User account closed

[Angler]

XP SP3
After I started a thread (5/12/08) explaining that my user acc. Kuzman Novak
was cloned to Kuzman Novak.NOVAK which took over on start-up I received very
useful reply by "Anteaus" fully explained in page kb/314045
Upon reading it, I'd like to further evaluate my problem, and ask "Anteaus"
to comment the following, if possible:

Following instructions given in kb/314045, I opened
Registry\HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\ProfilList and
there I found:
S-1-5-18 (systemroot\system 32\config\systemprofile)
S-1-5-19 (documents and Settings\LocalService)
S-1-5-20 (documents and Settings\NetworkService)
S-1-5-21 with three extensions and with the following
ProfileImagePaths:
S-1-5-21-823518204-839522115-725345543-500 (administrator)
S-1-5-21-823518204-839522115-725345543-1003 (Kuzman Novak.NOVAK)
S-1-5-21-823518204-839522115-725345543-1003.bak (Kuzman Novak)

Obviously, the last one (with .bak extension) is my original (lost) User,
while the one above with Path: Kuzman Novak.NOVAK is cloned one. This one is
now in use.

Before I do anything, I though it would be wise to ask you for an oppinion:
What should I do now? Rename something, delete something ....

Thanks in advance.
Kuzman Novak

 

[Shenan Stanley]

XP SP3
After I started a thread (5/12/08) explaining that my user acc.
Kuzman Novak was cloned to Kuzman Novak.NOVAK which took over on
start-up I received very useful reply by "Anteaus" fully explained
in page kb/314045
Upon reading it, I'd like to further evaluate my problem, and ask
"Anteaus" to comment the following, if possible:

Following instructions given in kb/314045, I opened
Registry\HKEY_LOCAL_MACHINE\Software\Microsoft\Windows
NT\ProfilList and there I found:
S-1-5-18 (systemroot\system 32\config\systemprofile)
S-1-5-19 (documents and Settings\LocalService)
S-1-5-20 (documents and Settings\NetworkService)
S-1-5-21 with three extensions and with the following
ProfileImagePaths:
S-1-5-21-823518204-839522115-725345543-500 (administrator)
S-1-5-21-823518204-839522115-725345543-1003 (Kuzman
Novak.NOVAK)
S-1-5-21-823518204-839522115-725345543-1003.bak (Kuzman Novak)

Obviously, the last one (with .bak extension) is my original (lost)
User, while the one above with Path: Kuzman Novak.NOVAK is cloned
one. This one is now in use.

Before I do anything, I though it would be wise to ask you for an
oppinion: What should I do now? Rename something, delete something

Something happened to your original profile. (It is the profile - not the
account. The account is just the username/password combination. The
Profile is the directory structure you are speaking of.)

It could have become corrupt, etc.

If it were me - I would create a new user account and log into it. I would
set it up the way I wanted (desktop arrangement, start menu arrangement,
background image, "My Computer" look, etc.) and then take ownership of all
the other directories (profile folders) with my old user information in
them. I would manually copy over the Internet Favorites, My Documents, etc
that I wanted to keep from the old account profile directories.

Once I was *sure* I had everything - I would copy all the other user profile
directories (where I pulled information out of) to an external storage
medium - CD/DVD or external hard drive or something. Actually move it off
the computer. I would then go into my Users control panel and erase the old
user accounts.

The movement of the files/folders is a safety fall-back. That way I can
still get to the data.

The new account and profile is to make sure I start out with a completely
clean profile.

 

[Angler]

Dear Shenan Stanley

Thanks a lot. The idea is really good and clear. I am ready to work it out
as per your suggestion.
However, in order to avoid quite a procedure, what do you think of following
shortcut using regedit:
1. I rename ProfileImagePath in ProfileList
S-1-5-21-823518204-839522115-725345543-1003 (Kuzman Novak.NOVAK) to Kuzman
Novak
2. I rename ProfileImagePath in ProfileList
S-1-5-21-823518204-839522115-725345543-1003.bak (Kuzman Novak) to Kuzman
Novak.NOVAK
What might hapen?
Best regards
Kuzman Novak

 

[Shenan Stanley]

Dear Shenan Stanley

Thanks a lot. The idea is really good and clear. I am ready to work
it out as per your suggestion.
However, in order to avoid quite a procedure, what do you think of
following shortcut using regedit:
1. I rename ProfileImagePath in ProfileList
S-1-5-21-823518204-839522115-725345543-1003 (Kuzman Novak.NOVAK) to
Kuzman Novak
2. I rename ProfileImagePath in ProfileList
S-1-5-21-823518204-839522115-725345543-1003.bak (Kuzman Novak) to
Kuzman Novak.NOVAK
What might hapen?

It might load your old profile.
It might fail and create another profile for you to mess with.

(If it created the new one because of corruption - doubtful that corruption
fixed itself. If it created the new one because of a repair installation -
doubtful it will recognize the old user IDs.)

 

[Angler]

Dear Stanley,
I did "as if I were you" and it worked out.
Thanks for help.
Kuzman Novak