I'm really having a good time of it at the moment....not!! LOL
So I noticed this a few days back and have since been hunting all over the net for answers; suggestions/solutions there are most unhelpful.
Here's the gist:
A few days back I noticed a strange new "Unknown Account" appearing in[b:jpv5i8h5] Properties>Security[/b:jpv5i8h5]:
[attachment=1:jpv5i8h5]unknown acc 1.png[/attachment:jpv5i8h5]
If I click on[b:jpv5i8h5] Edit[/b:jpv5i8h5] and then [b:jpv5i8h5]Remove[/b:jpv5i8h5], I get this message:
[attachment=0:jpv5i8h5]unknown acc 2.png[/attachment:jpv5i8h5]
Now, I bought this machine brand new and installed the OS myself; it has never been part of any domain. Furthermore, I am the only user and there is (and always has been) just the one user account in my name. No other accounts have ever been created or deleted.
So, where in heck did this new account come from and how can I get rid of it??
Sheesh, these infernal machines!!!
BTW: All this seems to have been happening since I created an image via Win7 native software. Don't know why I decided to do that really, except as another backup (to Acronis) and just to see how it works.
TIA......Jim
Two possibilities I can think of Jim...
1. (Most likely) I bet you're dual booting in which case it is a SID from the other installation and that is why it shows as unknown.
2. It is created by the internal Win 7 backup utility to allow access to files that may be locked, different accounts, etc.
3. (not in this case) A left over SID from a deleted user account.
OK...ta Dave.
At first I thought some kind of malware had gotten in and created a new account through which someone (no idea who) could access my machine. It wasn't until I started hunting around the net that I learned that was not the case and it was in fact a fairly common occurrence.
I must have a chat with you about SIDs, parents and inherited permissions some time...I really need some edification in that field.
Cheers mate...
[quote="ozbloke":y546o7c0]I must have a chat with you about SIDs, parents and inherited permissions some time...I really need some edification in that field. [/quote:y546o7c0]
I don't know how much help that would be!
Open regedit and head to HKLMSOFTWAREMicrosoftWindows NTCurrentVersionProfileList. Poke around there and you will see the SID's, their association, and other info. Not that you will ever need to make any changes (DON"T), but interesting to see how they are laid out.
1 Guest(s)