Hi friends
I am facing a problem at my home computer. 
I had search for the solution on the net, I got also, but I am not able
to implement successfully.
The solution is 

I can't repro this. I've tried on both HE and Pro and if the only thing
you're doing is deleted user via the User control panel applet, I can't
get
it to hose. I even went so far as to use "control userpasswords2" on HE
to
delete a test account. No combination of add then deleting users via any
MS
standard tool is causing any problems. Unfortunately deleting the users
out
of the registry isn't a practical matter. I have a method that will
correct
a problem on HE when using "control userpassword2" in an attempt to
change a
user to power user status, but I have no idea if this will correct your
issue. This is principally because it assumes that the registry
structure
is intact and that the only issue is with status bits that were
incorrectly
set. If the registry structure it self has become corrupted then
manually
correcting it will be virtually impossible unless you have a good
structure
to compare against.

That stated, I'll give you the instructions for correcting a "control
userpasswords2" hose of the HE SAM.

WARNING!!!!! - This can hose your system unless you do things properly.
If
there is in fact structural damage in the registry all bets are off.
Take a
full system backup before proceeding otherwise you may cause SID related
issues. If you're running EFS make sure you back up certificates.

First thing is an admin class user with a functioning profile has to set
update permissions on the HKLM\SAM branch all the way down. This will
take
multiple hits (two at least) since inheritance isn't set all the way
down.

Drill down to HKLM\SAM\SAM\Domains\Account\Users\Names. The Names branch
has
the user names referenced under the Users branch cross refed by ID
(locate
the ID in the Name\[name] and use that value to locate the profile under
the
Users branch. Drill into the Users\[reference] branch and you'll see two
keys; one F and the other V. The problem lies on the V key, offset +4
(5th
byte for those that are programming challenged). If you attempt to make
user
a power user on HE, this should be set to 0xd4, which oddly enough is
the
same on Pro disabled accounts. If you alter that byte to 0xbc (which is
partially an indication of admin rights, but not completely) you can
then go
into the standard user control panel applet and set the user to limited
account (which is what I suggest at this stage) for safety reasons.

Now do a full system restart. You should now be able to log into the
account. If you try to log into the account with out a full system
restart
the system will attempt profile recovery, which fortunately, fails since
the
account is limited.

At this point, you should be able to use the users control panel applet
to
delete the user.

Do *not* attempt to manually delete users via regedit. Do *not* stray
from
the script. If you see anything in the registry that differs from the
above,
then stop. If the above doesn't work, then you have serious issues
beyond
the scope of what I can handle without being hands on the keyboard.

My suggestion still remains that you leave things as they are and work
around the problem.

Now I am able to navigate til v key for that account but confuse about
how to modify binary value.
The current value is very long, and multy line string.
Here he has writen about offset +4 (5th byte what does it mean? Is it
relevent for me? Or should I ignore it?


Thanks,
When you don't have any choice, you have a choice to work hard.
Sanjeev
Email: [EMAIL PROTECTED]
 Or [EMAIL PROTECTED]
Space: http://daarshnicsanjeev/spaces/live.com
 Call: +919820637390
Direct office: +9167572183

 


 
 
Important notice:This e-mail and any attachment thereto contains corporate 
proprietary information. If you have received it by mistake, please notify us 
immediately by reply e-mail and delete this e-mail and its attachments from 
your system. Thank You.

Join Access India convention: For updates on it visit: 
http://accessindia.org.in/harish/convention.htm

To unsubscribe send a message to [EMAIL PROTECTED] with the subject unsubscribe.

To change your subscription to digest mode or make any other changes, please 
visit the list home page at
  http://accessindia.org.in/mailman/listinfo/accessindia_accessindia.org.in

Reply via email to