in that part of the registry is tricky and it's not isolated. If I give you
the wrong information based on lack of information coming from you, then you
might as well do a scratch reinstall now. As is there is the possibility
that some other software tools may help, but again, you're keeping me in the
dark as to exactly what's happened. There is some general stuff I can throw
at you, but so far I don't get warm fuzzies and at the moment I seriously
think you'll make matters worse.
Start with the exact steps you go through when you delete a user account.
FYI: if you want to get a handle on what's involved, go to
http://www.sysinternals.com and download NTRegmon. Install it, launch it and
then launch the User control panel applet. If you really want to get
inundated, run filemon from the same site concurrently.
--
Walter Clayton - MS MVP(WinXP)
Associate Expert
http://www.microsoft.com/windowsxp/expertzone
Any technology distinguishable from magic is insufficiently advanced.
http://www.dts-l.org
http://support.microsoft.com/servicedesks/fileversion/default.asp
"rtdos" > wrote in message
news:Qz%oa.321387$Zo.64174@sccrnsc03...
> yes, these were normal users accounts that i created.
>
>
> "Walter Clayton" > wrote in message
> ...
> > Were these accounts that you created or were they on the machine when
> > you
> > received it?
> >
> > And yes, it sounds like you did some things backwards (deleting the user
> > account you simply follow the prompts; there's no need to manually
> > delete
> > anything from the standard data structure. You implied that you deleted
> the
> > data first then the user account), but I'm more concerned at present as
> > to
> > specifically what kind of accounts you're attempting to delete. As was
> > mentioned elsewhere, there are some accounts that the system requires to
> > function and will not show up in most places, although they can be
> > logged
> > into. Deleting these accounts will render your machine nothing more than
> > a
> > high priced door stop.
> >
> >
> > --
> > Walter Clayton - MS MVP(WinXP)
> > Associate Expert
> > http://www.microsoft.com/windowsxp/expertzone
> > Any technology distinguishable from magic is insufficiently advanced.
> > http://www.dts-l.org
> > http://support.microsoft.com/servicedesks/fileversion/default.asp
> >
> >
> > "rtdos" > wrote in message
> > news:R1Xoa.556867$L1.162183@sccrnsc02...
> > > no i didn't intially use useraccount2 to deactivate or remove these
> > > accounts. first i clicked on my computer then properties and adanced
> and
> > > user profiles. deleted the assoc. files that way and then through
> > > useraccounts HE. however, when I try to add accounts with the same or
> > > similiar names i get a message that says "account / username already
> > > exists"
> > >
> > > is there any way to fix this ?
> > >
> > > everything works fine on my computer and nothing out of the ordinary
> > > (as
> > > far
> > > as users accounts and privaleges go) except this.
> > >
> > > these accounts i am talking about (the hidden ones) do not show up in
> > > my
> > > normal log in screen but when i press CTRL+ALT+DEL twice to get the
> > > classic
> > > login, I type the hidden username and it logins in normally (like I
> > > just
> > > created the account) but when I look at my comptuer (the properties
> > > then
> > > advanced then user profiles) or useraccounts HE or useraccounts2
> > > nothing
> > > is
> > > there.
> > >
> > > now am i making sense ?
> > >
> > >
> > > "Walter Clayton" > wrote in message
> > > ...
> > > > I can delete and readd accounts at will on both HE and Pro via the
> User
> > > > control panel applet.
> > > >
> > > > So you've done something very non-standard to get into the state you
> > > > indicate.
> > > >
> > > > If, as Mark indicated, you've been playing with "control
> userpasswords2"
> > > on
> > > > HE, you may have hosed things. Seriously so. So what I need to know
> > > > is
> > > > exactly what you've done and in precisely what order, especially if
> > > > you've
> > > > been using "control userpasswords2" and this is an HE machine I'll
> have
> > > > to
> > > > repro to give you a specific set of instructions. Randomly fumbling
> > > > around
> > > > in this area of the registry is dangerous. The issue Mark referred
> > > > to
> is
> > > > where some one uses "control userpasswords2" on HE in an attempt to
> set
> > > > a
> > > > user to Power user status. That causes an issue similar to what
> > > > you're
> > > > observing.
> > > >
> > > > One other things that bothers me, is your still using the wrong
> > > terminology.
> > > > This issue has nothing to do with SIDs unless you've been playing
> > > > with
> > > > 3rd
> > > > party tools without understanding what you're doing. And if you have
> > > > been
> > > > doing that, then I need to know what tool(s) and what you've done.
> > > >
> > > > --
> > > > Walter Clayton - MS MVP(WinXP)
> > > > Associate Expert
> > > > http://www.microsoft.com/windowsxp/expertzone
> > > > Any technology distinguishable from magic is insufficiently
> > > > advanced.
> > > > http://www.dts-l.org
> > > > http://support.microsoft.com/servicedesks/fileversion/default.asp
> > > >
> > > >
> > > > "rtdos" > wrote in message
> > > > m...
> > > > > yes i did delete EVERYTHING about the users accounts and I don
> > > > > have
> > > > > the proper SID numbers for each account. everytime I try to use
> user
> > > > > accounts to add these names in again it is telling me that
> > > > > username
> > > > > already exists. more examination has proven this.
> > > > >
> > > > >
> > > > >
> > > > > "Walter Clayton" > wrote in message
> > > > > >...
> > > > > > You're making a dangerous invalid assumption.
> > > > > >
> > > > > > How did you delete the user accounts and what options did you
> > > > > > use?
> > > > > > Did
> > > > > > you
> > > > > > attempt to keep the ex-user's data files?
> > > > > >
> > > > > > --
> > > > > > Walter Clayton - MS MVP(WinXP)
> > > > > > Associate Expert
> > > > > > http://www.microsoft.com/windowsxp/expertzone
> > > > > > Any technology distinguishable from magic is insufficiently
> > > > > > advanced.
> > > > > > http://www.dts-l.org
> > > > > > http://support.microsoft.com/servicedesks/fileversion/default.asp
> > > > > >
> > > > > >
> > > > > > "rtdos" > wrote in message
> > > > > > news:XBSoa.314428$Zo.63131@sccrnsc03...
> > > > > > > after I delete an account and I try to add a new account I get
> > > > > > > a
> > > > > > > message
> > > > > > > that says "such & such can't be added. that username already
> > > exists."
> > > > > > >
> > > > > > >
> > > > > > >
> > > > > > > "Roger Abell [MVP]" > wrote in message
> > > > > > > ...
> > > > > > > I do not know what you are expecting to find.
> > > > > > > When I look I never see deleted accounts, only the
> > > > > > > real, currently existing accounts are represented in
> > > > > > > the SAM.
> > > > > > >
> > > > > > > --
> > > > > > > Roger
> > > > > > >
> > > > > > > "rtdos" > wrote in message
> > > > > > > news:vOFoa.545018$3D1.299774@sccrnsc01...
> > > > > > > > i've tried that. and i still can't get access to the hidden
> > > > > > > > SID's
> > > > > > > > in
> > > > > > > > the
> > > > > > > > registry (the old login names).
> > > > > > > >
> > > > > > > >
> > > > > > > >
> > > > > > > > "Walter Clayton" > wrote in message
> > > > > > > > ...
> > > > > > > > > You're confusing terminology which is dangerous. That part
> of
> > > the
> > > > > > registry
> > > > > > > > > is difficult to access for the simple reason that doing
> > > > > > > > > the
> > > wrong
> > > > > > > > > thing
> > > > > > will
> > > > > > > > > cause some really major problems up to and including
> > > > > > > > > locking
> > > your
> > > > > > > > > self
> > > > > > out
> > > > > > > > > of the system or loosing all data.
> > > > > > > > >
> > > > > > > > > If you really want to take the chance, do a full system
> state
> > > > > > > > > backup
> > > > > > first.
> > > > > > > > > Then you simply have to set permissions on the appropriate
> > > > > > > > > registry
> > > > > > > > > branches. If you can't figure it from that hint, then you
> need
> > > to
> > > > > > > > > stay
> > > > > > out
> > > > > > > > > of that part of the registry.
> > > > > > > > >
> > > > > > > > > --
> > > > > > > > > Walter Clayton - MS MVP(WinXP)
> > > > > > > > > Associate Expert
> > > > > > > > > http://www.microsoft.com/windowsxp/expertzone
> > > > > > > > > Any technology distinguishable from magic is
> > > > > > > > > insufficiently
> > > > > > > > > advanced.
> > > > > > > > > http://www.dts-l.org
> > > > > > > > >
> > > http://support.microsoft.com/servicedesks/fileversion/default.asp
> > > > > > > > >
> > > > > > > > >
> > > > > > > > > "rtdos" > wrote in message
> > > > > > > > > news:BcAoa.569376$S_4.627838@rwcrnsc53...
> > > > > > > > > > is there a way to show ALL SID's in registry
> > > > > > > > > > {regedit.exe}
> > > > > > > > > > including
> > > > > > > > > > hidden
> > > > > > > > > > SID's and SID's from old users accounts ?
> > > > > > > > > >
> > > > > > > > > > --
> > > > > > > > > > *** REPLY REQUESTED WHEN CONVENIENT ***
> > > > > > > > > >
> > > > > > > > > > Jeff
> > > > > > > > > > http://geocities.com/rtdos
> > > > > > > > > >
> > > > > > > > > >
> > > > > > > > >
> > > > > > > >
> > > > > > > >
> > > > > > >
> > > > > > >
> > > >
> > > >
> > >
> > >
> >
>
>
rtdos
December 5th 03, 07:32 PM
i deleted the user data structure under documents and settings and then
proceded to remove the accounts under user apple (he). it did remove the
accounts from the login menu as well as the user accounts (HE) and user
accounts2 applets but did not totally clear them from the registry as I am
able to press CTRL+ALT+DEL (twice) to get the classic login and
"re-activate" these accounts but they still do not show up in the login menu
or the applets.
"Walter Clayton" > wrote in message
...
> OK. What exactly was the sequence of events when you removed the accounts?
> Did you delete the user data structures under "Documents and settings" and
> then attempt to remove the users via the User applet? Or did you use the
> remove function that is part of "control userpasswords2"?
>
> I have to know exactly what you did and in what order or I'm not going to
be
> able to help. And don't be embarrassed if you think you did something
> "stupid" out of ignorance. It sounds like you did the latter under the
> circumstances, but I can't help if you're not telling me everything. As
is,
> I still don't see how you got into the mess you have. The reason why I'm
not
> revealing the detail at present is the simple fact that the data structure
> in that part of the registry is tricky and it's not isolated. If I give
you
> the wrong information based on lack of information coming from you, then
you
> might as well do a scratch reinstall now. As is there is the possibility
> that some other software tools may help, but again, you're keeping me in
the
> dark as to exactly what's happened. There is some general stuff I can
throw
> at you, but so far I don't get warm fuzzies and at the moment I seriously
> think you'll make matters worse.
>
> Start with the exact steps you go through when you delete a user account.
>
> FYI: if you want to get a handle on what's involved, go to
> http://www.sysinternals.com and download NTRegmon. Install it, launch it
and
> then launch the User control panel applet. If you really want to get
> inundated, run filemon from the same site concurrently.
>
> --
> Walter Clayton - MS MVP(WinXP)
> Associate Expert
> http://www.microsoft.com/windowsxp/expertzone
> Any technology distinguishable from magic is insufficiently advanced.
> http://www.dts-l.org
> http://support.microsoft.com/servicedesks/fileversion/default.asp
>
>
> "rtdos" > wrote in message
> news:Qz%oa.321387$Zo.64174@sccrnsc03...
> > yes, these were normal users accounts that i created.
> >
> >
> > "Walter Clayton" > wrote in message
> > ...
> > > Were these accounts that you created or were they on the machine when
> > > you
> > > received it?
> > >
> > > And yes, it sounds like you did some things backwards (deleting the
user
> > > account you simply follow the prompts; there's no need to manually
> > > delete
> > > anything from the standard data structure. You implied that you
deleted
> > the
> > > data first then the user account), but I'm more concerned at present
as
> > > to
> > > specifically what kind of accounts you're attempting to delete. As was
> > > mentioned elsewhere, there are some accounts that the system requires
to
> > > function and will not show up in most places, although they can be
> > > logged
> > > into. Deleting these accounts will render your machine nothing more
than
> > > a
> > > high priced door stop.
> > >
> > >
> > > --
> > > Walter Clayton - MS MVP(WinXP)
> > > Associate Expert
> > > http://www.microsoft.com/windowsxp/expertzone
> > > Any technology distinguishable from magic is insufficiently advanced.
> > > http://www.dts-l.org
> > > http://support.microsoft.com/servicedesks/fileversion/default.asp
> > >
> > >
> > > "rtdos" > wrote in message
> > > news:R1Xoa.556867$L1.162183@sccrnsc02...
> > > > no i didn't intially use useraccount2 to deactivate or remove these
> > > > accounts. first i clicked on my computer then properties and
adanced
> > and
> > > > user profiles. deleted the assoc. files that way and then through
> > > > useraccounts HE. however, when I try to add accounts with the same
or
> > > > similiar names i get a message that says "account / username already
> > > > exists"
> > > >
> > > > is there any way to fix this ?
> > > >
> > > > everything works fine on my computer and nothing out of the ordinary
> > > > (as
> > > > far
> > > > as users accounts and privaleges go) except this.
> > > >
> > > > these accounts i am talking about (the hidden ones) do not show up
in
> > > > my
> > > > normal log in screen but when i press CTRL+ALT+DEL twice to get the
> > > > classic
> > > > login, I type the hidden username and it logins in normally (like I
> > > > just
> > > > created the account) but when I look at my comptuer (the properties
> > > > then
> > > > advanced then user profiles) or useraccounts HE or useraccounts2
> > > > nothing
> > > > is
> > > > there.
> > > >
> > > > now am i making sense ?
> > > >
> > > >
> > > > "Walter Clayton" > wrote in message
> > > > ...
> > > > > I can delete and readd accounts at will on both HE and Pro via the
> > User
> > > > > control panel applet.
> > > > >
> > > > > So you've done something very non-standard to get into the state
you
> > > > > indicate.
> > > > >
> > > > > If, as Mark indicated, you've been playing with "control
> > userpasswords2"
> > > > on
> > > > > HE, you may have hosed things. Seriously so. So what I need to
know
> > > > > is
> > > > > exactly what you've done and in precisely what order, especially
if
> > > > > you've
> > > > > been using "control userpasswords2" and this is an HE machine I'll
> > have
> > > > > to
> > > > > repro to give you a specific set of instructions. Randomly
fumbling
> > > > > around
> > > > > in this area of the registry is dangerous. The issue Mark referred
> > > > > to
> > is
> > > > > where some one uses "control userpasswords2" on HE in an attempt
to
> > set
> > > > > a
> > > > > user to Power user status. That causes an issue similar to what
> > > > > you're
> > > > > observing.
> > > > >
> > > > > One other things that bothers me, is your still using the wrong
> > > > terminology.
> > > > > This issue has nothing to do with SIDs unless you've been playing
> > > > > with
> > > > > 3rd
> > > > > party tools without understanding what you're doing. And if you
have
> > > > > been
> > > > > doing that, then I need to know what tool(s) and what you've done.
> > > > >
> > > > > --
> > > > > Walter Clayton - MS MVP(WinXP)
> > > > > Associate Expert
> > > > > http://www.microsoft.com/windowsxp/expertzone
> > > > > Any technology distinguishable from magic is insufficiently
> > > > > advanced.
> > > > > http://www.dts-l.org
> > > > > http://support.microsoft.com/servicedesks/fileversion/default.asp
> > > > >
> > > > >
> > > > > "rtdos" > wrote in message
> > > > > m...
> > > > > > yes i did delete EVERYTHING about the users accounts and I don
> > > > > > have
> > > > > > the proper SID numbers for each account. everytime I try to use
> > user
> > > > > > accounts to add these names in again it is telling me that
> > > > > > username
> > > > > > already exists. more examination has proven this.
> > > > > >
> > > > > >
> > > > > >
> > > > > > "Walter Clayton" > wrote in message
> > > > > > >...
> > > > > > > You're making a dangerous invalid assumption.
> > > > > > >
> > > > > > > How did you delete the user accounts and what options did you
> > > > > > > use?
> > > > > > > Did
> > > > > > > you
> > > > > > > attempt to keep the ex-user's data files?
> > > > > > >
> > > > > > > --
> > > > > > > Walter Clayton - MS MVP(WinXP)
> > > > > > > Associate Expert
> > > > > > > http://www.microsoft.com/windowsxp/expertzone
> > > > > > > Any technology distinguishable from magic is insufficiently
> > > > > > > advanced.
> > > > > > > http://www.dts-l.org
> > > > > > >
http://support.microsoft.com/servicedesks/fileversion/default.asp
> > > > > > >
> > > > > > >
> > > > > > > "rtdos" > wrote in message
> > > > > > > news:XBSoa.314428$Zo.63131@sccrnsc03...
