Welcome to WinForumz.com!
FAQFAQ   SearchSearch      ProfileProfile    Private MessagesPrivate Messages   Log in/Register/PasswordLog in/Register/Password

Very strange admin account rename issue

 
   Windows XP (Home) -> XP Security Admin RSS
Related Topics:
Rename or Not to rename the Local Admin username...... - I am building a series of WinXP/SP2 computers that will operate outside our campany's domain. We desire to maintain an account with admin level rights for purposes. My options are (that I know of) - Keep the admin account as is; with a..

Admin Account without Admin Rights? - Hello, Looks like my XP Pro box got hacked a couple of days ago. Not quite sure how, but anyway, my question concerns the The attacker managed to set my normal admin account to Limited, and turn my limited account to Admin. But they also..

Strange File Sharing Issue - Well, maybe not strange, but is to me. A client has a network with 2 hardwired and 2 notebooks wireless. File and Print Sharing is turned on on all computers (XP Pro sp2 on all). The two can see each others files fine under..

new admin account - Hello all. I've been using my computer from new for about a year with an account. As a security measure I want to create a limited account to use day to day. My main concern is that all saved data and program msettings are to..

Create an new admin account - I have problem with a program and they have write to me an new admin account and reinstall the But how make I a new account in my XP pro.
Next:  XP Security Admin: DCOM Error  
Author Message
WILLIAM

External


Since: Oct 23, 2007
Posts: 3



(Msg. 1) Posted: Tue Feb 12, 2008 10:14 am
Post subject: Very strange admin account rename issue Get Alert
Archived from groups: microsoft>public>windowsxp>security_admin (more info?)

Ok, this is a weird one. I'm at an office where I did not make the master
image, and I had no problems ghosting it to 300+ machines. But now I'm
putting them all out at the desks, and logging in to finish the config when I
noticed this:

I log on locally the first time with the local admin account, call it ABCDE.
When I go to C:\documents and settings I notice I have an ABCDE folder, and
an Administrator folder.

Open gpedit and browse to the Local Security Options and "Rename
administrator account" is set to ABCDE as one would expect. This is always
how we do it. But normally when I rename the admin account, call it LMNOP,
the profile that it uses is still Administrator in Docs and Settings (If I
wanted the profile itself renamed to LMNOP I would have to manually rename
it).

So I ask, how in the heck do I have a profile for the built in local admin
account named ABCDE in docs and settings, AND and profile named Administrator
that doesn't ever get used anymore?

Thanks a bunch....I know it's a bit confusing what I just typed Smile

 >> Stay informed about: Very strange admin account rename issue 
Back to top
Login to vote
Anteaus

External


Since: Aug 08, 2007
Posts: 115



(Msg. 2) Posted: Tue Feb 12, 2008 11:57 am
Post subject: RE: Very strange admin account rename issue Get Alert [Login to view extended thread Info.]
Archived from groups: per prev. post (more info?)

First thing I'd make sure of is that the Administrator foder isn't being
used by some program or other which fails to use the proper method of
accessing userdata, but instead sets absolute-paths to profile contents. If a
program of this kind found its way into the default profile, this would
result in the previous profile-folder re-appearing when the user is renamed.

"WILLIAM" wrote:

> I log on locally the first time with the local admin account, call it ABCDE.
> When I go to C:\documents and settings I notice I have an ABCDE folder,
> and an Administrator folder.
>

 >> Stay informed about: Very strange admin account rename issue 
Back to top
Login to vote
WILLIAM

External


Since: Oct 23, 2007
Posts: 3



(Msg. 3) Posted: Tue Feb 19, 2008 10:13 am
Post subject: RE: Very strange admin account rename issue Get Alert [Login to view extended thread Info.]
Archived from groups: per prev. post (more info?)

just noticed a .consoleone folder in the profile. now i know. they created
a local administrator account, to log into the Tree with the administrator
account! Can you believe that???

"WILLIAM" wrote:

> Another strange thing, got an email saying there was a post to this, but I
> can't see it Smile
>
> Did some investigating and came up with something, and here's what happened:
>
> When I looked at User Profiles, I saw 2 unknown accounts, one which was
> 646Mb. I looked in Docs and Settings and "Administrator" was 646 Mb.
> Removed the profile, and the Administrator profile magically disappeared!
> Well, not really.
>
> Turns out, my guess anyway, the built in local admin account was renamed, as
> it should be. Then with another admin account, they renamed the Adminstrator
> folder to match the new name. THEN they created a local account and named
> it, of all things, Administrator. Logged on, created the profile, dumped
> 646Mb of junk, logged off, deleted the account, but neglected to delete the
> profile. Jeez. This is my life.
>
> A little more investigation and that second unknown account turned out to be
> a test user they setup the (incorrect) default user profile (it doesn't have
> half what it should). A little more investigation and found it was an image
> taken from another site, that has different functions and Windows is set up
> completely different for that site.
>
> It was a little time consuming but that HAS to be what happened, I can think
> of no other way. Because that Administrator folder deleted when the unknown
> account was removed, and as far as I know, if that Administrator folder was
> the "built in" admin, there's no way it could have been deleted......whew!
>
> "WILLIAM" wrote:
>
> > Ok, this is a weird one. I'm at an office where I did not make the master
> > image, and I had no problems ghosting it to 300+ machines. But now I'm
> > putting them all out at the desks, and logging in to finish the config when I
> > noticed this:
> >
> > I log on locally the first time with the local admin account, call it ABCDE.
> > When I go to C:\documents and settings I notice I have an ABCDE folder, and
> > an Administrator folder.
> >
> > Open gpedit and browse to the Local Security Options and "Rename
> > administrator account" is set to ABCDE as one would expect. This is always
> > how we do it. But normally when I rename the admin account, call it LMNOP,
> > the profile that it uses is still Administrator in Docs and Settings (If I
> > wanted the profile itself renamed to LMNOP I would have to manually rename
> > it).
> >
> > So I ask, how in the heck do I have a profile for the built in local admin
> > account named ABCDE in docs and settings, AND and profile named Administrator
> > that doesn't ever get used anymore?
> >
> > Thanks a bunch....I know it's a bit confusing what I just typed Smile
 >> Stay informed about: Very strange admin account rename issue 
Back to top
Login to vote
Display posts from previous:   
   Windows XP (Home) -> XP Security Admin All times are: Eastern Time (US & Canada) (change)
Page 1 of 1

 
You can post new topics in this forum
You can reply to topics in this forum
You can edit your posts in this forum
You can delete your posts in this forum
You can vote in polls in this forum

Categories:
  Windows XP
 Windows Vista!
 Win 2000/NT/98/ME


[ Contact us | Terms of Service/Privacy Policy ]