A Windows XP help forum. PCbanter

If this is your first visit, be sure to check out the FAQ by clicking the link above. You may have to register before you can post: click the register link above to proceed. To start viewing messages, select the forum that you want to visit from the selection below.

Go Back   Home » PCbanter forum » Microsoft Windows XP » Security and Administration with Windows XP
Site Map Home Register Authors List Search Today's Posts Mark Forums Read Web Partners

User account closed



 
 
Thread Tools Display Modes
  #1  
Old December 10th 08, 07:31 PM posted to microsoft.public.windowsxp.security_admin
angler
external usenet poster
 
Posts: 7
Default User account closed

XP SP3
After I started a thread (5/12/08) explaining that my user acc. Kuzman Novak
was cloned to Kuzman Novak.NOVAK which took over on start-up I received very
useful reply by "Anteaus" fully explained in page kb/314045
Upon reading it, I'd like to further evaluate my problem, and ask "Anteaus"
to comment the following, if possible:

Following instructions given in kb/314045, I opened
Registry\HKEY_LOCAL_MACHINE\Software\Microsoft\Win dows NT\ProfilList and
there I found:
S-1-5-18 (systemroot\system 32\config\systemprofile)
S-1-5-19 (documents and Settings\LocalService)
S-1-5-20 (documents and Settings\NetworkService)
S-1-5-21 with three extensions and with the following
ProfileImagePaths:
S-1-5-21-823518204-839522115-725345543-500 (administrator)
S-1-5-21-823518204-839522115-725345543-1003 (Kuzman Novak.NOVAK)
S-1-5-21-823518204-839522115-725345543-1003.bak (Kuzman Novak)

Obviously, the last one (with .bak extension) is my original (lost) User,
while the one above with Path: Kuzman Novak.NOVAK is cloned one. This one is
now in use.

Before I do anything, I though it would be wise to ask you for an oppinion:
What should I do now? Rename something, delete something ....

Thanks in advance.
Kuzman Novak
Ads
  #2  
Old December 10th 08, 10:16 PM posted to microsoft.public.windowsxp.security_admin
Shenan Stanley
external usenet poster
 
Posts: 10,523
Default User account closed

Angler wrote:
XP SP3
After I started a thread (5/12/08) explaining that my user acc.
Kuzman Novak was cloned to Kuzman Novak.NOVAK which took over on
start-up I received very useful reply by "Anteaus" fully explained
in page kb/314045
Upon reading it, I'd like to further evaluate my problem, and ask
"Anteaus" to comment the following, if possible:

Following instructions given in kb/314045, I opened
Registry\HKEY_LOCAL_MACHINE\Software\Microsoft\Win dows
NT\ProfilList and there I found:
S-1-5-18 (systemroot\system 32\config\systemprofile)
S-1-5-19 (documents and Settings\LocalService)
S-1-5-20 (documents and Settings\NetworkService)
S-1-5-21 with three extensions and with the following
ProfileImagePaths:
S-1-5-21-823518204-839522115-725345543-500 (administrator)
S-1-5-21-823518204-839522115-725345543-1003 (Kuzman
Novak.NOVAK)
S-1-5-21-823518204-839522115-725345543-1003.bak (Kuzman Novak)

Obviously, the last one (with .bak extension) is my original (lost)
User, while the one above with Path: Kuzman Novak.NOVAK is cloned
one. This one is now in use.

Before I do anything, I though it would be wise to ask you for an
oppinion: What should I do now? Rename something, delete something


Something happened to your original profile. (It is the profile - not the
account. The account is just the username/password combination. The
Profile is the directory structure you are speaking of.)

It could have become corrupt, etc.

If it were me - I would create a new user account and log into it. I would
set it up the way I wanted (desktop arrangement, start menu arrangement,
background image, "My Computer" look, etc.) and then take ownership of all
the other directories (profile folders) with my old user information in
them. I would manually copy over the Internet Favorites, My Documents, etc
that I wanted to keep from the old account profile directories.

Once I was *sure* I had everything - I would copy all the other user profile
directories (where I pulled information out of) to an external storage
medium - CD/DVD or external hard drive or something. Actually move it off
the computer. I would then go into my Users control panel and erase the old
user accounts.

The movement of the files/folders is a safety fall-back. That way I can
still get to the data.

The new account and profile is to make sure I start out with a completely
clean profile.

--
Shenan Stanley
MS-MVP
--
How To Ask Questions The Smart Way
http://www.catb.org/~esr/faqs/smart-questions.html


  #3  
Old December 10th 08, 10:47 PM posted to microsoft.public.windowsxp.security_admin
angler
external usenet poster
 
Posts: 7
Default User account closed

Dear Shenan Stanley

Thanks a lot. The idea is really good and clear. I am ready to work it out
as per your suggestion.
However, in order to avoid quite a procedure, what do you think of following
shortcut using regedit:
1. I rename ProfileImagePath in ProfileList
S-1-5-21-823518204-839522115-725345543-1003 (Kuzman Novak.NOVAK) to Kuzman
Novak
2. I rename ProfileImagePath in ProfileList
S-1-5-21-823518204-839522115-725345543-1003.bak (Kuzman Novak) to Kuzman
Novak.NOVAK
What might hapen?
Best regards
Kuzman Novak