> > > > > > > > after I delete an account and I try to add a new account I
get
> > > > > > > > a
> > > > > > > > message
> > > > > > > > that says "such & such can't be added. that username
already
> > > > exists."
> > > > > > > >
> > > > > > > >
> > > > > > > >
> > > > > > > > "Roger Abell [MVP]" > wrote in message
> > > > > > > > ...
> > > > > > > > I do not know what you are expecting to find.
> > > > > > > > When I look I never see deleted accounts, only the
> > > > > > > > real, currently existing accounts are represented in
> > > > > > > > the SAM.
> > > > > > > >
> > > > > > > > --
> > > > > > > > Roger
> > > > > > > >
> > > > > > > > "rtdos" > wrote in message
> > > > > > > > news:vOFoa.545018$3D1.299774@sccrnsc01...
> > > > > > > > > i've tried that. and i still can't get access to the
hidden
> > > > > > > > > SID's
> > > > > > > > > in
> > > > > > > > > the
> > > > > > > > > registry (the old login names).
> > > > > > > > >
> > > > > > > > >
> > > > > > > > >
> > > > > > > > > "Walter Clayton" > wrote in
message
> > > > > > > > > ...
> > > > > > > > > > You're confusing terminology which is dangerous. That
part
> > of
> > > > the
> > > > > > > registry
> > > > > > > > > > is difficult to access for the simple reason that doing
> > > > > > > > > > the
> > > > wrong
> > > > > > > > > > thing
> > > > > > > will
> > > > > > > > > > cause some really major problems up to and including
> > > > > > > > > > locking
> > > > your
> > > > > > > > > > self
> > > > > > > out
> > > > > > > > > > of the system or loosing all data.
> > > > > > > > > >
> > > > > > > > > > If you really want to take the chance, do a full system
> > state
> > > > > > > > > > backup
> > > > > > > first.
> > > > > > > > > > Then you simply have to set permissions on the
appropriate
> > > > > > > > > > registry
> > > > > > > > > > branches. If you can't figure it from that hint, then
you
> > need
> > > > to
> > > > > > > > > > stay
> > > > > > > out
> > > > > > > > > > of that part of the registry.
> > > > > > > > > >
> > > > > > > > > > --
> > > > > > > > > > Walter Clayton - MS MVP(WinXP)
> > > > > > > > > > Associate Expert
> > > > > > > > > > http://www.microsoft.com/windowsxp/expertzone
> > > > > > > > > > Any technology distinguishable from magic is
> > > > > > > > > > insufficiently
> > > > > > > > > > advanced.
> > > > > > > > > > http://www.dts-l.org
> > > > > > > > > >
> > > > http://support.microsoft.com/servicedesks/fileversion/default.asp
> > > > > > > > > >
> > > > > > > > > >
> > > > > > > > > > "rtdos" > wrote in message
> > > > > > > > > > news:BcAoa.569376$S_4.627838@rwcrnsc53...
> > > > > > > > > > > is there a way to show ALL SID's in registry
> > > > > > > > > > > {regedit.exe}
> > > > > > > > > > > including
> > > > > > > > > > > hidden
> > > > > > > > > > > SID's and SID's from old users accounts ?
> > > > > > > > > > >
> > > > > > > > > > > --
> > > > > > > > > > > *** REPLY REQUESTED WHEN CONVENIENT ***
> > > > > > > > > > >
> > > > > > > > > > > Jeff
> > > > > > > > > > > http://geocities.com/rtdos
> > > > > > > > > > >
> > > > > > > > > > >
> > > > > > > > > >
> > > > > > > > >
> > > > > > > > >
> > > > > > > >
> > > > > > > >
> > > > >
> > > > >
> > > >
> > > >
> > >
> >
> >
>
Walter Clayton
December 5th 03, 07:33 PM
Ok. You did things incorrectly. Let me repro and see what I can figure out.
One issue that I still have is the fact that the registry structure where
you may need to go is tricky. Personally I'd prefer you use a different set
of user ids and not salvage anything else, assuming it can be salvaged at
all. It'll be late tomorrow (US EST) before I get back, but I will get back.
I'm curious as to how this pans out myself.
--
Walter Clayton - MS MVP(WinXP)
Associate Expert
http://www.microsoft.com/windowsxp/expertzone
Any technology distinguishable from magic is insufficiently advanced.
http://www.dts-l.org
http://support.microsoft.com/servicedesks/fileversion/default.asp
"rtdos" > wrote in message
news:vK1pa.564087$F1.78114@sccrnsc04...
> i deleted the user data structure under documents and settings and then
> proceded to remove the accounts under user apple (he). it did remove the
> accounts from the login menu as well as the user accounts (HE) and user
> accounts2 applets but did not totally clear them from the registry as I am
> able to press CTRL+ALT+DEL (twice) to get the classic login and
> "re-activate" these accounts but they still do not show up in the login
> menu
> or the applets.
>
>
>
> "Walter Clayton" > wrote in message
> ...
> > OK. What exactly was the sequence of events when you removed the
> > accounts?
> > Did you delete the user data structures under "Documents and settings"
> > and
> > then attempt to remove the users via the User applet? Or did you use the
> > remove function that is part of "control userpasswords2"?
> >
> > I have to know exactly what you did and in what order or I'm not going
> > to
> be
> > able to help. And don't be embarrassed if you think you did something
> > "stupid" out of ignorance. It sounds like you did the latter under the
> > circumstances, but I can't help if you're not telling me everything. As
> is,
> > I still don't see how you got into the mess you have. The reason why I'm
> not
> > revealing the detail at present is the simple fact that the data
> > structure
> > in that part of the registry is tricky and it's not isolated. If I give
> you
> > the wrong information based on lack of information coming from you, then
> you
> > might as well do a scratch reinstall now. As is there is the possibility
> > that some other software tools may help, but again, you're keeping me in
> the
> > dark as to exactly what's happened. There is some general stuff I can
> throw
> > at you, but so far I don't get warm fuzzies and at the moment I
> > seriously
> > think you'll make matters worse.
> >
> > Start with the exact steps you go through when you delete a user
> > account.
> >
> > FYI: if you want to get a handle on what's involved, go to
> > http://www.sysinternals.com and download NTRegmon. Install it, launch it
> and
> > then launch the User control panel applet. If you really want to get
> > inundated, run filemon from the same site concurrently.
> >
> > --
> > Walter Clayton - MS MVP(WinXP)
> > Associate Expert
> > http://www.microsoft.com/windowsxp/expertzone
> > Any technology distinguishable from magic is insufficiently advanced.
> > http://www.dts-l.org
> > http://support.microsoft.com/servicedesks/fileversion/default.asp
> >
> >
> > "rtdos" > wrote in message
> > news:Qz%oa.321387$Zo.64174@sccrnsc03...
> > > yes, these were normal users accounts that i created.
> > >
> > >
> > > "Walter Clayton" > wrote in message
> > > ...
> > > > Were these accounts that you created or were they on the machine
> > > > when
> > > > you
> > > > received it?
> > > >
> > > > And yes, it sounds like you did some things backwards (deleting the
> user
> > > > account you simply follow the prompts; there's no need to manually
> > > > delete
> > > > anything from the standard data structure. You implied that you
> deleted
> > > the
> > > > data first then the user account), but I'm more concerned at present
> as
> > > > to
> > > > specifically what kind of accounts you're attempting to delete. As
> > > > was
> > > > mentioned elsewhere, there are some accounts that the system
> > > > requires
> to
> > > > function and will not show up in most places, although they can be
> > > > logged
> > > > into. Deleting these accounts will render your machine nothing more
> than
> > > > a
> > > > high priced door stop.
> > > >
> > > >
> > > > --
> > > > Walter Clayton - MS MVP(WinXP)
> > > > Associate Expert
> > > > http://www.microsoft.com/windowsxp/expertzone
> > > > Any technology distinguishable from magic is insufficiently
> > > > advanced.
> > > > http://www.dts-l.org
> > > > http://support.microsoft.com/servicedesks/fileversion/default.asp
> > > >
> > > >
> > > > "rtdos" > wrote in message
> > > > news:R1Xoa.556867$L1.162183@sccrnsc02...
> > > > > no i didn't intially use useraccount2 to deactivate or remove
> > > > > these
> > > > > accounts. first i clicked on my computer then properties and
> adanced
> > > and
> > > > > user profiles. deleted the assoc. files that way and then through
> > > > > useraccounts HE. however, when I try to add accounts with the
> > > > > same
> or
> > > > > similiar names i get a message that says "account / username
> > > > > already
> > > > > exists"
> > > > >
> > > > > is there any way to fix this ?
> > > > >
> > > > > everything works fine on my computer and nothing out of the
> > > > > ordinary
> > > > > (as
> > > > > far
> > > > > as users accounts and privaleges go) except this.
> > > > >
> > > > > these accounts i am talking about (the hidden ones) do not show up
> in
> > > > > my
> > > > > normal log in screen but when i press CTRL+ALT+DEL twice to get
> > > > > the
> > > > > classic
> > > > > login, I type the hidden username and it logins in normally (like
> > > > > I
> > > > > just
> > > > > created the account) but when I look at my comptuer (the
> > > > > properties
> > > > > then
> > > > > advanced then user profiles) or useraccounts HE or useraccounts2
> > > > > nothing
> > > > > is
> > > > > there.
> > > > >
> > > > > now am i making sense ?
> > > > >
> > > > >
> > > > > "Walter Clayton" > wrote in message
> > > > > ...
> > > > > > I can delete and readd accounts at will on both HE and Pro via
> > > > > > the
> > > User
> > > > > > control panel applet.
> > > > > >
> > > > > > So you've done something very non-standard to get into the state
> you
> > > > > > indicate.
> > > > > >
> > > > > > If, as Mark indicated, you've been playing with "control
> > > userpasswords2"
> > > > > on
> > > > > > HE, you may have hosed things. Seriously so. So what I need to
> know
> > > > > > is
> > > > > > exactly what you've done and in precisely what order, especially
> if
> > > > > > you've
> > > > > > been using "control userpasswords2" and this is an HE machine
> > > > > > I'll
> > > have
> > > > > > to
> > > > > > repro to give you a specific set of instructions. Randomly
> fumbling
> > > > > > around
> > > > > > in this area of the registry is dangerous. The issue Mark
> > > > > > referred
> > > > > > to
> > > is
> > > > > > where some one uses "control userpasswords2" on HE in an attempt
> to
> > > set
> > > > > > a
> > > > > > user to Power user status. That causes an issue similar to what
> > > > > > you're
> > > > > > observing.
> > > > > >
> > > > > > One other things that bothers me, is your still using the wrong
> > > > > terminology.
> > > > > > This issue has nothing to do with SIDs unless you've been
> > > > > > playing
> > > > > > with
> > > > > > 3rd
> > > > > > party tools without understanding what you're doing. And if you
> have
> > > > > > been
> > > > > > doing that, then I need to know what tool(s) and what you've
> > > > > > done.
> > > > > >
> > > > > > --
> > > > > > Walter Clayton - MS MVP(WinXP)
> > > > > > Associate Expert
> > > > > > http://www.microsoft.com/windowsxp/expertzone
> > > > > > Any technology distinguishable from magic is insufficiently
> > > > > > advanced.
> > > > > > http://www.dts-l.org
> > > > > > http://support.microsoft.com/servicedesks/fileversion/default.asp
> > > > > >
> > > > > >
> > > > > > "rtdos" > wrote in message
> > > > > > m...
> > > > > > > yes i did delete EVERYTHING about the users accounts and I don
> > > > > > > have
> > > > > > > the proper SID numbers for each account. everytime I try to
> > > > > > > use
> > > user
> > > > > > > accounts to add these names in again it is telling me that
> > > > > > > username
> > > > > > > already exists. more examination has proven this.
> > > > > > >
> > > > > > >
> > > > > > >
> > > > > > > "Walter Clayton" > wrote in message
> > > > > > > >...
> > > > > > > > You're making a dangerous invalid assumption.
> > > > > > > >
> > > > > > > > How did you delete the user accounts and what options did
> > > > > > > > you
> > > > > > > > use?
> > > > > > > > Did
> > > > > > > > you
> > > > > > > > attempt to keep the ex-user's data files?
> > > > > > > >
> > > > > > > > --
> > > > > > > > Walter Clayton - MS MVP(WinXP)
> > > > > > > > Associate Expert
> > > > > > > > http://www.microsoft.com/windowsxp/expertzone
> > > > > > > > Any technology distinguishable from magic is insufficiently
> > > > > > > > advanced.
> > > > > > > > http://www.dts-l.org
> > > > > > > >
> http://support.microsoft.com/servicedesks/fileversion/default.asp
> > > > > > > >
> > > > > > > >
> > > > > > > > "rtdos" > wrote in message
> > > > > > > > news:XBSoa.314428$Zo.63131@sccrnsc03...
> > > > > > > > > after I delete an account and I try to add a new account I
> get
> > > > > > > > > a
> > > > > > > > > message
> > > > > > > > > that says "such & such can't be added. that username
> already
> > > > > exists."
> > > > > > > > >
> > > > > > > > >
> > > > > > > > >
> > > > > > > > > "Roger Abell [MVP]" > wrote in message
> > > > > > > > > ...
> > > > > > > > > I do not know what you are expecting to find.
> > > > > > > > > When I look I never see deleted accounts, only the
> > > > > > > > > real, currently existing accounts are represented in
> > > > > > > > > the SAM.
> > > > > > > > >
> > > > > > > > > --
> > > > > > > > > Roger
> > > > > > > > >
> > > > > > > > > "rtdos" > wrote in message
> > > > > > > > > news:vOFoa.545018$3D1.299774@sccrnsc01...
> > > > > > > > > > i've tried that. and i still can't get access to the
> hidden
> > > > > > > > > > SID's
> > > > > > > > > > in
> > > > > > > > > > the
> > > > > > > > > > registry (the old login names).
> > > > > > > > > >
> > > > > > > > > >
> > > > > > > > > >
> > > > > > > > > > "Walter Clayton" > wrote in
> message
> > > > > > > > > > ...
> > > > > > > > > > > You're confusing terminology which is dangerous. That
> part
> > > of
> > > > > the
> > > > > > > > registry
> > > > > > > > > > > is difficult to access for the simple reason that
> > > > > > > > > > > doing
> > > > > > > > > > > the
> > > > > wrong
> > > > > > > > > > > thing
> > > > > > > > will
> > > > > > > > > > > cause some really major problems up to and including
> > > > > > > > > > > locking
> > > > > your
> > > > > > > > > > > self
> > > > > > > > out
> > > > > > > > > > > of the system or loosing all data.
> > > > > > > > > > >
> > > > > > > > > > > If you really want to take the chance, do a full
> > > > > > > > > > > system
> > > state
> > > > > > > > > > > backup
> > > > > > > > first.
> > > > > > > > > > > Then you simply have to set permissions on the
> appropriate
> > > > > > > > > > > registry
> > > > > > > > > > > branches. If you can't figure it from that hint, then
> you
> > > need
> > > > > to
> > > > > > > > > > > stay
> > > > > > > > out
> > > > > > > > > > > of that part of the registry.
> > > > > > > > > > >
> > > > > > > > > > > --
> > > > > > > > > > > Walter Clayton - MS MVP(WinXP)
> > > > > > > > > > > Associate Expert
> > > > > > > > > > > http://www.microsoft.com/windowsxp/expertzone
> > > > > > > > > > > Any technology distinguishable from magic is
> > > > > > > > > > > insufficiently
> > > > > > > > > > > advanced.
> > > > > > > > > > > http://www.dts-l.org
> > > > > > > > > > >
> > > > > http://support.microsoft.com/servicedesks/fileversion/default.asp
> > > > > > > > > > >
> > > > > > > > > > >
> > > > > > > > > > > "rtdos" > wrote in message
> > > > > > > > > > > news:BcAoa.569376$S_4.627838@rwcrnsc53...
> > > > > > > > > > > > is there a way to show ALL SID's in registry
> > > > > > > > > > > > {regedit.exe}
> > > > > > > > > > > > including
> > > > > > > > > > > > hidden
> > > > > > > > > > > > SID's and SID's from old users accounts ?
> > > > > > > > > > > >
> > > > > > > > > > > > --
> > > > > > > > > > > > *** REPLY REQUESTED WHEN CONVENIENT ***
> > > > > > > > > > > >
> > > > > > > > > > > > Jeff
> > > > > > > > > > > > http://geocities.com/rtdos
> > > > > > > > > > > >
> > > > > > > > > > > >
> > > > > > > > > > >
> > > > > > > > > >
> > > > > > > > > >
> > > > > > > > >
> > > > > > > > >
> > > > > >
> > > > > >
> > > > >
> > > > >
> > > >
> > >
> > >
> >
>
>
rtdos
December 5th 03, 07:35 PM
ok, i will be here...
"Walter Clayton" > wrote in message
...
> Ok. You did things incorrectly. Let me repro and see what I can figure
out.
