Avatar
Please consider registering
guest
sp_LogInOut Log Insp_Registration Register
Register | Lost password?
Advanced Search
Forum Scope


Match



Forum Options



Minimum search word length is 3 characters - maximum search word length is 84 characters
sp_Feed Topic RSSsp_topic_old
Strange new 'Unknown Account' in Properties.
Avatar
Jim Hillier
Admin
March 2, 2011 - 8:42 pm
Member Since: August 9, 2011
Forum Posts: 2709
sp_UserOfflineSmall Offline

I'm really having a good time of it at the moment....not!! LOL

So I noticed this a few days back and have since been hunting all over the net for answers; suggestions/solutions there are most unhelpful.

Here's the gist:
A few days back I noticed a strange new "Unknown Account" appearing in[b:jpv5i8h5] Properties>Security[/b:jpv5i8h5]:
[attachment=1:jpv5i8h5]unknown acc 1.png[/attachment:jpv5i8h5]

If I click on[b:jpv5i8h5] Edit[/b:jpv5i8h5] and then [b:jpv5i8h5]Remove[/b:jpv5i8h5], I get this message:
[attachment=0:jpv5i8h5]unknown acc 2.png[/attachment:jpv5i8h5]

Now, I bought this machine brand new and installed the OS myself; it has never been part of any domain. Furthermore, I am the only user and there is (and always has been) just the one user account in my name. No other accounts have ever been created or deleted.

So, where in heck did this new account come from and how can I get rid of it??

Sheesh, these infernal machines!!!

BTW: All this seems to have been happening since I created an image via Win7 native software. Don't know why I decided to do that really, except as another backup (to Acronis) and just to see how it works.

TIA......Jim

Avatar
David Hartsock
Admin
March 3, 2011 - 1:51 am
Member Since: August 7, 2011
Forum Posts: 1117
sp_UserOfflineSmall Offline

Two possibilities I can think of Jim...

1. (Most likely) I bet you're dual booting in which case it is a SID from the other installation and that is why it shows as unknown.
2. It is created by the internal Win 7 backup utility to allow access to files that may be locked, different accounts, etc.
3. (not in this case) A left over SID from a deleted user account.

Avatar
Jim Hillier
Admin
March 3, 2011 - 3:13 am
Member Since: August 9, 2011
Forum Posts: 2709
sp_UserOfflineSmall Offline

Hey Dave - Thanks mate for the quick response.

You are 100% spot on with your number one suggestion; I am dual booting Win7 and Vista.....you da man!!!

OK, so what advice would you give? Should I just ignore those 'Unknown Account' entries and not worry about them??

Thanks again mate....Jim

Avatar
David Hartsock
Admin
March 3, 2011 - 3:26 am
Member Since: August 7, 2011
Forum Posts: 1117
sp_UserOfflineSmall Offline

I wouldn't worry too much about it. If you delete it I'm sure it would find its' way back as long as the other OS is present.

Avatar
Jim Hillier
Admin
March 3, 2011 - 5:42 am
Member Since: August 9, 2011
Forum Posts: 2709
sp_UserOfflineSmall Offline

OK...ta Dave.

At first I thought some kind of malware had gotten in and created a new account through which someone (no idea who) could access my machine. It wasn't until I started hunting around the net that I learned that was not the case and it was in fact a fairly common occurrence.

I must have a chat with you about SIDs, parents and inherited permissions some time...I really need some edification in that field.

Cheers mate...

Avatar
David Hartsock
Admin
March 3, 2011 - 6:03 am
Member Since: August 7, 2011
Forum Posts: 1117
sp_UserOfflineSmall Offline

[quote="ozbloke":y546o7c0]I must have a chat with you about SIDs, parents and inherited permissions some time...I really need some edification in that field. [/quote:y546o7c0]
I don't know how much help that would be!

Open regedit and head to HKLMSOFTWAREMicrosoftWindows NTCurrentVersionProfileList. Poke around there and you will see the SID's, their association, and other info. Not that you will ever need to make any changes (DON"T), but interesting to see how they are laid out.

Avatar
Jim Hillier
Admin
March 4, 2011 - 7:37 am
Member Since: August 9, 2011
Forum Posts: 2709
sp_UserOfflineSmall Offline

Will do!!!

And thanks for your help mate.

Forum Timezone: America/Indiana/Indianapolis
Most Users Ever Online: 2303
Currently Online:
Guest(s) 52
Currently Browsing this Page:
1 Guest(s)
Top Posters:
Chad Johnson: 867
Mindblower: 677
carbonterry2: 356
Flying Dutchman: 278
grr: 211
Member Stats:
Guest Posters: 11
Members: 3229
Moderators: 7
Admins: 3
Forum Stats:
Groups: 8
Forums: 20
Topics: 1954
Posts: 13563
Newest Members:
instaproapk, mousetesteronline, keshamatt, Patriciabin, MattOwens
Moderators: Carol Bratt: 67, dandl: 740, Jason Shuffield: 1, Jim Canfield: 8, Terry Hollett: 0, Stuart Berg: 0, John Durso: 0
Administrators: Jim Hillier: 2709, Richard Pedersen: 210, David Hartsock: 1117
Scroll to Top

WHY NOT SUBSCRIBE TO OUR NEWSLETTER?

Get great content like this delivered to your inbox!

It's free, convenient, and delivered right to your inbox! We do not spam and we will not share your address. Period!