Account membership changed/dissapeared off welcome screen

G

Guest

Hi folks, hey, something really odd occurred on one of my workstations. I
have a workgroup with a few computers, each running Windows XP Media Edition
2005. Each computer has identical user accounts with the same password on
each account on each computer. Now, the computer this occurred on is an HP
With a gig of RAM, 250 Gigs hard drive, with a Pentium D dual Core processor
at 2.8 Ghtz. It is only about four months old.

I have two administrator accounts not including the System Admininstrator
Account on each computer with the rest limited user accounts. The guest
account is disabled on each computer and simple file sharing is also
disabled.

The other day, one of my admin accounts suddenly was not listed on the
welcome screen. It was still logged on, yet only accessable via the
Ctrl+Alt+Delete pushed twice as though the welcome screen was not activated,
though the other acconts all showed up. I had looked into the "Control
userpasswords2" form of account management earlier that day, and was
surprised to see that administrator account listed as a member of the
debugger group. The System Administrator Account is also listed as a member
of the debugger group AND the Administrator group.

I had not used the control userpasswords2 forum prior to this so left it
alone, clicking the cancel button the exit the program. A window appreared
stating a change had occurred in the user profile and I needed to log off and
back on for it to take affect. I had not made any changes so just went ahead
and clicked OK, then left the computer to go to the welocme screen upon the
specified time limit in my power scheme. Later that evening when I went back
to the computer, the account was off the welcome screen, yet showed a user
was logged on, so I knew it was still active. I went into the other
administrator account on this machine and went into the user applet in the
control panel. The missing account was not there any longer. I then went back
to the welcome screen and used the double Ctrl+Alt+Delete to access that form
of access and after putting in the password successfully logged onto the
account, yet found all programs inaccessable due to lack of privleges. So, I
then went back to the other administrator account, went into the control
userpasswords2 and tried resetting the password with no luck, so I then went
and changed the account from "debugger" to "administrator" and it was back up
on the welcome screen and everything was back to normal.

My question is obvious, what happened here? I screened for viruses and other
malware and the system is clean. I did not make any changes to this account
except a few months ago attempted to changer the user name from HP_Owner to
the name of the user. It comes up as the new name on everything except the
full address for all documents, programs etc in Windows Explorer. For some
odd reason it will not reflect the name change properly, even for programs
and documents created and/or installed after the name change. I did not touch
anything to change group membership, nor has anyone else.

We are using a WIFI network, a Belkin N router, with Belkin Adapters, with
WPA encryption, a good hardware firewall, MAc Addressing, changed SSID, set
strong passwords both for encryption and for the web browser setup utility.
Windows manages our network, not the Belkin client utility. All is good
there. We also use Panda Internet Security Suite which has firewall and all
included, and is a fine software program.

Anyone out there who may have some idea what occured? I fixed it, and could
again, but I don't knwo what went wrong, and would really like to know that
so as to avoid this in the future. If I somehow inadvertently hit a wrong
key.....it seems impossible. I know I did not touch anything that day or any
other to do such an affect. Please let me know if somebody has the slightest
idea what happened. I would like to know for my own edification. Thanks so
much,

Seree
 
R

Roger Abell [MVP]

Seree

I am a little confused as to whether you changed the name of
the account or you changed the group memberships of it, as
subject says the later but your narrative seems to say the former.

If the former, then take a look in the registry at
HKLM/software/microsoft/windows
nt/currentversion/winlogon/specialaccounts/userlist
User accounts listed here with a value of 0 are nondisplay
on the welcome screen but user accounts with value 1 are
Inital parts of names listed here with value 65536 cause any
user accounts that start with the to not show.

Some things fetch a displayed user name from fields stored
in the registry as information about the registered user rather
than just info from the accouts, which is possibly what you are
at times seeing and have been unable to change.
 

Ask a Question

Want to reply to this thread or ask your own question?

You'll need to choose a username for the site, which only take a couple of moments. After that, you can post your question and our members will help you out.

Ask a Question

Top