> One issue that I still have is the fact that the registry structure where
> you may need to go is tricky. Personally I'd prefer you use a different
set
> of user ids and not salvage anything else, assuming it can be salvaged at
> all. It'll be late tomorrow (US EST) before I get back, but I will get
back.
> I'm curious as to how this pans out myself.
>
> --
> Walter Clayton - MS MVP(WinXP)
> Associate Expert
> http://www.microsoft.com/windowsxp/expertzone
> Any technology distinguishable from magic is insufficiently advanced.
> http://www.dts-l.org
> http://support.microsoft.com/servicedesks/fileversion/default.asp
>
>
> "rtdos" > wrote in message
> news:vK1pa.564087$F1.78114@sccrnsc04...
> > i deleted the user data structure under documents and settings and then
> > proceded to remove the accounts under user apple (he). it did remove
the
> > accounts from the login menu as well as the user accounts (HE) and user
> > accounts2 applets but did not totally clear them from the registry as I
am
> > able to press CTRL+ALT+DEL (twice) to get the classic login and
> > "re-activate" these accounts but they still do not show up in the login
> > menu
> > or the applets.
> >
> >
> >
> > "Walter Clayton" > wrote in message
> > ...
> > > OK. What exactly was the sequence of events when you removed the
> > > accounts?
> > > Did you delete the user data structures under "Documents and settings"
> > > and
> > > then attempt to remove the users via the User applet? Or did you use
the
> > > remove function that is part of "control userpasswords2"?
> > >
> > > I have to know exactly what you did and in what order or I'm not going
> > > to
> > be
> > > able to help. And don't be embarrassed if you think you did something
> > > "stupid" out of ignorance. It sounds like you did the latter under the
> > > circumstances, but I can't help if you're not telling me everything.
As
> > is,
> > > I still don't see how you got into the mess you have. The reason why
I'm
> > not
> > > revealing the detail at present is the simple fact that the data
> > > structure
> > > in that part of the registry is tricky and it's not isolated. If I
give
> > you
> > > the wrong information based on lack of information coming from you,
then
> > you
> > > might as well do a scratch reinstall now. As is there is the
possibility
> > > that some other software tools may help, but again, you're keeping me
in
> > the
> > > dark as to exactly what's happened. There is some general stuff I can
> > throw
> > > at you, but so far I don't get warm fuzzies and at the moment I
> > > seriously
> > > think you'll make matters worse.
> > >
> > > Start with the exact steps you go through when you delete a user
> > > account.
> > >
> > > FYI: if you want to get a handle on what's involved, go to
> > > http://www.sysinternals.com and download NTRegmon. Install it, launch
it
> > and
> > > then launch the User control panel applet. If you really want to get
> > > inundated, run filemon from the same site concurrently.
> > >
> > > --
> > > Walter Clayton - MS MVP(WinXP)
> > > Associate Expert
> > > http://www.microsoft.com/windowsxp/expertzone
> > > Any technology distinguishable from magic is insufficiently advanced.
> > > http://www.dts-l.org
> > > http://support.microsoft.com/servicedesks/fileversion/default.asp
> > >
> > >
> > > "rtdos" > wrote in message
> > > news:Qz%oa.321387$Zo.64174@sccrnsc03...
> > > > yes, these were normal users accounts that i created.
> > > >
> > > >
> > > > "Walter Clayton" > wrote in message
> > > > ...
> > > > > Were these accounts that you created or were they on the machine
> > > > > when
> > > > > you
> > > > > received it?
> > > > >
> > > > > And yes, it sounds like you did some things backwards (deleting
the
> > user
> > > > > account you simply follow the prompts; there's no need to manually
> > > > > delete
> > > > > anything from the standard data structure. You implied that you
> > deleted
> > > > the
> > > > > data first then the user account), but I'm more concerned at
present
> > as
> > > > > to
> > > > > specifically what kind of accounts you're attempting to delete. As
> > > > > was
> > > > > mentioned elsewhere, there are some accounts that the system
> > > > > requires
> > to
> > > > > function and will not show up in most places, although they can be
> > > > > logged
> > > > > into. Deleting these accounts will render your machine nothing
more
> > than
> > > > > a
> > > > > high priced door stop.
> > > > >
> > > > >
> > > > > --
> > > > > Walter Clayton - MS MVP(WinXP)
> > > > > Associate Expert
> > > > > http://www.microsoft.com/windowsxp/expertzone
> > > > > Any technology distinguishable from magic is insufficiently
> > > > > advanced.
> > > > > http://www.dts-l.org
> > > > > http://support.microsoft.com/servicedesks/fileversion/default.asp
> > > > >
> > > > >
> > > > > "rtdos" > wrote in message
> > > > > news:R1Xoa.556867$L1.162183@sccrnsc02...
> > > > > > no i didn't intially use useraccount2 to deactivate or remove
> > > > > > these
> > > > > > accounts. first i clicked on my computer then properties and
> > adanced
> > > > and
> > > > > > user profiles. deleted the assoc. files that way and then
through
> > > > > > useraccounts HE. however, when I try to add accounts with the
> > > > > > same
> > or
> > > > > > similiar names i get a message that says "account / username
> > > > > > already
> > > > > > exists"
> > > > > >
> > > > > > is there any way to fix this ?
> > > > > >
> > > > > > everything works fine on my computer and nothing out of the
> > > > > > ordinary
> > > > > > (as
> > > > > > far
> > > > > > as users accounts and privaleges go) except this.
> > > > > >
> > > > > > these accounts i am talking about (the hidden ones) do not show
up
> > in
> > > > > > my
> > > > > > normal log in screen but when i press CTRL+ALT+DEL twice to get
> > > > > > the
> > > > > > classic
> > > > > > login, I type the hidden username and it logins in normally
(like
> > > > > > I
> > > > > > just
> > > > > > created the account) but when I look at my comptuer (the
> > > > > > properties
> > > > > > then
> > > > > > advanced then user profiles) or useraccounts HE or useraccounts2
> > > > > > nothing
> > > > > > is
> > > > > > there.
> > > > > >
> > > > > > now am i making sense ?
> > > > > >
> > > > > >
> > > > > > "Walter Clayton" > wrote in message
> > > > > > ...
> > > > > > > I can delete and readd accounts at will on both HE and Pro via
> > > > > > > the
> > > > User
> > > > > > > control panel applet.
> > > > > > >
> > > > > > > So you've done something very non-standard to get into the
state
> > you
> > > > > > > indicate.
> > > > > > >
> > > > > > > If, as Mark indicated, you've been playing with "control
> > > > userpasswords2"
> > > > > > on
> > > > > > > HE, you may have hosed things. Seriously so. So what I need to
> > know
> > > > > > > is
> > > > > > > exactly what you've done and in precisely what order,
especially
> > if
> > > > > > > you've
> > > > > > > been using "control userpasswords2" and this is an HE machine
> > > > > > > I'll
> > > > have
> > > > > > > to
> > > > > > > repro to give you a specific set of instructions. Randomly
> > fumbling
> > > > > > > around
> > > > > > > in this area of the registry is dangerous. The issue Mark
> > > > > > > referred
> > > > > > > to
> > > > is
> > > > > > > where some one uses "control userpasswords2" on HE in an
attempt
> > to
> > > > set
> > > > > > > a
> > > > > > > user to Power user status. That causes an issue similar to
what
> > > > > > > you're
> > > > > > > observing.
> > > > > > >
> > > > > > > One other things that bothers me, is your still using the
wrong
> > > > > > terminology.
> > > > > > > This issue has nothing to do with SIDs unless you've been
> > > > > > > playing
> > > > > > > with
> > > > > > > 3rd
> > > > > > > party tools without understanding what you're doing. And if
you
> > have
> > > > > > > been
> > > > > > > doing that, then I need to know what tool(s) and what you've
> > > > > > > done.
> > > > > > >
> > > > > > > --
> > > > > > > Walter Clayton - MS MVP(WinXP)
> > > > > > > Associate Expert
> > > > > > > http://www.microsoft.com/windowsxp/expertzone
> > > > > > > Any technology distinguishable from magic is insufficiently
> > > > > > > advanced.
> > > > > > > http://www.dts-l.org
> > > > > > >
http://support.microsoft.com/servicedesks/fileversion/default.asp
> > > > > > >
> > > > > > >
> > > > > > > "rtdos" > wrote in message
> > > > > > > m...
> > > > > > > > yes i did delete EVERYTHING about the users accounts and I
don
> > > > > > > > have
> > > > > > > > the proper SID numbers for each account. everytime I try to
> > > > > > > > use
> > > > user
> > > > > > > > accounts to add these names in again it is telling me that
> > > > > > > > username
> > > > > > > > already exists. more examination has proven this.
> > > > > > > >
> > > > > > > >
> > > > > > > >
> > > > > > > > "Walter Clayton" > wrote in message
> > > > > > > > >...
> > > > > > > > > You're making a dangerous invalid assumption.
> > > > > > > > >
> > > > > > > > > How did you delete the user accounts and what options did
> > > > > > > > > you
> > > > > > > > > use?
> > > > > > > > > Did
> > > > > > > > > you
> > > > > > > > > attempt to keep the ex-user's data files?
> > > > > > > > >
> > > > > > > > > --
> > > > > > > > > Walter Clayton - MS MVP(WinXP)
> > > > > > > > > Associate Expert
> > > > > > > > > http://www.microsoft.com/windowsxp/expertzone
> > > > > > > > > Any technology distinguishable from magic is
insufficiently
> > > > > > > > > advanced.
> > > > > > > > > http://www.dts-l.org
> > > > > > > > >
> > http://support.microsoft.com/servicedesks/fileversion/default.asp
> > > > > > > > >
> > > > > > > > >
> > > > > > > > > "rtdos" > wrote in message
> > > > > > > > > news:XBSoa.314428$Zo.63131@sccrnsc03...
> > > > > > > > > > after I delete an account and I try to add a new account
I
> > get
> > > > > > > > > > a
> > > > > > > > > > message
> > > > > > > > > > that says "such & such can't be added. that username
> > already
> > > > > > exists."
> > > > > > > > > >
> > > > > > > > > >
> > > > > > > > > >
> > > > > > > > > > "Roger Abell [MVP]" > wrote in message
> > > > > > > > > > ...
> > > > > > > > > > I do not know what you are expecting to find.
> > > > > > > > > > When I look I never see deleted accounts, only the
> > > > > > > > > > real, currently existing accounts are represented in
> > > > > > > > > > the SAM.
> > > > > > > > > >
> > > > > > > > > > --
> > > > > > > > > > Roger
> > > > > > > > > >
> > > > > > > > > > "rtdos" > wrote in message
> > > > > > > > > > news:vOFoa.545018$3D1.299774@sccrnsc01...
> > > > > > > > > > > i've tried that. and i still can't get access to the
> > hidden
> > > > > > > > > > > SID's
> > > > > > > > > > > in
> > > > > > > > > > > the
> > > > > > > > > > > registry (the old login names).
> > > > > > > > > > >
> > > > > > > > > > >
> > > > > > > > > > >
> > > > > > > > > > > "Walter Clayton" > wrote in
> > message
> > > > > > > > > > > ...
> > > > > > > > > > > > You're confusing terminology which is dangerous.
That
> > part
> > > > of
> > > > > > the
> > > > > > > > > registry
> > > > > > > > > > > > is difficult to access for the simple reason that
> > > > > > > > > > > > doing
> > > > > > > > > > > > the
> > > > > > wrong
> > > > > > > > > > > > thing
> > > > > > > > > will
> > > > > > > > > > > > cause some really major problems up to and including
> > > > > > > > > > > > locking
> > > > > > your
> > > > > > > > > > > > self
> > > > > > > > > out
> > > > > > > > > > > > of the system or loosing all data.
> > > > > > > > > > > >
> > > > > > > > > > > > If you really want to take the chance, do a full
> > > > > > > > > > > > system
> > > > state
> > > > > > > > > > > > backup
> > > > > > > > > first.
> > > > > > > > > > > > Then you simply have to set permissions on the
> > appropriate
> > > > > > > > > > > > registry
> > > > > > > > > > > > branches. If you can't figure it from that hint,
then
> > you
> > > > need
> > > > > > to
> > > > > > > > > > > > stay
> > > > > > > > > out
> > > > > > > > > > > > of that part of the registry.
> > > > > > > > > > > >
> > > > > > > > > > > > --
> > > > > > > > > > > > Walter Clayton - MS MVP(WinXP)
> > > > > > > > > > > > Associate Expert
> > > > > > > > > > > > http://www.microsoft.com/windowsxp/expertzone
> > > > > > > > > > > > Any technology distinguishable from magic is
> > > > > > > > > > > > insufficiently
> > > > > > > > > > > > advanced.
> > > > > > > > > > > > http://www.dts-l.org
> > > > > > > > > > > >
> > > > > >
http://support.microsoft.com/servicedesks/fileversion/default.asp
> > > > > > > > > > > >
> > > > > > > > > > > >
> > > > > > > > > > > > "rtdos" > wrote in message
> > > > > > > > > > > > news:BcAoa.569376$S_4.627838@rwcrnsc53...
> > > > > > > > > > > > > is there a way to show ALL SID's in registry
> > > > > > > > > > > > > {regedit.exe}
> > > > > > > > > > > > > including
> > > > > > > > > > > > > hidden
> > > > > > > > > > > > > SID's and SID's from old users accounts ?
> > > > > > > > > > > > >
> > > > > > > > > > > > > --
> > > > > > > > > > > > > *** REPLY REQUESTED WHEN CONVENIENT ***
> > > > > > > > > > > > >
> > > > > > > > > > > > > Jeff
> > > > > > > > > > > > > http://geocities.com/rtdos
> > > > > > > > > > > > >
> > > > > > > > > > > > >
> > > > > > > > > > > >
> > > > > > > > > > >
> > > > > > > > > > >
> > > > > > > > > >
> > > > > > > > > >
> > > > > > >
> > > > > > >
> > > > > >
> > > > > >
> > > > >
> > > >
> > > >
> > >
> >
> >
>
Walter Clayton
December 5th 03, 07:36 PM
I can't repro this. I've tried on both HE and Pro and if the only thing
you're doing is deleted user via the User control panel applet, I can't get
it to hose. I even went so far as to use "control userpasswords2" on HE to
delete a test account. No combination of add then deleting users via any MS
standard tool is causing any problems. Unfortunately deleting the users out
of the registry isn't a practical matter. I have a method that will correct
a problem on HE when using "control userpassword2" in an attempt to change a
user to power user status, but I have no idea if this will correct your
issue. This is principally because it assumes that the registry structure
is intact and that the only issue is with status bits that were incorrectly
set. If the registry structure it self has become corrupted then manually
correcting it will be virtually impossible unless you have a good structure
to compare against.
That stated, I'll give you the instructions for correcting a "control
userpasswords2" hose of the HE SAM.
WARNING!!!!! - This can hose your system unless you do things properly. If
there is in fact structural damage in the registry all bets are off. Take a
full system backup before proceeding otherwise you may cause SID related
issues. If you're running EFS make sure you back up certificates.
First thing is an admin class user with a functioning profile has to set
update permissions on the HKLM\SAM branch all the way down. This will take
multiple hits (two at least) since inheritance isn't set all the way down.
Drill down to HKLM\SAM\SAM\Domains\Account\Users\Names. The Names branch has
the user names referenced under the Users branch cross refed by ID (locate
the ID in the Name\[name] and use that value to locate the profile under the
Users branch. Drill into the Users\[reference] branch and you'll see two
keys; one F and the other V. The problem lies on the V key, offset +4 (5th
byte for those that are programming challenged). If you attempt to make user
a power user on HE, this should be set to 0xd4, which oddly enough is the
same on Pro disabled accounts. If you alter that byte to 0xbc (which is
partially an indication of admin rights, but not completely) you can then go
into the standard user control panel applet and set the user to limited
account (which is what I suggest at this stage) for safety reasons.
Now do a full system restart. You should now be able to log into the
account. If you try to log into the account with out a full system restart
the system will attempt profile recovery, which fortunately, fails since the
account is limited.
At this point, you should be able to use the users control panel applet to
delete the user.
Do *not* attempt to manually delete users via regedit. Do *not* stray from
the script. If you see anything in the registry that differs from the above,
then stop. If the above doesn't work, then you have serious issues beyond
the scope of what I can handle without being hands on the keyboard.
My suggestion still remains that you leave things as they are and work
around the problem.
--
Walter Clayton - MS MVP(WinXP)
Associate Expert
http://www.microsoft.com/windowsxp/expertzone
Any technology distinguishable from magic is insufficiently advanced.
http://www.dts-l.org
http://support.microsoft.com/servicedesks/fileversion/default.asp
"rtdos" > wrote in message
news:PLlpa.574126$F1.79180@sccrnsc04...
> ok, i will be here...
>
>
> "Walter Clayton" > wrote in message
> ...
> > Ok. You did things incorrectly. Let me repro and see what I can figure
> out.
> > One issue that I still have is the fact that the registry structure
> > where
> > you may need to go is tricky. Personally I'd prefer you use a different
> set
> > of user ids and not salvage anything else, assuming it can be salvaged
> > at
> > all. It'll be late tomorrow (US EST) before I get back, but I will get
> back.
