I'm really having a good time of it at the moment....not!! LOL
So I noticed this a few days back and have since been hunting all over the net for answers; suggestions/solutions there are most unhelpful.
Here's the gist:
A few days back I noticed a strange new "Unknown Account" appearing in[b:jpv5i8h5] Properties>Security[/b:jpv5i8h5]:
[attachment=1:jpv5i8h5]unknown acc 1.png[/attachment:jpv5i8h5]
If I click on[b:jpv5i8h5] Edit[/b:jpv5i8h5] and then [b:jpv5i8h5]Remove[/b:jpv5i8h5], I get this message:
[attachment=0:jpv5i8h5]unknown acc 2.png[/attachment:jpv5i8h5]
Now, I bought this machine brand new and installed the OS myself; it has never been part of any domain. Furthermore, I am the only user and there is (and always has been) just the one user account in my name. No other accounts have ever been created or deleted.
So, where in heck did this new account come from and how can I get rid of it??
Sheesh, these infernal machines!!!
BTW: All this seems to have been happening since I created an image via Win7 native software. Don't know why I decided to do that really, except as another backup (to Acronis) and just to see how it works.
Two possibilities I can think of Jim...
1. (Most likely) I bet you're dual booting in which case it is a SID from the other installation and that is why it shows as unknown.
2. It is created by the internal Win 7 backup utility to allow access to files that may be locked, different accounts, etc.
3. (not in this case) A left over SID from a deleted user account.
Hey Dave - Thanks mate for the quick response.
You are 100% spot on with your number one suggestion; I am dual booting Win7 and Vista.....you da man!!!
OK, so what advice would you give? Should I just ignore those 'Unknown Account' entries and not worry about them??
Thanks again mate....Jim
At first I thought some kind of malware had gotten in and created a new account through which someone (no idea who) could access my machine. It wasn't until I started hunting around the net that I learned that was not the case and it was in fact a fairly common occurrence.
I must have a chat with you about SIDs, parents and inherited permissions some time...I really need some edification in that field.
[quote="ozbloke":y546o7c0]I must have a chat with you about SIDs, parents and inherited permissions some time...I really need some edification in that field. [/quote:y546o7c0]
I don't know how much help that would be!
Open regedit and head to HKLMSOFTWAREMicrosoftWindows NTCurrentVersionProfileList. Poke around there and you will see the SID's, their association, and other info. Not that you will ever need to make any changes (DON"T), but interesting to see how they are laid out.
Most Users Ever Online: 2303
Currently Browsing this Page:
Guest Posters: 11
Administrators: Jim Hillier, Richard Pedersen, David Hartsock, Marc Thomas
Moderators: Carol Bratt, dandl, Jason Shuffield, Jim Canfield, Terry Hollett, Sergey Grankin