1. This site uses cookies. By continuing to use this site, you are agreeing to our use of cookies. Learn More.

SIDS/NTUser.dat....

Discussion in 'Software' started by steveh2001, Apr 10, 2007.

  1. steveh2001

    steveh2001 Byte Poster

    204
    3
    22
    Hey guys

    Wondering if someone had a guide or a link to a guide on SIDS and the NTUser.dat file...

    I understand the NTUser.dat is simply the HKCU part of the registry, set for each user and held in c:\docs and settings\username.

    Just I have come across several issues recently and would like to learn more about troubleshooting these - for example.

    User left the business at work - and someone took over their role. They wanted their entire user profile as we dont allow people to use other peoples credentials. So i figured I would just rename the profile folder to the other user name, they log on and their profile would be set...

    However they logged on after renaming this - and it created a blank profile with the username.domain name. I then logged the user off and renamed the profile with the content to username.domain name - logged them back on and it created another blank profile!

    I understand the ntuser.dat holds the SID of the user, and as the username was different, it couldnt use the old NTUser.dat..

    Hope some could correct me/point me to a guide!

    Many thanks
     
    Certifications: A+,N+,CommVault,MCSA/MCSE 2003,VCP 4.1.
    WIP: ?
  2. mondos

    mondos Kilobyte Poster

    335
    4
    37
    Did you not use the rename option in in the Local users and groups window, if you did you wouldn't have had to create a new account, which it sounds like you have done.
     
    Certifications: A+
    WIP: N+, MCDST and finding a job!
  3. steveh2001

    steveh2001 Byte Poster

    204
    3
    22

    It was a domain based account so dont think I would have been able to do that
     
    Certifications: A+,N+,CommVault,MCSA/MCSE 2003,VCP 4.1.
    WIP: ?
  4. mondos

    mondos Kilobyte Poster

    335
    4
    37
    My mistake :eek: .
     
    Certifications: A+
    WIP: N+, MCDST and finding a job!
  5. steveh2001

    steveh2001 Byte Poster

    204
    3
    22
    No worries! Unfortunatly policy says we cant just rename the account on the server which would be a lot easier!
     
    Certifications: A+,N+,CommVault,MCSA/MCSE 2003,VCP 4.1.
    WIP: ?
  6. mondos

    mondos Kilobyte Poster

    335
    4
    37
    Don't we just love policies.
     
    Certifications: A+
    WIP: N+, MCDST and finding a job!
  7. Sparky
    Highly Decorated Member Award

    Sparky Zettabyte Poster Moderator

    10,190
    296
    319
    Renaming the AD account would have been the quickest way but if 'policy' doesnt let you do that you can copy the account before deleting it. 8)
     
    Certifications: MSc MCSE MCSA:M MCSA:S MCITP:EA MCTS(x5) Security+ Network+ A+
    WIP: Exchange 2007\2010
  8. steveh2001

    steveh2001 Byte Poster

    204
    3
    22
    But how does that let you use the user profile stored on the local machine? would the SID be copied?
     
    Certifications: A+,N+,CommVault,MCSA/MCSE 2003,VCP 4.1.
    WIP: ?
  9. Sparky
    Highly Decorated Member Award

    Sparky Zettabyte Poster Moderator

    10,190
    296
    319
    The SID wouldnt if you copied the account but group membership etc would be.

    If you are limited to access the AD perhaps export the profile and then import it when you have logged on with the new user account.
     
    Certifications: MSc MCSE MCSA:M MCSA:S MCITP:EA MCTS(x5) Security+ Network+ A+
    WIP: Exchange 2007\2010
  10. steveh2001

    steveh2001 Byte Poster

    204
    3
    22
    Ahh yea the group membership wouldnt be an issue as you suggested its OK to copy the accounts. How do you export the profile? File and settings transfer wiz?

    Thanks for the help!
     
    Certifications: A+,N+,CommVault,MCSA/MCSE 2003,VCP 4.1.
    WIP: ?
  11. Sparky
    Highly Decorated Member Award

    Sparky Zettabyte Poster Moderator

    10,190
    296
    319
    Yeah, that should do it. 8)
     
    Certifications: MSc MCSE MCSA:M MCSA:S MCITP:EA MCTS(x5) Security+ Network+ A+
    WIP: Exchange 2007\2010
  12. simongrahamuk
    Honorary Member

    simongrahamuk Hmmmmmmm?

    6,199
    125
    199
    You could just copy the contents of the profile folder to the new profile folder.
     
  13. steveh2001

    steveh2001 Byte Poster

    204
    3
    22
    Yep that was what I ended up doing - thing is though i think its the NTUser.dat which holds drive/network printer mappings, and this person had a lot! So it wasnt ideal, but normally that's what i'd do.

    Just looking for some more info really - there was another case where a machine slowed right down, and had errors in the event log where by apparently group policy could not identify a SID and I was just curious as to why this could happen
     
    Certifications: A+,N+,CommVault,MCSA/MCSE 2003,VCP 4.1.
    WIP: ?

Share This Page

Loading...