> > I'm curious as to how this pans out myself.
> >
> > --
> > Walter Clayton - MS MVP(WinXP)
> > Associate Expert
> > http://www.microsoft.com/windowsxp/expertzone
> > Any technology distinguishable from magic is insufficiently advanced.
> > http://www.dts-l.org
> > http://support.microsoft.com/servicedesks/fileversion/default.asp
> >
> >
> > "rtdos" > wrote in message
> > news:vK1pa.564087$F1.78114@sccrnsc04...
> > > i deleted the user data structure under documents and settings and
> > > then
> > > proceded to remove the accounts under user apple (he). it did remove
> the
> > > accounts from the login menu as well as the user accounts (HE) and
> > > user
> > > accounts2 applets but did not totally clear them from the registry as
> > > I
> am
> > > able to press CTRL+ALT+DEL (twice) to get the classic login and
> > > "re-activate" these accounts but they still do not show up in the
> > > login
> > > menu
> > > or the applets.
> > >
> > >
> > >
> > > "Walter Clayton" > wrote in message
> > > ...
> > > > OK. What exactly was the sequence of events when you removed the
> > > > accounts?
> > > > Did you delete the user data structures under "Documents and
> > > > settings"
> > > > and
> > > > then attempt to remove the users via the User applet? Or did you use
> the
> > > > remove function that is part of "control userpasswords2"?
> > > >
> > > > I have to know exactly what you did and in what order or I'm not
> > > > going
> > > > to
> > > be
> > > > able to help. And don't be embarrassed if you think you did
> > > > something
> > > > "stupid" out of ignorance. It sounds like you did the latter under
> > > > the
> > > > circumstances, but I can't help if you're not telling me everything.
> As
> > > is,
> > > > I still don't see how you got into the mess you have. The reason why
> I'm
> > > not
> > > > revealing the detail at present is the simple fact that the data
> > > > structure
> > > > in that part of the registry is tricky and it's not isolated. If I
> give
> > > you
> > > > the wrong information based on lack of information coming from you,
> then
> > > you
> > > > might as well do a scratch reinstall now. As is there is the
> possibility
> > > > that some other software tools may help, but again, you're keeping
> > > > me
> in
> > > the
> > > > dark as to exactly what's happened. There is some general stuff I
> > > > can
> > > throw
> > > > at you, but so far I don't get warm fuzzies and at the moment I
> > > > seriously
> > > > think you'll make matters worse.
> > > >
> > > > Start with the exact steps you go through when you delete a user
> > > > account.
> > > >
> > > > FYI: if you want to get a handle on what's involved, go to
> > > > http://www.sysinternals.com and download NTRegmon. Install it,
> > > > launch
> it
> > > and
> > > > then launch the User control panel applet. If you really want to get
> > > > inundated, run filemon from the same site concurrently.
> > > >
> > > > --
> > > > Walter Clayton - MS MVP(WinXP)
> > > > Associate Expert
> > > > http://www.microsoft.com/windowsxp/expertzone
> > > > Any technology distinguishable from magic is insufficiently
> > > > advanced.
> > > > http://www.dts-l.org
> > > > http://support.microsoft.com/servicedesks/fileversion/default.asp
> > > >
> > > >
> > > > "rtdos" > wrote in message
> > > > news:Qz%oa.321387$Zo.64174@sccrnsc03...
> > > > > yes, these were normal users accounts that i created.
> > > > >
> > > > >
> > > > > "Walter Clayton" > wrote in message
> > > > > ...
> > > > > > Were these accounts that you created or were they on the machine
> > > > > > when
> > > > > > you
> > > > > > received it?
> > > > > >
> > > > > > And yes, it sounds like you did some things backwards (deleting
> the
> > > user
> > > > > > account you simply follow the prompts; there's no need to
> > > > > > manually
> > > > > > delete
> > > > > > anything from the standard data structure. You implied that you
> > > deleted
> > > > > the
> > > > > > data first then the user account), but I'm more concerned at
> present
> > > as
> > > > > > to
> > > > > > specifically what kind of accounts you're attempting to delete.
> > > > > > As
> > > > > > was
> > > > > > mentioned elsewhere, there are some accounts that the system
> > > > > > requires
> > > to
> > > > > > function and will not show up in most places, although they can
> > > > > > be
> > > > > > logged
> > > > > > into. Deleting these accounts will render your machine nothing
> more
> > > than
> > > > > > a
> > > > > > high priced door stop.
> > > > > >
> > > > > >
> > > > > > --
> > > > > > Walter Clayton - MS MVP(WinXP)
> > > > > > Associate Expert
> > > > > > http://www.microsoft.com/windowsxp/expertzone
> > > > > > Any technology distinguishable from magic is insufficiently
> > > > > > advanced.
> > > > > > http://www.dts-l.org
> > > > > > http://support.microsoft.com/servicedesks/fileversion/default.asp
> > > > > >
> > > > > >
> > > > > > "rtdos" > wrote in message
> > > > > > news:R1Xoa.556867$L1.162183@sccrnsc02...
> > > > > > > no i didn't intially use useraccount2 to deactivate or remove
> > > > > > > these
> > > > > > > accounts. first i clicked on my computer then properties and
> > > adanced
> > > > > and
> > > > > > > user profiles. deleted the assoc. files that way and then
> through
> > > > > > > useraccounts HE. however, when I try to add accounts with the
> > > > > > > same
> > > or
> > > > > > > similiar names i get a message that says "account / username
> > > > > > > already
> > > > > > > exists"
> > > > > > >
> > > > > > > is there any way to fix this ?
> > > > > > >
> > > > > > > everything works fine on my computer and nothing out of the
> > > > > > > ordinary
> > > > > > > (as
> > > > > > > far
> > > > > > > as users accounts and privaleges go) except this.
> > > > > > >
> > > > > > > these accounts i am talking about (the hidden ones) do not
> > > > > > > show
> up
> > > in
> > > > > > > my
> > > > > > > normal log in screen but when i press CTRL+ALT+DEL twice to
> > > > > > > get
> > > > > > > the
> > > > > > > classic
> > > > > > > login, I type the hidden username and it logins in normally
> (like
> > > > > > > I
> > > > > > > just
> > > > > > > created the account) but when I look at my comptuer (the
> > > > > > > properties
> > > > > > > then
> > > > > > > advanced then user profiles) or useraccounts HE or
> > > > > > > useraccounts2
> > > > > > > nothing
> > > > > > > is
> > > > > > > there.
> > > > > > >
> > > > > > > now am i making sense ?
> > > > > > >
> > > > > > >
> > > > > > > "Walter Clayton" > wrote in message
> > > > > > > ...
> > > > > > > > I can delete and readd accounts at will on both HE and Pro
> > > > > > > > via
> > > > > > > > the
> > > > > User
> > > > > > > > control panel applet.
> > > > > > > >
> > > > > > > > So you've done something very non-standard to get into the
> state
> > > you
> > > > > > > > indicate.
> > > > > > > >
> > > > > > > > If, as Mark indicated, you've been playing with "control
> > > > > userpasswords2"
> > > > > > > on
> > > > > > > > HE, you may have hosed things. Seriously so. So what I need
> > > > > > > > to
> > > know
> > > > > > > > is
> > > > > > > > exactly what you've done and in precisely what order,
> especially
> > > if
> > > > > > > > you've
> > > > > > > > been using "control userpasswords2" and this is an HE
> > > > > > > > machine
> > > > > > > > I'll
> > > > > have
> > > > > > > > to
> > > > > > > > repro to give you a specific set of instructions. Randomly
> > > fumbling
> > > > > > > > around
> > > > > > > > in this area of the registry is dangerous. The issue Mark
> > > > > > > > referred
> > > > > > > > to
> > > > > is
> > > > > > > > where some one uses "control userpasswords2" on HE in an
> attempt
> > > to
> > > > > set
> > > > > > > > a
> > > > > > > > user to Power user status. That causes an issue similar to
> what
> > > > > > > > you're
> > > > > > > > observing.
> > > > > > > >
> > > > > > > > One other things that bothers me, is your still using the
> wrong
> > > > > > > terminology.
> > > > > > > > This issue has nothing to do with SIDs unless you've been
> > > > > > > > playing
> > > > > > > > with
> > > > > > > > 3rd
> > > > > > > > party tools without understanding what you're doing. And if
> you
> > > have
> > > > > > > > been
> > > > > > > > doing that, then I need to know what tool(s) and what you've
> > > > > > > > done.
> > > > > > > >
> > > > > > > > --
> > > > > > > > Walter Clayton - MS MVP(WinXP)
> > > > > > > > Associate Expert
> > > > > > > > http://www.microsoft.com/windowsxp/expertzone
> > > > > > > > Any technology distinguishable from magic is insufficiently
> > > > > > > > advanced.
> > > > > > > > http://www.dts-l.org
> > > > > > > >
> http://support.microsoft.com/servicedesks/fileversion/default.asp
> > > > > > > >
> > > > > > > >
> > > > > > > > "rtdos" > wrote in message
> > > > > > > > m...
> > > > > > > > > yes i did delete EVERYTHING about the users accounts and I
> don
> > > > > > > > > have
> > > > > > > > > the proper SID numbers for each account. everytime I try
> > > > > > > > > to
> > > > > > > > > use
> > > > > user
> > > > > > > > > accounts to add these names in again it is telling me that
> > > > > > > > > username
> > > > > > > > > already exists. more examination has proven this.
> > > > > > > > >
> > > > > > > > >
> > > > > > > > >
> > > > > > > > > "Walter Clayton" > wrote in
> > > > > > > > > message
> > > > > > > > > >...
> > > > > > > > > > You're making a dangerous invalid assumption.
> > > > > > > > > >
> > > > > > > > > > How did you delete the user accounts and what options
> > > > > > > > > > did
> > > > > > > > > > you
> > > > > > > > > > use?
> > > > > > > > > > Did
> > > > > > > > > > you
> > > > > > > > > > attempt to keep the ex-user's data files?
> > > > > > > > > >
> > > > > > > > > > --
> > > > > > > > > > Walter Clayton - MS MVP(WinXP)
> > > > > > > > > > Associate Expert
> > > > > > > > > > http://www.microsoft.com/windowsxp/expertzone
> > > > > > > > > > Any technology distinguishable from magic is
> insufficiently
> > > > > > > > > > advanced.
> > > > > > > > > > http://www.dts-l.org
> > > > > > > > > >
> > > http://support.microsoft.com/servicedesks/fileversion/default.asp
> > > > > > > > > >
> > > > > > > > > >
> > > > > > > > > > "rtdos" > wrote in message
> > > > > > > > > > news:XBSoa.314428$Zo.63131@sccrnsc03...
> > > > > > > > > > > after I delete an account and I try to add a new
> > > > > > > > > > > account
> I
> > > get
> > > > > > > > > > > a
> > > > > > > > > > > message
> > > > > > > > > > > that says "such & such can't be added. that username
> > > already
> > > > > > > exists."
> > > > > > > > > > >
> > > > > > > > > > >
> > > > > > > > > > >
> > > > > > > > > > > "Roger Abell [MVP]" > wrote in
> > > > > > > > > > > message
> > > > > > > > > > > ...
> > > > > > > > > > > I do not know what you are expecting to find.
> > > > > > > > > > > When I look I never see deleted accounts, only the
> > > > > > > > > > > real, currently existing accounts are represented in
> > > > > > > > > > > the SAM.
> > > > > > > > > > >
> > > > > > > > > > > --
> > > > > > > > > > > Roger
> > > > > > > > > > >
> > > > > > > > > > > "rtdos" > wrote in message
> > > > > > > > > > > news:vOFoa.545018$3D1.299774@sccrnsc01...
> > > > > > > > > > > > i've tried that. and i still can't get access to
> > > > > > > > > > > > the
> > > hidden
> > > > > > > > > > > > SID's
> > > > > > > > > > > > in
> > > > > > > > > > > > the
> > > > > > > > > > > > registry (the old login names).
> > > > > > > > > > > >
> > > > > > > > > > > >
> > > > > > > > > > > >
> > > > > > > > > > > > "Walter Clayton" > wrote in
> > > message
> > > > > > > > > > > > ...
> > > > > > > > > > > > > You're confusing terminology which is dangerous.
> That
> > > part
> > > > > of
> > > > > > > the
> > > > > > > > > > registry
> > > > > > > > > > > > > is difficult to access for the simple reason that
> > > > > > > > > > > > > doing
> > > > > > > > > > > > > the
> > > > > > > wrong
> > > > > > > > > > > > > thing
> > > > > > > > > > will
> > > > > > > > > > > > > cause some really major problems up to and
> > > > > > > > > > > > > including
> > > > > > > > > > > > > locking
> > > > > > > your
> > > > > > > > > > > > > self
> > > > > > > > > > out
> > > > > > > > > > > > > of the system or loosing all data.
> > > > > > > > > > > > >
> > > > > > > > > > > > > If you really want to take the chance, do a full
> > > > > > > > > > > > > system
> > > > > state
> > > > > > > > > > > > > backup
> > > > > > > > > > first.
> > > > > > > > > > > > > Then you simply have to set permissions on the
> > > appropriate
> > > > > > > > > > > > > registry
> > > > > > > > > > > > > branches. If you can't figure it from that hint,
> then
> > > you
> > > > > need
> > > > > > > to
> > > > > > > > > > > > > stay
> > > > > > > > > > out
> > > > > > > > > > > > > of that part of the registry.
> > > > > > > > > > > > >
> > > > > > > > > > > > > --
> > > > > > > > > > > > > Walter Clayton - MS MVP(WinXP)
> > > > > > > > > > > > > Associate Expert
> > > > > > > > > > > > > http://www.microsoft.com/windowsxp/expertzone
> > > > > > > > > > > > > Any technology distinguishable from magic is
> > > > > > > > > > > > > insufficiently
> > > > > > > > > > > > > advanced.
> > > > > > > > > > > > > http://www.dts-l.org
> > > > > > > > > > > > >
> > > > > > >
> http://support.microsoft.com/servicedesks/fileversion/default.asp
> > > > > > > > > > > > >
> > > > > > > > > > > > >
> > > > > > > > > > > > > "rtdos" > wrote in message
> > > > > > > > > > > > > news:BcAoa.569376$S_4.627838@rwcrnsc53...
> > > > > > > > > > > > > > is there a way to show ALL SID's in registry
> > > > > > > > > > > > > > {regedit.exe}
> > > > > > > > > > > > > > including
> > > > > > > > > > > > > > hidden
> > > > > > > > > > > > > > SID's and SID's from old users accounts ?
> > > > > > > > > > > > > >
> > > > > > > > > > > > > > --
> > > > > > > > > > > > > > *** REPLY REQUESTED WHEN CONVENIENT ***
> > > > > > > > > > > > > >
> > > > > > > > > > > > > > Jeff
> > > > > > > > > > > > > > http://geocities.com/rtdos
> > > > > > > > > > > > > >
> > > > > > > > > > > > > >
> > > > > > > > > > > > >
> > > > > > > > > > > >
> > > > > > > > > > > >
> > > > > > > > > > >
> > > > > > > > > > >
> > > > > > > >
> > > > > > > >
> > > > > > >
> > > > > > >
> > > > > >
> > > > >
> > > > >
> > > >
> > >
> > >
> >
>
>
rtdos
December 5th 03, 07:37 PM
It worked.
However, 0xd4 was already set in the accounts that I was trying to get rid
of. When I set it to 0xbc they showed up both on the log in menu and in the
User Accounts control panel applet and was able to correctly delete them
from there.
One question though while we're on the subject:
How can I get the default "Administrator" account to always show up in the
log in menu (without having to boot up in Safe Mode) and password protect
that (so that I can all other accounts to limited access)? Every time I try
to set a password to the default Administrators account, the password does
not work (always says invalid password).
"Walter Clayton" > wrote in message
...
> I can't repro this. I've tried on both HE and Pro and if the only thing
> you're doing is deleted user via the User control panel applet, I can't
get
> it to hose. I even went so far as to use "control userpasswords2" on HE to
> delete a test account. No combination of add then deleting users via any
MS
> standard tool is causing any problems. Unfortunately deleting the users
out
> of the registry isn't a practical matter. I have a method that will
correct
> a problem on HE when using "control userpassword2" in an attempt to change
a
> user to power user status, but I have no idea if this will correct your
> issue. This is principally because it assumes that the registry structure
> is intact and that the only issue is with status bits that were
incorrectly
> set. If the registry structure it self has become corrupted then manually
> correcting it will be virtually impossible unless you have a good
structure
> to compare against.
>
> That stated, I'll give you the instructions for correcting a "control
> userpasswords2" hose of the HE SAM.
>
> WARNING!!!!! - This can hose your system unless you do things properly. If
> there is in fact structural damage in the registry all bets are off. Take
a
> full system backup before proceeding otherwise you may cause SID related
> issues. If you're running EFS make sure you back up certificates.