"Shenan Stanley" wrote:

Angler wrote:
XP SP3
After I started a thread (5/12/08) explaining that my user acc.
Kuzman Novak was cloned to Kuzman Novak.NOVAK which took over on
start-up I received very useful reply by "Anteaus" fully explained
in page kb/314045
Upon reading it, I'd like to further evaluate my problem, and ask
"Anteaus" to comment the following, if possible:

Following instructions given in kb/314045, I opened
Registry\HKEY_LOCAL_MACHINE\Software\Microsoft\Win dows
NT\ProfilList and there I found:
S-1-5-18 (systemroot\system 32\config\systemprofile)
S-1-5-19 (documents and Settings\LocalService)
S-1-5-20 (documents and Settings\NetworkService)
S-1-5-21 with three extensions and with the following
ProfileImagePaths:
S-1-5-21-823518204-839522115-725345543-500 (administrator)
S-1-5-21-823518204-839522115-725345543-1003 (Kuzman
Novak.NOVAK)
S-1-5-21-823518204-839522115-725345543-1003.bak (Kuzman Novak)

Obviously, the last one (with .bak extension) is my original (lost)
User, while the one above with Path: Kuzman Novak.NOVAK is cloned
one. This one is now in use.

Before I do anything, I though it would be wise to ask you for an
oppinion: What should I do now? Rename something, delete something


Something happened to your original profile. (It is the profile - not the
account. The account is just the username/password combination. The
Profile is the directory structure you are speaking of.)

It could have become corrupt, etc.

If it were me - I would create a new user account and log into it. I would
set it up the way I wanted (desktop arrangement, start menu arrangement,
background image, "My Computer" look, etc.) and then take ownership of all
the other directories (profile folders) with my old user information in
them. I would manually copy over the Internet Favorites, My Documents, etc
that I wanted to keep from the old account profile directories.

Once I was *sure* I had everything - I would copy all the other user profile
directories (where I pulled information out of) to an external storage
medium - CD/DVD or external hard drive or something. Actually move it off
the computer. I would then go into my Users control panel and erase the old
user accounts.

The movement of the files/folders is a safety fall-back. That way I can
still get to the data.

The new account and profile is to make sure I start out with a completely
clean profile.

--
Shenan Stanley
MS-MVP
--
How To Ask Questions The Smart Way
http://www.catb.org/~esr/faqs/smart-questions.html



  #4  
Old December 11th 08, 03:07 AM posted to microsoft.public.windowsxp.security_admin
Shenan Stanley
external usenet poster
 
Posts: 10,523
Default User account closed

Angler wrote:
Dear Shenan Stanley

Thanks a lot. The idea is really good and clear. I am ready to work
it out as per your suggestion.
However, in order to avoid quite a procedure, what do you think of
following shortcut using regedit:
1. I rename ProfileImagePath in ProfileList
S-1-5-21-823518204-839522115-725345543-1003 (Kuzman Novak.NOVAK) to
Kuzman Novak
2. I rename ProfileImagePath in ProfileList
S-1-5-21-823518204-839522115-725345543-1003.bak (Kuzman Novak) to
Kuzman Novak.NOVAK
What might hapen?


It might load your old profile.
It might fail and create another profile for you to mess with.

(If it created the new one because of corruption - doubtful that corruption
fixed itself. If it created the new one because of a repair installation -
doubtful it will recognize the old user IDs.)

--
Shenan Stanley
MS-MVP
--
How To Ask Questions The Smart Way
http://www.catb.org/~esr/faqs/smart-questions.html


  #5  
Old December 15th 08, 02:55 AM posted to microsoft.public.windowsxp.security_admin
angler
external usenet poster
 
Posts: 7
Default User account closed

Dear Stanley,
I did "as if I were you" and it worked out.
Thanks for help.
Kuzman Novak

"Shenan Stanley" wrote:

Angler wrote:
Dear Shenan Stanley

Thanks a lot. The idea is really good and clear. I am ready to work
it out as per your suggestion.
However, in order to avoid quite a procedure, what do you think of
following shortcut using regedit:
1. I rename ProfileImagePath in ProfileList
S-1-5-21-823518204-839522115-725345543-1003 (Kuzman Novak.NOVAK) to
Kuzman Novak
2. I rename ProfileImagePath in ProfileList
S-1-5-21-823518204-839522115-725345543-1003.bak (Kuzman Novak) to
Kuzman Novak.NOVAK
What might hapen?


It might load your old profile.
It might fail and create another profile for you to mess with.

(If it created the new one because of corruption - doubtful that corruption
fixed itself. If it created the new one because of a repair installation -
doubtful it will recognize the old user IDs.)

--
Shenan Stanley
MS-MVP
--
How To Ask Questions The Smart Way
http://www.catb.org/~esr/faqs/smart-questions.html



 




Thread Tools
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

vB code is On
Smilies are On
[IMG] code is Off
HTML code is Off






All times are GMT +1. The time now is 03:09 PM.


Powered by vBulletin® Version 3.6.4
Copyright ©2000 - 2024, Jelsoft Enterprises Ltd.
Copyright ©2004-2024 PCbanter.
The comments are property of their posters.