Strange new 'Unknown Account' in Properties.

Avatar

Please consider registering
Guest

Search

— Forum Scope —






— Match —





— Forum Options —





Minimum search word length is 3 characters - maximum search word length is 84 characters

Register Lost password?
sp_Feed sp_topic_old
Strange new 'Unknown Account' in Properties.
Avatar
Jim Hillier
Admin
Forum Posts: 2492
Member Since:
August 9, 2011
sp_UserOfflineSmall Offline
1
March 2, 2011 - 8:42 pm
sp_Permalink sp_Print

I'm really having a good time of it at the moment....not!! LOL

So I noticed this a few days back and have since been hunting all over the net for answers; suggestions/solutions there are most unhelpful.

Here's the gist:
A few days back I noticed a strange new "Unknown Account" appearing in[b:jpv5i8h5] Properties>Security[/b:jpv5i8h5]:
[attachment=1:jpv5i8h5]unknown acc 1.png[/attachment:jpv5i8h5]

If I click on[b:jpv5i8h5] Edit[/b:jpv5i8h5] and then [b:jpv5i8h5]Remove[/b:jpv5i8h5], I get this message:
[attachment=0:jpv5i8h5]unknown acc 2.png[/attachment:jpv5i8h5]

Now, I bought this machine brand new and installed the OS myself; it has never been part of any domain. Furthermore, I am the only user and there is (and always has been) just the one user account in my name. No other accounts have ever been created or deleted.

So, where in heck did this new account come from and how can I get rid of it??

Sheesh, these infernal machines!!!

BTW: All this seems to have been happening since I created an image via Win7 native software. Don't know why I decided to do that really, except as another backup (to Acronis) and just to see how it works.

TIA......Jim

Avatar
David Hartsock
Admin
Forum Posts: 1105
Member Since:
August 7, 2011
sp_UserOfflineSmall Offline
2
March 3, 2011 - 1:51 am
sp_Permalink sp_Print

Two possibilities I can think of Jim...

1. (Most likely) I bet you're dual booting in which case it is a SID from the other installation and that is why it shows as unknown.
2. It is created by the internal Win 7 backup utility to allow access to files that may be locked, different accounts, etc.
3. (not in this case) A left over SID from a deleted user account.

Avatar
Jim Hillier
Admin
Forum Posts: 2492
Member Since:
August 9, 2011
sp_UserOfflineSmall Offline
3
March 3, 2011 - 3:13 am
sp_Permalink sp_Print

Hey Dave - Thanks mate for the quick response.

You are 100% spot on with your number one suggestion; I am dual booting Win7 and Vista.....you da man!!!

OK, so what advice would you give? Should I just ignore those 'Unknown Account' entries and not worry about them??

Thanks again mate....Jim

Avatar
David Hartsock
Admin
Forum Posts: 1105
Member Since:
August 7, 2011
sp_UserOfflineSmall Offline
4
March 3, 2011 - 3:26 am
sp_Permalink sp_Print

I wouldn't worry too much about it. If you delete it I'm sure it would find its' way back as long as the other OS is present.

Avatar
Jim Hillier
Admin
Forum Posts: 2492
Member Since:
August 9, 2011
sp_UserOfflineSmall Offline
5
March 3, 2011 - 5:42 am
sp_Permalink sp_Print

OK...ta Dave.

At first I thought some kind of malware had gotten in and created a new account through which someone (no idea who) could access my machine. It wasn't until I started hunting around the net that I learned that was not the case and it was in fact a fairly common occurrence.

I must have a chat with you about SIDs, parents and inherited permissions some time...I really need some edification in that field.

Cheers mate...

Avatar
David Hartsock
Admin
Forum Posts: 1105
Member Since:
August 7, 2011
sp_UserOfflineSmall Offline
6
March 3, 2011 - 6:03 am
sp_Permalink sp_Print

I must have a chat with you about SIDs, parents and inherited permissions some time...I really need some edification in that field. [/quote:y546o7c0]
I don't know how much help that would be!

Open regedit and head to HKLMSOFTWAREMicrosoftWindows NTCurrentVersionProfileList. Poke around there and you will see the SID's, their association, and other info. Not that you will ever need to make any changes (DON"T), but interesting to see how they are laid out.

Avatar
Jim Hillier
Admin
Forum Posts: 2492
Member Since:
August 9, 2011
sp_UserOfflineSmall Offline
7
March 4, 2011 - 7:37 am
sp_Permalink sp_Print

Will do!!!

And thanks for your help mate.

Forum Timezone: America/Indiana/Indianapolis

Most Users Ever Online: 188

Currently Online:
14 Guest(s)

Currently Browsing this Page:
1 Guest(s)

Member Stats:

Guest Posters: 10

Members: 1273

Moderators: 3

Admins: 4

Forum Stats:

Groups: 8

Forums: 19

Topics: 1538

Posts: 11824

Administrators: Jim Hillier, Richard Pedersen, David Hartsock, Marc Thomas

Moderators: Judy Novotny, Jason Shuffield, Mail Poet