>
> First thing is an admin class user with a functioning profile has to set
> update permissions on the HKLM\SAM branch all the way down. This will take
> multiple hits (two at least) since inheritance isn't set all the way down.
>
> Drill down to HKLM\SAM\SAM\Domains\Account\Users\Names. The Names branch
has
> the user names referenced under the Users branch cross refed by ID (locate
> the ID in the Name\[name] and use that value to locate the profile under
the
> Users branch. Drill into the Users\[reference] branch and you'll see two
> keys; one F and the other V. The problem lies on the V key, offset +4 (5th
> byte for those that are programming challenged). If you attempt to make
user
> a power user on HE, this should be set to 0xd4, which oddly enough is the
> same on Pro disabled accounts. If you alter that byte to 0xbc (which is
> partially an indication of admin rights, but not completely) you can then
go
> into the standard user control panel applet and set the user to limited
> account (which is what I suggest at this stage) for safety reasons.
>
> Now do a full system restart. You should now be able to log into the
> account. If you try to log into the account with out a full system restart
> the system will attempt profile recovery, which fortunately, fails since
the
> account is limited.
>
> At this point, you should be able to use the users control panel applet to
> delete the user.
>
> Do *not* attempt to manually delete users via regedit. Do *not* stray from
> the script. If you see anything in the registry that differs from the
above,
> then stop. If the above doesn't work, then you have serious issues beyond
> the scope of what I can handle without being hands on the keyboard.
>
> My suggestion still remains that you leave things as they are and work
> around the problem.
>
> --
> Walter Clayton - MS MVP(WinXP)
> Associate Expert
> http://www.microsoft.com/windowsxp/expertzone
> Any technology distinguishable from magic is insufficiently advanced.
> http://www.dts-l.org
> http://support.microsoft.com/servicedesks/fileversion/default.asp
>
>
> "rtdos" > wrote in message
> news:PLlpa.574126$F1.79180@sccrnsc04...
> > ok, i will be here...
> >
> >
> > "Walter Clayton" > wrote in message
> > ...
> > > Ok. You did things incorrectly. Let me repro and see what I can figure
> > out.
> > > One issue that I still have is the fact that the registry structure
> > > where
> > > you may need to go is tricky. Personally I'd prefer you use a
different
> > set
> > > of user ids and not salvage anything else, assuming it can be salvaged
> > > at
> > > all. It'll be late tomorrow (US EST) before I get back, but I will get
> > back.
> > > I'm curious as to how this pans out myself.
> > >
> > > --
> > > Walter Clayton - MS MVP(WinXP)
> > > Associate Expert
> > > http://www.microsoft.com/windowsxp/expertzone
> > > Any technology distinguishable from magic is insufficiently advanced.
> > > http://www.dts-l.org
> > > http://support.microsoft.com/servicedesks/fileversion/default.asp
> > >
> > >
> > > "rtdos" > wrote in message
> > > news:vK1pa.564087$F1.78114@sccrnsc04...
> > > > i deleted the user data structure under documents and settings and
> > > > then
> > > > proceded to remove the accounts under user apple (he). it did
remove
> > the
> > > > accounts from the login menu as well as the user accounts (HE) and
> > > > user
> > > > accounts2 applets but did not totally clear them from the registry
as
> > > > I
> > am
> > > > able to press CTRL+ALT+DEL (twice) to get the classic login and
> > > > "re-activate" these accounts but they still do not show up in the
> > > > login
> > > > menu
> > > > or the applets.
> > > >
> > > >
> > > >
> > > > "Walter Clayton" > wrote in message
> > > > ...
> > > > > OK. What exactly was the sequence of events when you removed the
> > > > > accounts?
> > > > > Did you delete the user data structures under "Documents and
> > > > > settings"
> > > > > and
> > > > > then attempt to remove the users via the User applet? Or did you
use
> > the
> > > > > remove function that is part of "control userpasswords2"?
> > > > >
> > > > > I have to know exactly what you did and in what order or I'm not
> > > > > going
> > > > > to
> > > > be
> > > > > able to help. And don't be embarrassed if you think you did
> > > > > something
> > > > > "stupid" out of ignorance. It sounds like you did the latter under
> > > > > the
> > > > > circumstances, but I can't help if you're not telling me
everything.
> > As
> > > > is,
> > > > > I still don't see how you got into the mess you have. The reason
why
> > I'm
> > > > not
> > > > > revealing the detail at present is the simple fact that the data
> > > > > structure
> > > > > in that part of the registry is tricky and it's not isolated. If I
> > give
> > > > you
> > > > > the wrong information based on lack of information coming from
you,
> > then
> > > > you
> > > > > might as well do a scratch reinstall now. As is there is the
> > possibility
> > > > > that some other software tools may help, but again, you're keeping
> > > > > me
> > in
> > > > the
> > > > > dark as to exactly what's happened. There is some general stuff I
> > > > > can
> > > > throw
> > > > > at you, but so far I don't get warm fuzzies and at the moment I
> > > > > seriously
> > > > > think you'll make matters worse.
> > > > >
> > > > > Start with the exact steps you go through when you delete a user
> > > > > account.
> > > > >
> > > > > FYI: if you want to get a handle on what's involved, go to
> > > > > http://www.sysinternals.com and download NTRegmon. Install it,
> > > > > launch
> > it
> > > > and
> > > > > then launch the User control panel applet. If you really want to
get
> > > > > inundated, run filemon from the same site concurrently.
> > > > >
> > > > > --
> > > > > Walter Clayton - MS MVP(WinXP)
> > > > > Associate Expert
> > > > > http://www.microsoft.com/windowsxp/expertzone
> > > > > Any technology distinguishable from magic is insufficiently
> > > > > advanced.
> > > > > http://www.dts-l.org
> > > > > http://support.microsoft.com/servicedesks/fileversion/default.asp
> > > > >
> > > > >
> > > > > "rtdos" > wrote in message
> > > > > news:Qz%oa.321387$Zo.64174@sccrnsc03...
> > > > > > yes, these were normal users accounts that i created.
> > > > > >
> > > > > >
> > > > > > "Walter Clayton" > wrote in message
> > > > > > ...
> > > > > > > Were these accounts that you created or were they on the
machine
> > > > > > > when
> > > > > > > you
> > > > > > > received it?
> > > > > > >
> > > > > > > And yes, it sounds like you did some things backwards
(deleting
> > the
> > > > user
> > > > > > > account you simply follow the prompts; there's no need to
> > > > > > > manually
> > > > > > > delete
> > > > > > > anything from the standard data structure. You implied that
you
> > > > deleted
> > > > > > the
> > > > > > > data first then the user account), but I'm more concerned at
> > present
> > > > as
> > > > > > > to
> > > > > > > specifically what kind of accounts you're attempting to
delete.
> > > > > > > As
> > > > > > > was
> > > > > > > mentioned elsewhere, there are some accounts that the system
> > > > > > > requires
> > > > to
> > > > > > > function and will not show up in most places, although they
can
> > > > > > > be
> > > > > > > logged
> > > > > > > into. Deleting these accounts will render your machine nothing
> > more
> > > > than
> > > > > > > a
> > > > > > > high priced door stop.
> > > > > > >
> > > > > > >
> > > > > > > --
> > > > > > > Walter Clayton - MS MVP(WinXP)
> > > > > > > Associate Expert
> > > > > > > http://www.microsoft.com/windowsxp/expertzone
> > > > > > > Any technology distinguishable from magic is insufficiently
> > > > > > > advanced.
> > > > > > > http://www.dts-l.org
> > > > > > >
http://support.microsoft.com/servicedesks/fileversion/default.asp
> > > > > > >
> > > > > > >
> > > > > > > "rtdos" > wrote in message
> > > > > > > news:R1Xoa.556867$L1.162183@sccrnsc02...
> > > > > > > > no i didn't intially use useraccount2 to deactivate or
remove
> > > > > > > > these
> > > > > > > > accounts. first i clicked on my computer then properties
and
> > > > adanced
> > > > > > and
> > > > > > > > user profiles. deleted the assoc. files that way and then
> > through
> > > > > > > > useraccounts HE. however, when I try to add accounts with
the
> > > > > > > > same
> > > > or
> > > > > > > > similiar names i get a message that says "account / username
> > > > > > > > already
> > > > > > > > exists"
> > > > > > > >
> > > > > > > > is there any way to fix this ?
> > > > > > > >
> > > > > > > > everything works fine on my computer and nothing out of the
> > > > > > > > ordinary
> > > > > > > > (as
> > > > > > > > far
> > > > > > > > as users accounts and privaleges go) except this.
> > > > > > > >
> > > > > > > > these accounts i am talking about (the hidden ones) do not
> > > > > > > > show
> > up
> > > > in
> > > > > > > > my
> > > > > > > > normal log in screen but when i press CTRL+ALT+DEL twice to
> > > > > > > > get
> > > > > > > > the
> > > > > > > > classic
> > > > > > > > login, I type the hidden username and it logins in normally
> > (like
> > > > > > > > I
> > > > > > > > just
> > > > > > > > created the account) but when I look at my comptuer (the
> > > > > > > > properties
> > > > > > > > then
> > > > > > > > advanced then user profiles) or useraccounts HE or
> > > > > > > > useraccounts2
> > > > > > > > nothing
> > > > > > > > is
> > > > > > > > there.
> > > > > > > >
> > > > > > > > now am i making sense ?
> > > > > > > >
> > > > > > > >
> > > > > > > > "Walter Clayton" > wrote in message
> > > > > > > > ...
> > > > > > > > > I can delete and readd accounts at will on both HE and Pro
> > > > > > > > > via
> > > > > > > > > the
> > > > > > User
> > > > > > > > > control panel applet.
> > > > > > > > >
> > > > > > > > > So you've done something very non-standard to get into the
> > state
> > > > you
> > > > > > > > > indicate.
> > > > > > > > >
> > > > > > > > > If, as Mark indicated, you've been playing with "control
> > > > > > userpasswords2"
> > > > > > > > on
> > > > > > > > > HE, you may have hosed things. Seriously so. So what I
need
> > > > > > > > > to
> > > > know
> > > > > > > > > is
> > > > > > > > > exactly what you've done and in precisely what order,
> > especially
> > > > if
> > > > > > > > > you've
> > > > > > > > > been using "control userpasswords2" and this is an HE
> > > > > > > > > machine
> > > > > > > > > I'll
> > > > > > have
> > > > > > > > > to
> > > > > > > > > repro to give you a specific set of instructions. Randomly
> > > > fumbling
> > > > > > > > > around
> > > > > > > > > in this area of the registry is dangerous. The issue Mark
> > > > > > > > > referred
> > > > > > > > > to
> > > > > > is
> > > > > > > > > where some one uses "control userpasswords2" on HE in an
> > attempt
> > > > to
> > > > > > set
> > > > > > > > > a
> > > > > > > > > user to Power user status. That causes an issue similar to
> > what
> > > > > > > > > you're
> > > > > > > > > observing.
> > > > > > > > >
> > > > > > > > > One other things that bothers me, is your still using the
> > wrong
> > > > > > > > terminology.
> > > > > > > > > This issue has nothing to do with SIDs unless you've been
> > > > > > > > > playing
> > > > > > > > > with
> > > > > > > > > 3rd
> > > > > > > > > party tools without understanding what you're doing. And
if
> > you
> > > > have
> > > > > > > > > been
> > > > > > > > > doing that, then I need to know what tool(s) and what
you've
> > > > > > > > > done.
> > > > > > > > >
> > > > > > > > > --
> > > > > > > > > Walter Clayton - MS MVP(WinXP)
> > > > > > > > > Associate Expert
> > > > > > > > > http://www.microsoft.com/windowsxp/expertzone
> > > > > > > > > Any technology distinguishable from magic is
insufficiently
> > > > > > > > > advanced.
> > > > > > > > > http://www.dts-l.org
> > > > > > > > >
> > http://support.microsoft.com/servicedesks/fileversion/default.asp
> > > > > > > > >
> > > > > > > > >
> > > > > > > > > "rtdos" > wrote in message
> > > > > > > > > m...
> > > > > > > > > > yes i did delete EVERYTHING about the users accounts and
I
> > don
> > > > > > > > > > have
> > > > > > > > > > the proper SID numbers for each account. everytime I
try
> > > > > > > > > > to
> > > > > > > > > > use
> > > > > > user
> > > > > > > > > > accounts to add these names in again it is telling me
that
> > > > > > > > > > username
> > > > > > > > > > already exists. more examination has proven this.
> > > > > > > > > >
> > > > > > > > > >
> > > > > > > > > >
> > > > > > > > > > "Walter Clayton" > wrote in
> > > > > > > > > > message
> > > > > > > > > > >...
> > > > > > > > > > > You're making a dangerous invalid assumption.
> > > > > > > > > > >
> > > > > > > > > > > How did you delete the user accounts and what options
> > > > > > > > > > > did
> > > > > > > > > > > you
> > > > > > > > > > > use?
> > > > > > > > > > > Did
> > > > > > > > > > > you
> > > > > > > > > > > attempt to keep the ex-user's data files?
> > > > > > > > > > >
> > > > > > > > > > > --
> > > > > > > > > > > Walter Clayton - MS MVP(WinXP)
> > > > > > > > > > > Associate Expert
> > > > > > > > > > > http://www.microsoft.com/windowsxp/expertzone
> > > > > > > > > > > Any technology distinguishable from magic is
> > insufficiently
> > > > > > > > > > > advanced.
> > > > > > > > > > > http://www.dts-l.org
> > > > > > > > > > >
> > > > http://support.microsoft.com/servicedesks/fileversion/default.asp
> > > > > > > > > > >
> > > > > > > > > > >
> > > > > > > > > > > "rtdos" > wrote in message
> > > > > > > > > > > news:XBSoa.314428$Zo.63131@sccrnsc03...
> > > > > > > > > > > > after I delete an account and I try to add a new
> > > > > > > > > > > > account
> > I
> > > > get
> > > > > > > > > > > > a
> > > > > > > > > > > > message
> > > > > > > > > > > > that says "such & such can't be added. that
username
> > > > already
> > > > > > > > exists."
> > > > > > > > > > > >
> > > > > > > > > > > >
> > > > > > > > > > > >
> > > > > > > > > > > > "Roger Abell [MVP]" > wrote in
> > > > > > > > > > > > message
> > > > > > > > > > > > ...
> > > > > > > > > > > > I do not know what you are expecting to find.
> > > > > > > > > > > > When I look I never see deleted accounts, only the
> > > > > > > > > > > > real, currently existing accounts are represented in
> > > > > > > > > > > > the SAM.
> > > > > > > > > > > >
> > > > > > > > > > > > --
> > > > > > > > > > > > Roger
> > > > > > > > > > > >
> > > > > > > > > > > > "rtdos" > wrote in message
> > > > > > > > > > > > news:vOFoa.545018$3D1.299774@sccrnsc01...
> > > > > > > > > > > > > i've tried that. and i still can't get access to
> > > > > > > > > > > > > the
> > > > hidden
> > > > > > > > > > > > > SID's
> > > > > > > > > > > > > in
> > > > > > > > > > > > > the
> > > > > > > > > > > > > registry (the old login names).
> > > > > > > > > > > > >
> > > > > > > > > > > > >
> > > > > > > > > > > > >
> > > > > > > > > > > > > "Walter Clayton" > wrote
in
> > > > message
> > > > > > > > > > > > > ...
> > > > > > > > > > > > > > You're confusing terminology which is dangerous.
> > That
> > > > part
> > > > > > of
> > > > > > > > the
> > > > > > > > > > > registry
> > > > > > > > > > > > > > is difficult to access for the simple reason
that
> > > > > > > > > > > > > > doing
> > > > > > > > > > > > > > the
> > > > > > > > wrong
> > > > > > > > > > > > > > thing
> > > > > > > > > > > will
> > > > > > > > > > > > > > cause some really major problems up to and
> > > > > > > > > > > > > > including
> > > > > > > > > > > > > > locking
> > > > > > > > your
> > > > > > > > > > > > > > self
> > > > > > > > > > > out
> > > > > > > > > > > > > > of the system or loosing all data.
> > > > > > > > > > > > > >
> > > > > > > > > > > > > > If you really want to take the chance, do a full
> > > > > > > > > > > > > > system
> > > > > > state
> > > > > > > > > > > > > > backup
> > > > > > > > > > > first.
> > > > > > > > > > > > > > Then you simply have to set permissions on the
> > > > appropriate
> > > > > > > > > > > > > > registry
> > > > > > > > > > > > > > branches. If you can't figure it from that hint,
> > then
> > > > you
> > > > > > need
> > > > > > > > to
> > > > > > > > > > > > > > stay
> > > > > > > > > > > out
> > > > > > > > > > > > > > of that part of the registry.
> > > > > > > > > > > > > >
> > > > > > > > > > > > > > --
> > > > > > > > > > > > > > Walter Clayton - MS MVP(WinXP)
> > > > > > > > > > > > > > Associate Expert
> > > > > > > > > > > > > > http://www.microsoft.com/windowsxp/expertzone
> > > > > > > > > > > > > > Any technology distinguishable from magic is
> > > > > > > > > > > > > > insufficiently
> > > > > > > > > > > > > > advanced.
> > > > > > > > > > > > > > http://www.dts-l.org
> > > > > > > > > > > > > >
> > > > > > > >
> > http://support.microsoft.com/servicedesks/fileversion/default.asp
> > > > > > > > > > > > > >
> > > > > > > > > > > > > >
> > > > > > > > > > > > > > "rtdos" > wrote in message
> > > > > > > > > > > > > > news:BcAoa.569376$S_4.627838@rwcrnsc53...
> > > > > > > > > > > > > > > is there a way to show ALL SID's in registry
> > > > > > > > > > > > > > > {regedit.exe}
> > > > > > > > > > > > > > > including
> > > > > > > > > > > > > > > hidden
> > > > > > > > > > > > > > > SID's and SID's from old users accounts ?
> > > > > > > > > > > > > > >
> > > > > > > > > > > > > > > --
> > > > > > > > > > > > > > > *** REPLY REQUESTED WHEN CONVENIENT ***
> > > > > > > > > > > > > > >
> > > > > > > > > > > > > > > Jeff
> > > > > > > > > > > > > > > http://geocities.com/rtdos
> > > > > > > > > > > > > > >
> > > > > > > > > > > > > > >
> > > > > > > > > > > > > >
> > > > > > > > > > > > >
> > > > > > > > > > > > >
> > > > > > > > > > > >
> > > > > > > > > > > >
> > > > > > > > >
> > > > > > > > >
> > > > > > > >
> > > > > > > >
> > > > > > >
> > > > > >
> > > > > >
> > > > >
> > > >
> > > >
> > >
> >
> >
>
Walter Clayton
December 5th 03, 07:37 PM
Kewl beans. Now if we knew how the accounts were disabled rather than
deleted to begin with. The only time I've seen this happen is when some one
(myself specifically :-) attempted to set a user to Power User status on a
user on an HE machine via "control userpasswords2" out of idle curiosity.
To answer the question regarding Administrator on the Welcome screen on HE.
It can't be done. On HE the only time you can log on as Administrator is in
safe mode. On OEM setups in particular the default Administrator password is
spaces. You can change that one of two ways. Either log into the
Administrator account in safe mode then go into the User control panel
applet and change the password, or if you're running in normal mode with an
admin class account, you can alter the admin password via
start->run->control userpasswords2.
Word of advice even though it's contrary to standard security practices.
Leave at least one standard user with admin rights even though that user may
not normally log on. That gives you the ability to fast switch to an admin
account, do what needs be done then exit it.
--
Walter Clayton - MS MVP(WinXP)
Associate Expert
http://www.microsoft.com/windowsxp/expertzone
Any technology distinguishable from magic is insufficiently advanced.
http://www.dts-l.org
http://support.microsoft.com/servicedesks/fileversion/default.asp
"rtdos" > wrote in message
et...
> It worked.
>
> However, 0xd4 was already set in the accounts that I was trying to get rid
> of. When I set it to 0xbc they showed up both on the log in menu and in
the
> User Accounts control panel applet and was able to correctly delete them
> from there.
>
> One question though while we're on the subject:
>
> How can I get the default "Administrator" account to always show up in the
> log in menu (without having to boot up in Safe Mode) and password protect
> that (so that I can all other accounts to limited access)? Every time I
try
> to set a password to the default Administrators account, the password does
> not work (always says invalid password).
>
>
>
> "Walter Clayton" > wrote in message
> ...
> > I can't repro this. I've tried on both HE and Pro and if the only thing
> > you're doing is deleted user via the User control panel applet, I can't
> get
> > it to hose. I even went so far as to use "control userpasswords2" on HE
to
> > delete a test account. No combination of add then deleting users via any
> MS
> > standard tool is causing any problems. Unfortunately deleting the users
> out
> > of the registry isn't a practical matter. I have a method that will
> correct
> > a problem on HE when using "control userpassword2" in an attempt to
change
> a
> > user to power user status, but I have no idea if this will correct your
> > issue. This is principally because it assumes that the registry
structure
> > is intact and that the only issue is with status bits that were
> incorrectly
> > set. If the registry structure it self has become corrupted then
manually
> > correcting it will be virtually impossible unless you have a good
> structure
> > to compare against.
> >
> > That stated, I'll give you the instructions for correcting a "control
> > userpasswords2" hose of the HE SAM.
> >
> > WARNING!!!!! - This can hose your system unless you do things properly.
If
> > there is in fact structural damage in the registry all bets are off.
Take
> a
> > full system backup before proceeding otherwise you may cause SID related
> > issues. If you're running EFS make sure you back up certificates.
> >
> > First thing is an admin class user with a functioning profile has to set
> > update permissions on the HKLM\SAM branch all the way down. This will
take
> > multiple hits (two at least) since inheritance isn't set all the way
down.
> >
> > Drill down to HKLM\SAM\SAM\Domains\Account\Users\Names. The Names branch
> has
> > the user names referenced under the Users branch cross refed by ID
(locate
> > the ID in the Name\[name] and use that value to locate the profile under
> the
> > Users branch. Drill into the Users\[reference] branch and you'll see two
> > keys; one F and the other V. The problem lies on the V key, offset +4
(5th
> > byte for those that are programming challenged). If you attempt to make
> user
> > a power user on HE, this should be set to 0xd4, which oddly enough is
the
> > same on Pro disabled accounts. If you alter that byte to 0xbc (which is
> > partially an indication of admin rights, but not completely) you can
then
> go
> > into the standard user control panel applet and set the user to limited
> > account (which is what I suggest at this stage) for safety reasons.
> >
> > Now do a full system restart. You should now be able to log into the
> > account. If you try to log into the account with out a full system
restart
> > the system will attempt profile recovery, which fortunately, fails since
> the
> > account is limited.
> >
> > At this point, you should be able to use the users control panel applet
to
> > delete the user.
> >
> > Do *not* attempt to manually delete users via regedit. Do *not* stray
from
> > the script. If you see anything in the registry that differs from the
> above,
> > then stop. If the above doesn't work, then you have serious issues
beyond
> > the scope of what I can handle without being hands on the keyboard.
> >
> > My suggestion still remains that you leave things as they are and work
> > around the problem.
> >
> > --
> > Walter Clayton - MS MVP(WinXP)
> > Associate Expert
> > http://www.microsoft.com/windowsxp/expertzone
> > Any technology distinguishable from magic is insufficiently advanced.
> > http://www.dts-l.org
> > http://support.microsoft.com/servicedesks/fileversion/default.asp
> >
> >
> > "rtdos" > wrote in message
> > news:PLlpa.574126$F1.79180@sccrnsc04...
> > > ok, i will be here...
> > >
> > >
> > > "Walter Clayton" > wrote in message
> > > ...
> > > > Ok. You did things incorrectly. Let me repro and see what I can
figure
> > > out.
> > > > One issue that I still have is the fact that the registry structure
> > > > where
> > > > you may need to go is tricky. Personally I'd prefer you use a
> different
> > > set
> > > > of user ids and not salvage anything else, assuming it can be
salvaged
> > > > at
> > > > all. It'll be late tomorrow (US EST) before I get back, but I will
get
> > > back.
> > > > I'm curious as to how this pans out myself.
> > > >
> > > > --
> > > > Walter Clayton - MS MVP(WinXP)
> > > > Associate Expert
> > > > http://www.microsoft.com/windowsxp/expertzone
> > > > Any technology distinguishable from magic is insufficiently
advanced.
> > > > http://www.dts-l.org
> > > > http://support.microsoft.com/servicedesks/fileversion/default.asp
> > > >
> > > >
> > > > "rtdos" > wrote in message
> > > > news:vK1pa.564087$F1.78114@sccrnsc04...
> > > > > i deleted the user data structure under documents and settings and
> > > > > then
> > > > > proceded to remove the accounts under user apple (he). it did
> remove
> > > the
> > > > > accounts from the login menu as well as the user accounts (HE) and
> > > > > user
> > > > > accounts2 applets but did not totally clear them from the registry
> as
> > > > > I
> > > am
> > > > > able to press CTRL+ALT+DEL (twice) to get the classic login and
> > > > > "re-activate" these accounts but they still do not show up in the
> > > > > login
> > > > > menu
> > > > > or the applets.
> > > > >
> > > > >
> > > > >
> > > > > "Walter Clayton" > wrote in message
> > > > > ...
> > > > > > OK. What exactly was the sequence of events when you removed the
> > > > > > accounts?
> > > > > > Did you delete the user data structures under "Documents and
> > > > > > settings"
> > > > > > and
> > > > > > then attempt to remove the users via the User applet? Or did you
> use
> > > the
> > > > > > remove function that is part of "control userpasswords2"?
> > > > > >
> > > > > > I have to know exactly what you did and in what order or I'm not
> > > > > > going
> > > > > > to
> > > > > be
> > > > > > able to help. And don't be embarrassed if you think you did
> > > > > > something
> > > > > > "stupid" out of ignorance. It sounds like you did the latter
under
> > > > > > the
> > > > > > circumstances, but I can't help if you're not telling me
> everything.
> > > As
> > > > > is,
> > > > > > I still don't see how you got into the mess you have. The reason
> why
> > > I'm
> > > > > not
> > > > > > revealing the detail at present is the simple fact that the data
> > > > > > structure
> > > > > > in that part of the registry is tricky and it's not isolated. If
I
> > > give
> > > > > you
> > > > > > the wrong information based on lack of information coming from
> you,
> > > then
> > > > > you
> > > > > > might as well do a scratch reinstall now. As is there is the
> > > possibility
> > > > > > that some other software tools may help, but again, you're
keeping
> > > > > > me
> > > in
> > > > > the
> > > > > > dark as to exactly what's happened. There is some general stuff
I
> > > > > > can
> > > > > throw
> > > > > > at you, but so far I don't get warm fuzzies and at the moment I
> > > > > > seriously
> > > > > > think you'll make matters worse.
> > > > > >
> > > > > > Start with the exact steps you go through when you delete a user
> > > > > > account.
> > > > > >
> > > > > > FYI: if you want to get a handle on what's involved, go to
> > > > > > http://www.sysinternals.com and download NTRegmon. Install it,
> > > > > > launch
> > > it
> > > > > and
> > > > > > then launch the User control panel applet. If you really want to
> get
> > > > > > inundated, run filemon from the same site concurrently.
> > > > > >
> > > > > > --
> > > > > > Walter Clayton - MS MVP(WinXP)
> > > > > > Associate Expert
> > > > > > http://www.microsoft.com/windowsxp/expertzone
> > > > > > Any technology distinguishable from magic is insufficiently
> > > > > > advanced.
> > > > > > http://www.dts-l.org
> > > > > >
http://support.microsoft.com/servicedesks/fileversion/default.asp
> > > > > >
> > > > > >
> > > > > > "rtdos" > wrote in message
> > > > > > news:Qz%oa.321387$Zo.64174@sccrnsc03...
> > > > > > > yes, these were normal users accounts that i created.
> > > > > > >
> > > > > > >
> > > > > > > "Walter Clayton" > wrote in message
> > > > > > > ...
> > > > > > > > Were these accounts that you created or were they on the
> machine
> > > > > > > > when
> > > > > > > > you
> > > > > > > > received it?
> > > > > > > >
> > > > > > > > And yes, it sounds like you did some things backwards
> (deleting
> > > the
> > > > > user
> > > > > > > > account you simply follow the prompts; there's no need to
> > > > > > > > manually
> > > > > > > > delete
> > > > > > > > anything from the standard data structure. You implied that
> you
> > > > > deleted
> > > > > > > the
> > > > > > > > data first then the user account), but I'm more concerned at
> > > present
> > > > > as
> > > > > > > > to
> > > > > > > > specifically what kind of accounts you're attempting to
> delete.
> > > > > > > > As
> > > > > > > > was
> > > > > > > > mentioned elsewhere, there are some accounts that the system
> > > > > > > > requires
> > > > > to
> > > > > > > > function and will not show up in most places, although they
> can
> > > > > > > > be
> > > > > > > > logged
> > > > > > > > into. Deleting these accounts will render your machine
nothing
> > > more
> > > > > than
> > > > > > > > a
> > > > > > > > high priced door stop.
> > > > > > > >
> > > > > > > >
> > > > > > > > --
> > > > > > > > Walter Clayton - MS MVP(WinXP)
> > > > > > > > Associate Expert
> > > > > > > > http://www.microsoft.com/windowsxp/expertzone
> > > > > > > > Any technology distinguishable from magic is insufficiently
> > > > > > > > advanced.
> > > > > > > > http://www.dts-l.org
> > > > > > > >
> http://support.microsoft.com/servicedesks/fileversion/default.asp
> > > > > > > >
> > > > > > > >
> > > > > > > > "rtdos" > wrote in message
> > > > > > > > news:R1Xoa.556867$L1.162183@sccrnsc02...
> > > > > > > > > no i didn't intially use useraccount2 to deactivate or
> remove
> > > > > > > > > these
> > > > > > > > > accounts. first i clicked on my computer then properties
> and
> > > > > adanced
> > > > > > > and
> > > > > > > > > user profiles. deleted the assoc. files that way and then
> > > through
> > > > > > > > > useraccounts HE. however, when I try to add accounts with
> the
> > > > > > > > > same
> > > > > or
> > > > > > > > > similiar names i get a message that says "account /
username
> > > > > > > > > already
> > > > > > > > > exists"
> > > > > > > > >
> > > > > > > > > is there any way to fix this ?
> > > > > > > > >
> > > > > > > > > everything works fine on my computer and nothing out of
the
> > > > > > > > > ordinary
> > > > > > > > > (as
> > > > > > > > > far
> > > > > > > > > as users accounts and privaleges go) except this.
> > > > > > > > >
> > > > > > > > > these accounts i am talking about (the hidden ones) do not
> > > > > > > > > show
> > > up
> > > > > in
> > > > > > > > > my
> > > > > > > > > normal log in screen but when i press CTRL+ALT+DEL twice
to
> > > > > > > > > get
> > > > > > > > > the
> > > > > > > > > classic
> > > > > > > > > login, I type the hidden username and it logins in
normally
> > > (like
> > > > > > > > > I
> > > > > > > > > just
> > > > > > > > > created the account) but when I look at my comptuer (the
> > > > > > > > > properties
> > > > > > > > > then
> > > > > > > > > advanced then user profiles) or useraccounts HE or
> > > > > > > > > useraccounts2
> > > > > > > > > nothing
> > > > > > > > > is
> > > > > > > > > there.
> > > > > > > > >
> > > > > > > > > now am i making sense ?
> > > > > > > > >
> > > > > > > > >
> > > > > > > > > "Walter Clayton" > wrote in
message
> > > > > > > > > ...
> > > > > > > > > > I can delete and readd accounts at will on both HE and
Pro
> > > > > > > > > > via
> > > > > > > > > > the
> > > > > > > User
> > > > > > > > > > control panel applet.
> > > > > > > > > >
> > > > > > > > > > So you've done something very non-standard to get into
the
> > > state
> > > > > you
> > > > > > > > > > indicate.
> > > > > > > > > >
> > > > > > > > > > If, as Mark indicated, you've been playing with "control
> > > > > > > userpasswords2"
> > > > > > > > > on
> > > > > > > > > > HE, you may have hosed things. Seriously so. So what I
> need
> > > > > > > > > > to
> > > > > know
> > > > > > > > > > is
> > > > > > > > > > exactly what you've done and in precisely what order,
> > > especially
> > > > > if
> > > > > > > > > > you've
> > > > > > > > > > been using "control userpasswords2" and this is an HE
> > > > > > > > > > machine
> > > > > > > > > > I'll
> > > > > > > have
> > > > > > > > > > to
> > > > > > > > > > repro to give you a specific set of instructions.
Randomly
> > > > > fumbling
> > > > > > > > > > around
> > > > > > > > > > in this area of the registry is dangerous. The issue
Mark
> > > > > > > > > > referred
> > > > > > > > > > to
> > > > > > > is
> > > > > > > > > > where some one uses "control userpasswords2" on HE in an
> > > attempt
> > > > > to
> > > > > > > set
> > > > > > > > > > a
> > > > > > > > > > user to Power user status. That causes an issue similar
to
> > > what
> > > > > > > > > > you're
> > > > > > > > > > observing.
> > > > > > > > > >
> > > > > > > > > > One other things that bothers me, is your still using
the
> > > wrong
> > > > > > > > > terminology.
> > > > > > > > > > This issue has nothing to do with SIDs unless you've
been
> > > > > > > > > > playing
> > > > > > > > > > with
> > > > > > > > > > 3rd
> > > > > > > > > > party tools without understanding what you're doing. And
> if
> > > you
> > > > > have
> > > > > > > > > > been
> > > > > > > > > > doing that, then I need to know what tool(s) and what
> you've
> > > > > > > > > > done.
> > > > > > > > > >
> > > > > > > > > > --
> > > > > > > > > > Walter Clayton - MS MVP(WinXP)
> > > > > > > > > > Associate Expert
> > > > > > > > > > http://www.microsoft.com/windowsxp/expertzone
> > > > > > > > > > Any technology distinguishable from magic is
> insufficiently
> > > > > > > > > > advanced.
> > > > > > > > > > http://www.dts-l.org
> > > > > > > > > >
> > > http://support.microsoft.com/servicedesks/fileversion/default.asp
> > > > > > > > > >
> > > > > > > > > >
> > > > > > > > > > "rtdos" > wrote in message
> > > > > > > > > > m...
> > > > > > > > > > > yes i did delete EVERYTHING about the users accounts
and
> I
> > > don
> > > > > > > > > > > have
> > > > > > > > > > > the proper SID numbers for each account. everytime I
> try
> > > > > > > > > > > to
> > > > > > > > > > > use
> > > > > > > user
> > > > > > > > > > > accounts to add these names in again it is telling me
> that
> > > > > > > > > > > username
> > > > > > > > > > > already exists. more examination has proven this.
> > > > > > > > > > >
> > > > > > > > > > >
> > > > > > > > > > >
> > > > > > > > > > > "Walter Clayton" > wrote in
> > > > > > > > > > > message
> > > > > > > > > > > >...
> > > > > > > > > > > > You're making a dangerous invalid assumption.
> > > > > > > > > > > >
> > > > > > > > > > > > How did you delete the user accounts and what
options
> > > > > > > > > > > > did
> > > > > > > > > > > > you
> > > > > > > > > > > > use?
> > > > > > > > > > > > Did
> > > > > > > > > > > > you
> > > > > > > > > > > > attempt to keep the ex-user's data files?
> > > > > > > > > > > >
> > > > > > > > > > > > --
> > > > > > > > > > > > Walter Clayton - MS MVP(WinXP)
> > > > > > > > > > > > Associate Expert
> > > > > > > > > > > > http://www.microsoft.com/windowsxp/expertzone
> > > > > > > > > > > > Any technology distinguishable from magic is
> > > insufficiently
> > > > > > > > > > > > advanced.
> > > > > > > > > > > > http://www.dts-l.org
> > > > > > > > > > > >
> > > > > http://support.microsoft.com/servicedesks/fileversion/default.asp
> > > > > > > > > > > >
> > > > > > > > > > > >
> > > > > > > > > > > > "rtdos" > wrote in message
> > > > > > > > > > > > news:XBSoa.314428$Zo.63131@sccrnsc03...
> > > > > > > > > > > > > after I delete an account and I try to add a new
> > > > > > > > > > > > > account
> > > I
> > > > > get
> > > > > > > > > > > > > a
> > > > > > > > > > > > > message
> > > > > > > > > > > > > that says "such & such can't be added. that
> username
> > > > > already
> > > > > > > > > exists."
> > > > > > > > > > > > >
> > > > > > > > > > > > >
> > > > > > > > > > > > >
> > > > > > > > > > > > > "Roger Abell [MVP]" > wrote in
> > > > > > > > > > > > > message
> > > > > > > > > > > > > ...
> > > > > > > > > > > > > I do not know what you are expecting to find.
> > > > > > > > > > > > > When I look I never see deleted accounts, only the
> > > > > > > > > > > > > real, currently existing accounts are represented
in
> > > > > > > > > > > > > the SAM.
> > > > > > > > > > > > >
> > > > > > > > > > > > > --
> > > > > > > > > > > > > Roger
> > > > > > > > > > > > >
> > > > > > > > > > > > > "rtdos" > wrote in message
> > > > > > > > > > > > > news:vOFoa.545018$3D1.299774@sccrnsc01...
> > > > > > > > > > > > > > i've tried that. and i still can't get access
to
> > > > > > > > > > > > > > the
> > > > > hidden
> > > > > > > > > > > > > > SID's
> > > > > > > > > > > > > > in
> > > > > > > > > > > > > > the
> > > > > > > > > > > > > > registry (the old login names).
> > > > > > > > > > > > > >
> > > > > > > > > > > > > >
> > > > > > > > > > > > > >
> > > > > > > > > > > > > > "Walter Clayton" >
wrote
> in
> > > > > message
> > > > > > > > > > > > > > ...
> > > > > > > > > > > > > > > You're confusing terminology which is
dangerous.
> > > That
> > > > > part
> > > > > > > of
> > > > > > > > > the
> > > > > > > > > > > > registry
> > > > > > > > > > > > > > > is difficult to access for the simple reason
> that
> > > > > > > > > > > > > > > doing
> > > > > > > > > > > > > > > the
> > > > > > > > > wrong
> > > > > > > > > > > > > > > thing
> > > > > > > > > > > > will
> > > > > > > > > > > > > > > cause some really major problems up to and
> > > > > > > > > > > > > > > including
> > > > > > > > > > > > > > > locking
> > > > > > > > > your
> > > > > > > > > > > > > > > self
> > > > > > > > > > > > out
> > > > > > > > > > > > > > > of the system or loosing all data.
> > > > > > > > > > > > > > >
> > > > > > > > > > > > > > > If you really want to take the chance, do a
full
> > > > > > > > > > > > > > > system
> > > > > > > state
> > > > > > > > > > > > > > > backup
> > > > > > > > > > > > first.
> > > > > > > > > > > > > > > Then you simply have to set permissions on the
> > > > > appropriate
> > > > > > > > > > > > > > > registry
> > > > > > > > > > > > > > > branches. If you can't figure it from that
hint,
> > > then
> > > > > you
> > > > > > > need
> > > > > > > > > to
> > > > > > > > > > > > > > > stay
> > > > > > > > > > > > out
> > > > > > > > > > > > > > > of that part of the registry.
> > > > > > > > > > > > > > >
> > > > > > > > > > > > > > > --
> > > > > > > > > > > > > > > Walter Clayton - MS MVP(WinXP)
> > > > > > > > > > > > > > > Associate Expert
> > > > > > > > > > > > > > > http://www.microsoft.com/windowsxp/expertzone
> > > > > > > > > > > > > > > Any technology distinguishable from magic is
> > > > > > > > > > > > > > > insufficiently
> > > > > > > > > > > > > > > advanced.
> > > > > > > > > > > > > > > http://www.dts-l.org
> > > > > > > > > > > > > > >
> > > > > > > > >
> > > http://support.microsoft.com/servicedesks/fileversion/default.asp
> > > > > > > > > > > > > > >
> > > > > > > > > > > > > > >
> > > > > > > > > > > > > > > "rtdos" > wrote in message
> > > > > > > > > > > > > > > news:BcAoa.569376$S_4.627838@rwcrnsc53...
> > > > > > > > > > > > > > > > is there a way to show ALL SID's in registry
> > > > > > > > > > > > > > > > {regedit.exe}
> > > > > > > > > > > > > > > > including
> > > > > > > > > > > > > > > > hidden
> > > > > > > > > > > > > > > > SID's and SID's from old users accounts ?
> > > > > > > > > > > > > > > >
> > > > > > > > > > > > > > > > --
> > > > > > > > > > > > > > > > *** REPLY REQUESTED WHEN CONVENIENT ***
> > > > > > > > > > > > > > > >
> > > > > > > > > > > > > > > > Jeff
> > > > > > > > > > > > > > > > http://geocities.com/rtdos
> > > > > > > > > > > > > > > >
> > > > > > > > > > > > > > > >
> > > > > > > > > > > > > > >
> > > > > > > > > > > > > >
> > > > > > > > > > > > > >
> > > > > > > > > > > > >
> > > > > > > > > > > > >
> > > > > > > > > >
> > > > > > > > > >
> > > > > > > > >
> > > > > > > > >
> > > > > > > >
> > > > > > >
> > > > > > >
> > > > > >
> > > > >
> > > > >
> > > >
> > >
> > >
> >
>
>
rtdos
December 5th 03, 07:38 PM
i think i may have just repro (but not exactly the same was as i did
it but it did produce a similiar problem): I opened up User Accounts
(default HE control panel applet) and then proceded to create a dummy
account (named obviously dummy) and gave it administrator rights.
then i opened up User Passwords 2 (the one we're not supposed to
touch) and noticed that HE gave it Administrator+User status rather
than just plain Administrator. I rebooted, logged into "dummy" account
and then I opened up "userpasswords2" and I double clicked on the name
and changed both name fields to "stupid" BUT it wouldn't accept it
UNLESS I changed the account to exclusively Administrator. I then
rebooted and the account disappeared from both the login screen as
well as the User Passwords control panel applet HOWEVER just like the
my other problem accounts I could press CTRL+ALT+DEL (twice) and login
to *both* stupid and dummy accounts.
I did notice that "explorer.exe" is VERY unstable at this point.
Other than NOT using "userpasswords2" is there a way to prevent this?
"Walter Clayton" > wrote in message >...
> Kewl beans. Now if we knew how the accounts were disabled rather than
> deleted to begin with. The only time I've seen this happen is when some one
> (myself specifically :-) attempted to set a user to Power User status on a
> user on an HE machine via "control userpasswords2" out of idle curiosity.
>
> To answer the question regarding Administrator on the Welcome screen on HE.
> It can't be done. On HE the only time you can log on as Administrator is in
> safe mode. On OEM setups in particular the default Administrator password is
> spaces. You can change that one of two ways. Either log into the
> Administrator account in safe mode then go into the User control panel
> applet and change the password, or if you're running in normal mode with an
> admin class account, you can alter the admin password via
> start->run->control userpasswords2.
>
> Word of advice even though it's contrary to standard security practices.
> Leave at least one standard user with admin rights even though that user may
> not normally log on. That gives you the ability to fast switch to an admin
> account, do what needs be done then exit it.
>
> --
> Walter Clayton - MS MVP(WinXP)
> Associate Expert
> http://www.microsoft.com/windowsxp/expertzone
> Any technology distinguishable from magic is insufficiently advanced.
> http://www.dts-l.org
> http://support.microsoft.com/servicedesks/fileversion/default.asp
>
>
> "rtdos" > wrote in message
> et...
> > It worked.
> >
> > However, 0xd4 was already set in the accounts that I was trying to get rid
> > of. When I set it to 0xbc they showed up both on the log in menu and in
> the
> > User Accounts control panel applet and was able to correctly delete them
> > from there.
> >
> > One question though while we're on the subject:
> >
> > How can I get the default "Administrator" account to always show up in the
> > log in menu (without having to boot up in Safe Mode) and password protect
> > that (so that I can all other accounts to limited access)? Every time I
> try
> > to set a password to the default Administrators account, the password does
> > not work (always says invalid password).
> >
> >
> >
> > "Walter Clayton" > wrote in message
> > ...
> > > I can't repro this. I've tried on both HE and Pro and if the only thing
> > > you're doing is deleted user via the User control panel applet, I can't
> get
> > > it to hose. I even went so far as to use "control userpasswords2" on HE
> to
> > > delete a test account. No combination of add then deleting users via any
> MS
> > > standard tool is causing any problems. Unfortunately deleting the users
> out
> > > of the registry isn't a practical matter. I have a method that will
> correct
> > > a problem on HE when using "control userpassword2" in an attempt to
> change
> a
> > > user to power user status, but I have no idea if this will correct your
> > > issue. This is principally because it assumes that the registry
> structure
> > > is intact and that the only issue is with status bits that were
> incorrectly
> > > set. If the registry structure it self has become corrupted then
> manually
> > > correcting it will be virtually impossible unless you have a good
> structure
> > > to compare against.
> > >
> > > That stated, I'll give you the instructions for correcting a "control
> > > userpasswords2" hose of the HE SAM.
> > >
> > > WARNING!!!!! - This can hose your system unless you do things properly.
> If
> > > there is in fact structural damage in the registry all bets are off.
> Take
> a
> > > full system backup before proceeding otherwise you may cause SID related
> > > issues. If you're running EFS make sure you back up certificates.
> > >
> > > First thing is an admin class user with a functioning profile has to set
> > > update permissions on the HKLM\SAM branch all the way down. This will
> take
> > > multiple hits (two at least) since inheritance isn't set all the way
> down.
> > >
> > > Drill down to HKLM\SAM\SAM\Domains\Account\Users\Names. The Names branch
> has
> > > the user names referenced under the Users branch cross refed by ID
> (locate
> > > the ID in the Name\[name] and use that value to locate the profile under
> the
> > > Users branch. Drill into the Users\[reference] branch and you'll see two
> > > keys; one F and the other V. The problem lies on the V key, offset +4
> (5th
> > > byte for those that are programming challenged). If you attempt to make
> user
> > > a power user on HE, this should be set to 0xd4, which oddly enough is
> the
> > > same on Pro disabled accounts. If you alter that byte to 0xbc (which is
> > > partially an indication of admin rights, but not completely) you can
> then
> go
> > > into the standard user control panel applet and set the user to limited
> > > account (which is what I suggest at this stage) for safety reasons.
> > >
> > > Now do a full system restart. You should now be able to log into the
> > > account. If you try to log into the account with out a full system
> restart
> > > the system will attempt profile recovery, which fortunately, fails since
> the
> > > account is limited.
> > >
> > > At this point, you should be able to use the users control panel applet
> to
> > > delete the user.
> > >
> > > Do *not* attempt to manually delete users via regedit. Do *not* stray
> from
> > > the script. If you see anything in the registry that differs from the
> above,
> > > then stop. If the above doesn't work, then you have serious issues
> beyond
> > > the scope of what I can handle without being hands on the keyboard.
> > >
> > > My suggestion still remains that you leave things as they are and work
> > > around the problem.
> > >
> > > --
> > > Walter Clayton - MS MVP(WinXP)
> > > Associate Expert
> > > http://www.microsoft.com/windowsxp/expertzone
> > > Any technology distinguishable from magic is insufficiently advanced.
> > > http://www.dts-l.org
> > > http://support.microsoft.com/servicedesks/fileversion/default.asp
> > >
> > >
> > > "rtdos" > wrote in message
> > > news:PLlpa.574126$F1.79180@sccrnsc04...
> > > > ok, i will be here...
> > > >
> > > >
> > > > "Walter Clayton" > wrote in message
> > > > ...
> > > > > Ok. You did things incorrectly. Let me repro and see what I can
> figure
> out.
> > > > > One issue that I still have is the fact that the registry structure
> > > > > where
> > > > > you may need to go is tricky. Personally I'd prefer you use a
> different
> set
> > > > > of user ids and not salvage anything else, assuming it can be
> salvaged
> > > > > at
> > > > > all. It'll be late tomorrow (US EST) before I get back, but I will
> get
> back.
> > > > > I'm curious as to how this pans out myself.
> > > > >
> > > > > --
> > > > > Walter Clayton - MS MVP(WinXP)
> > > > > Associate Expert
> > > > > http://www.microsoft.com/windowsxp/expertzone
> > > > > Any technology distinguishable from magic is insufficiently
> advanced.
> > > > > http://www.dts-l.org
> > > > > http://support.microsoft.com/servicedesks/fileversion/default.asp
> > > > >
> > > > >
> > > > > "rtdos" > wrote in message
> > > > > news:vK1pa.564087$F1.78114@sccrnsc04...
> > > > > > i deleted the user data structure under documents and settings and
> > > > > > then
> > > > > > proceded to remove the accounts under user apple (he). it did
> remove
> the
> > > > > > accounts from the login menu as well as the user accounts (HE) and
> > > > > > user
> > > > > > accounts2 applets but did not totally clear them from the registry
> as
> > > > > > I
> am
> > > > > > able to press CTRL+ALT+DEL (twice) to get the classic login and
> > > > > > "re-activate" these accounts but they still do not show up in the
> > > > > > login
> > > > > > menu
> > > > > > or the applets.
> > > > > >
> > > > > >
> > > > > >
> > > > > > "Walter Clayton" > wrote in message
> > > > > > ...
> > > > > > > OK. What exactly was the sequence of events when you removed the
> > > > > > > accounts?
> > > > > > > Did you delete the user data structures under "Documents and
> > > > > > > settings"
> > > > > > > and
> > > > > > > then attempt to remove the users via the User applet? Or did you
> use
> the
> > > > > > > remove function that is part of "control userpasswords2"?
> > > > > > >
> > > > > > > I have to know exactly what you did and in what order or I'm not
> > > > > > > going
> > > > > > > to
> be
> > > > > > > able to help. And don't be embarrassed if you think you did
> > > > > > > something
> > > > > > > "stupid" out of ignorance. It sounds like you did the latter
> under
> > > > > > > the
> > > > > > > circumstances, but I can't help if you're not telling me
> everything.
> As
> is,
> > > > > > > I still don't see how you got into the mess you have. The reason
> why
> I'm
> not
> > > > > > > revealing the detail at present is the simple fact that the data
> > > > > > > structure
> > > > > > > in that part of the registry is tricky and it's not isolated. If
> I
> give
> you
> > > > > > > the wrong information based on lack of information coming from
> you,
> then
> you
> > > > > > > might as well do a scratch reinstall now. As is there is the
> possibility
> > > > > > > that some other software tools may help, but again, you're
> keeping
> > > > > > > me
> in
> the
> > > > > > > dark as to exactly what's happened. There is some general stuff
> I
> > > > > > > can
> throw
> > > > > > > at you, but so far I don't get warm fuzzies and at the moment I
> > > > > > > seriously
> > > > > > > think you'll make matters worse.
> > > > > > >
> > > > > > > Start with the exact steps you go through when you delete a user
> > > > > > > account.
> > > > > > >
> > > > > > > FYI: if you want to get a handle on what's involved, go to
> > > > > > > http://www.sysinternals.com and download NTRegmon. Install it,
> > > > > > > launch
> it
> and
> > > > > > > then launch the User control panel applet. If you really want to
> get
> > > > > > > inundated, run filemon from the same site concurrently.
> > > > > > >
> > > > > > > --
> > > > > > > Walter Clayton - MS MVP(WinXP)
> > > > > > > Associate Expert
> > > > > > > http://www.microsoft.com/windowsxp/expertzone
> > > > > > > Any technology distinguishable from magic is insufficiently
> > > > > > > advanced.
> > > > > > > http://www.dts-l.org
> > > > > > >
> http://support.microsoft.com/servicedesks/fileversion/default.asp
> > > > > > >
> > > > > > >
> > > > > > > "rtdos" > wrote in message
> > > > > > > news:Qz%oa.321387$Zo.64174@sccrnsc03...
> > > > > > > > yes, these were normal users accounts that i created.
> > > > > > > >
> > > > > > > >
> > > > > > > > "Walter Clayton" > wrote in message
> > > > > > > > ...
> > > > > > > > > Were these accounts that you created or were they on the
> machine
> > > > > > > > > when
> > > > > > > > > you
> > > > > > > > > received it?
> > > > > > > > >
> > > > > > > > > And yes, it sounds like you did some things backwards
> (deleting
> the
> user
> > > > > > > > > account you simply follow the prompts; there's no need to
> > > > > > > > > manually
> > > > > > > > > delete
> > > > > > > > > anything from the standard data structure. You implied that
> you
> deleted
> the
> > > > > > > > > data first then the user account), but I'm more concerned at
> present
> as
> > > > > > > > > to
> > > > > > > > > specifically what kind of accounts you're attempting to
> delete.
> > > > > > > > > As
> > > > > > > > > was
> > > > > > > > > mentioned elsewhere, there are some accounts that the system
> > > > > > > > > requires
> to
> > > > > > > > > function and will not show up in most places, although they
> can
> > > > > > > > > be
> > > > > > > > > logged
> > > > > > > > > into. Deleting these accounts will render your machine
> nothing
> more
> than
> > > > > > > > > a
> > > > > > > > > high priced door stop.
> > > > > > > > >
> > > > > > > > >
> > > > > > > > > --
> > > > > > > > > Walter Clayton - MS MVP(WinXP)
> > > > > > > > > Associate Expert
> > > > > > > > > http://www.microsoft.com/windowsxp/expertzone
> > > > > > > > > Any technology distinguishable from magic is insufficiently
> > > > > > > > > advanced.
> > > > > > > > > http://www.dts-l.org
> > > > > > > > >
> http://support.microsoft.com/servicedesks/fileversion/default.asp
> > > > > > > > >
> > > > > > > > >
> > > > > > > > > "rtdos" > wrote in message
> > > > > > > > > news:R1Xoa.556867$L1.162183@sccrnsc02...
> > > > > > > > > > no i didn't intially use useraccount2 to deactivate or
> remove
> > > > > > > > > > these
> > > > > > > > > > accounts. first i clicked on my computer then properties
> and
> adanced
> and
> > > > > > > > > > user profiles. deleted the assoc. files that way and then
> through
> > > > > > > > > > useraccounts HE. however, when I try to add accounts with
> the
> > > > > > > > > > same
> or
> > > > > > > > > > similiar names i get a message that says "account /
> username
> > > > > > > > > > already
> > > > > > > > > > exists"
> > > > > > > > > >
> > > > > > > > > > is there any way to fix this ?
> > > > > > > > > >
> > > > > > > > > > everything works fine on my computer and nothing out of
> the
> > > > > > > > > > ordinary
> > > > > > > > > > (as
> > > > > > > > > > far
> > > > > > > > > > as users accounts and privaleges go) except this.
> > > > > > > > > >
> > > > > > > > > > these accounts i am talking about (the hidden ones) do not
> > > > > > > > > > show
> up
> in
> > > > > > > > > > my
> > > > > > > > > > normal log in screen but when i press CTRL+ALT+DEL twice
> to
> > > > > > > > > > get
> > > > > > > > > > the
> > > > > > > > > > classic
> > > > > > > > > > login, I type the hidden username and it logins in
> normally
> (like
> > > > > > > > > > I
> > > > > > > > > > just
> > > > > > > > > > created the account) but when I look at my comptuer (the
> > > > > > > > > > properties
> > > > > > > > > > then
> > > > > > > > > > advanced then user profiles) or useraccounts HE or
> > > > > > > > > > useraccounts2
> > > > > > > > > > nothing
> > > > > > > > > > is
> > > > > > > > > > there.
> > > > > > > > > >
> > > > > > > > > > now am i making sense ?
> > > > > > > > > >
> > > > > > > > > >
> > > > > > > > > > "Walter Clayton" > wrote in
> message
> > > > > > > > > > ...
> > > > > > > > > > > I can delete and readd accounts at will on both HE and
> Pro
> > > > > > > > > > > via
> > > > > > > > > > > the
> User
> > > > > > > > > > > control panel applet.
> > > > > > > > > > >
> > > > > > > > > > > So you've done something very non-standard to get into
> the
> state
> you
> > > > > > > > > > > indicate.
> > > > > > > > > > >
> > > > > > > > > > > If, as Mark indicated, you've been playing with "control
> userpasswords2"
> on
> > > > > > > > > > > HE, you may have hosed things. Seriously so. So what I
> need
> > > > > > > > > > > to
> know
> > > > > > > > > > > is
> > > > > > > > > > > exactly what you've done and in precisely what order,
> especially
> if
> > > > > > > > > > > you've
> > > > > > > > > > > been using "control userpasswords2" and this is an HE
> > > > > > > > > > > machine
> > > > > > > > > > > I'll
> have
> > > > > > > > > > > to
> > > > > > > > > > > repro to give you a specific set of instructions.
> Randomly
> fumbling
> > > > > > > > > > > around
> > > > > > > > > > > in this area of the registry is dangerous. The issue
> Mark
> > > > > > > > > > > referred
> > > > > > > > > > > to
> is
> > > > > > > > > > > where some one uses "control userpasswords2" on HE in an
> attempt
> to
> set
> > > > > > > > > > > a
> > > > > > > > > > > user to Power user status. That causes an issue similar
> to
> what
> > > > > > > > > > > you're
> > > > > > > > > > > observing.
> > > > > > > > > > >
> > > > > > > > > > > One other things that bothers me, is your still using
> the
> wrong
> terminology.
> > > > > > > > > > > This issue has nothing to do with SIDs unless you've
> been
> > > > > > > > > > > playing
> > > > > > > > > > > with
> > > > > > > > > > > 3rd
> > > > > > > > > > > party tools without understanding what you're doing. And
> if
> you
> have
> > > > > > > > > > > been
> > > > > > > > > > > doing that, then I need to know what tool(s) and what
> you've
> > > > > > > > > > > done.
> > > > > > > > > > >
> > > > > > > > > > > --
> > > > > > > > > > > Walter Clayton - MS MVP(WinXP)
> > > > > > > > > > > Associate Expert
> > > > > > > > > > > http://www.microsoft.com/windowsxp/expertzone
> > > > > > > > > > > Any technology distinguishable from magic is
> insufficiently
> > > > > > > > > > > advanced.
> > > > > > > > > > > http://www.dts-l.org
> > > > > > > > > > >
> http://support.microsoft.com/servicedesks/fileversion/default.asp
> > > > > > > > > > >
> > > > > > > > > > >
> > > > > > > > > > > "rtdos" > wrote in message
> > > > > > > > > > > m...
> > > > > > > > > > > > yes i did delete EVERYTHING about the users accounts
> and
> I
> don
> > > > > > > > > > > > have
> > > > > > > > > > > > the proper SID numbers for each account. everytime I
> try
> > > > > > > > > > > > to
> > > > > > > > > > > > use
> user
> > > > > > > > > > > > accounts to add these names in again it is telling me
> that
> > > > > > > > > > > > username
> > > > > > > > > > > > already exists. more examination has proven this.
> > > > > > > > > > > >
> > > > > > > > > > > >
> > > > > > > > > > > >
> > > > > > > > > > > > "Walter Clayton" > wrote in
> > > > > > > > > > > > message
> > > > > > > > > > > > >...
> > > > > > > > > > > > > You're making a dangerous invalid assumption.
> > > > > > > > > > > > >
> > > > > > > > > > > > > How did you delete the user accounts and what
> options
> > > > > > > > > > > > > did
> > > > > > > > > > > > > you
> > > > > > > > > > > > > use?
> > > > > > > > > > > > > Did
> > > > > > > > > > > > > you
> > > > > > > > > > > > > attempt to keep the ex-user's data files?
> > > > > > > > > > > > >
> > > > > > > > > > > > > --
> > > > > > > > > > > > > Walter Clayton - MS MVP(WinXP)
> > > > > > > > > > > > > Associate Expert
> > > > > > > > > > > > > http://www.microsoft.com/windowsxp/expertzone
> > > > > > > > > > > > > Any technology distinguishable from magic is
> insufficiently
> > > > > > > > > > > > > advanced.
> > > > > > > > > > > > > http://www.dts-l.org
> > > > > > > > > > > > >
> http://support.microsoft.com/servicedesks/fileversion/default.asp
> > > > > > > > > > > > >
> > > > > > > > > > > > >
> > > > > > > > > > > > > "rtdos" > wrote in message
> > > > > > > > > > > > > news:XBSoa.314428$Zo.63131@sccrnsc03...
> > > > > > > > > > > > > > after I delete an account and I try to add a new
> > > > > > > > > > > > > > account
> I
> get
> > > > > > > > > > > > > > a
> > > > > > > > > > > > > > message
> > > > > > > > > > > > > > that says "such & such can't be added. that
> username
> already
> exists."
> > > > > > > > > > > > > >
> > > > > > > > > > > > > >
> > > > > > > > > > > > > >
> > > > > > > > > > > > > > "Roger Abell [MVP]" > wrote in
> > > > > > > > > > > > > > message
> > > > > > > > > > > > > > ...
> > > > > > > > > > > > > > I do not know what you are expecting to find.
> > > > > > > > > > > > > > When I look I never see deleted accounts, only the
> > > > > > > > > > > > > > real, currently existing accounts are represented
> in
> > > > > > > > > > > > > > the SAM.
> > > > > > > > > > > > > >
> > > > > > > > > > > > > > --
> > > > > > > > > > > > > > Roger
> > > > > > > > > > > > > >
> > > > > > > > > > > > > > "rtdos" > wrote in message
> > > > > > > > > > > > > > news:vOFoa.545018$3D1.299774@sccrnsc01...
> > > > > > > > > > > > > > > i've tried that. and i still can't get access
> to
> > > > > > > > > > > > > > > the
> hidden
> > > > > > > > > > > > > > > SID's
> > > > > > > > > > > > > > > in
> > > > > > > > > > > > > > > the
> > > > > > > > > > > > > > > registry (the old login names).
> > > > > > > > > > > > > > >
> > > > > > > > > > > > > > >
> > > > > > > > > > > > > > >
> > > > > > > > > > > > > > > "Walter Clayton" >
> wrote
> in
> message
> > > > > > > > > > > > > > > ...
> > > > > > > > > > > > > > > > You're confusing terminology which is
> dangerous.
> That
> part
> of
> the
> registry
> > > > > > > > > > > > > > > > is difficult to access for the simple reason
> that
> > > > > > > > > > > > > > > > doing
> > > > > > > > > > > > > > > > the
> wrong
> > > > > > > > > > > > > > > > thing
> will
> > > > > > > > > > > > > > > > cause some really major problems up to and
> > > > > > > > > > > > > > > > including
> > > > > > > > > > > > > > > > locking
> your
> > > > > > > > > > > > > > > > self
> out
> > > > > > > > > > > > > > > > of the system or loosing all data.
> > > > > > > > > > > > > > > >
> > > > > > > > > > > > > > > > If you really want to take the chance, do a
> full
> > > > > > > > > > > > > > > > system
> state
> > > > > > > > > > > > > > > > backup
> first.
> > > > > > > > > > > > > > > > Then you simply have to set permissions on the
> appropriate
> > > > > > > > > > > > > > > > registry
> > > > > > > > > > > > > > > > branches. If you can't figure it from that
> hint,
> then
> you
> need
> to
> > > > > > > > > > > > > > > > stay
> out
> > > > > > > > > > > > > > > > of that part of the registry.
> > > > > > > > > > > > > > > >
> > > > > > > > > > > > > > > > --
> > > > > > > > > > > > > > > > Walter Clayton - MS MVP(WinXP)
> > > > > > > > > > > > > > > > Associate Expert
> > > > > > > > > > > > > > > > http://www.microsoft.com/windowsxp/expertzone
> > > > > > > > > > > > > > > > Any technology distinguishable from magic is
> > > > > > > > > > > > > > > > insufficiently
> > > > > > > > > > > > > > > > advanced.
> > > > > > > > > > > > > > > > http://www.dts-l.org
> > > > > > > > > > > > > > > >
> > > > > > > > > >
> http://support.microsoft.com/servicedesks/fileversion/default.asp
> > > > > > > > > > > > > > > >
> > > > > > > > > > > > > > > >
> > > > > > > > > > > > > > > > "rtdos" > wrote in message
> > > > > > > > > > > > > > > > news:BcAoa.569376$S_4.627838@rwcrnsc53...
> > > > > > > > > > > > > > > > > is there a way to show ALL SID's in registry
> > > > > > > > > > > > > > > > > {regedit.exe}
> > > > > > > > > > > > > > > > > including
> > > > > > > > > > > > > > > > > hidden
> > > > > > > > > > > > > > > > > SID's and SID's from old users accounts ?
> > > > > > > > > > > > > > > > >
> > > > > > > > > > > > > > > > > --
> > > > > > > > > > > > > > > > > *** REPLY REQUESTED WHEN CONVENIENT ***
> > > > > > > > > > > > > > > > >
> > > > > > > > > > > > > > > > > Jeff
> > > > > > > > > > > > > > > > > http://geocities.com/rtdos
> > > > > > > > > > > > > > > > >
> > > > > > > > > > > > > > > > >
> > > > > > > > > > > > > > > >
> > > > > > > > > > > > > > >
> > > > > > > > > > > > > > >
> > > > > > > > > > > > > >
> > > > > > > > > > > > > >
> > > > > > > > > > >
> > > > > > > > > > >
> > > > > > > > > >
> > > > > > > > > >
> > > > > > > > >
> > > > > > > >
> > > > > > > >
> > > > > > >
> > > > > >
> > > > > >
> > > > >
> > > >
> > > >
> > >
> >
> >
Walter Clayton
December 5th 03, 07:38 PM
Not that I'm aware of unfortunately. You basically reproed what I stumbled
across with power users just via a different path. I think it revolves
around 2 issues. The first is that HE doesn't support anything other than
Admin and Basic class of users and an attempt to set anything else will
cause the account to be disabled. As well, virtually anything that "control
userpasswords2" does with regard group management is going to trigger
disabling the account. That then leads into the second issue which is the
fact that HE doesn't support disabled accounts.
--
Walter Clayton - MS MVP(WinXP)
Associate Expert
http://www.microsoft.com/windowsxp/expertzone
Any technology distinguishable from magic is insufficiently advanced.
http://www.dts-l.org
http://support.microsoft.com/servicedesks/fileversion/default.asp
"rtdos" > wrote in message
m...
> i think i may have just repro (but not exactly the same was as i did
> it but it did produce a similiar problem): I opened up User Accounts
> (default HE control panel applet) and then proceded to create a dummy
> account (named obviously dummy) and gave it administrator rights.
> then i opened up User Passwords 2 (the one we're not supposed to
> touch) and noticed that HE gave it Administrator+User status rather
> than just plain Administrator. I rebooted, logged into "dummy" account
> and then I opened up "userpasswords2" and I double clicked on the name
> and changed both name fields to "stupid" BUT it wouldn't accept it
> UNLESS I changed the account to exclusively Administrator. I then
> rebooted and the account disappeared from both the login screen as
> well as the User Passwords control panel applet HOWEVER just like the
> my other problem accounts I could press CTRL+ALT+DEL (twice) and login
> to *both* stupid and dummy accounts.
>
> I did notice that "explorer.exe" is VERY unstable at this point.
>
> Other than NOT using "userpasswords2" is there a way to prevent this?
>
>
vBulletin® v3.6.4, Copyright ©2000-2012, Jelsoft Enterprises Ltd.