SIDS/NTUser.dat....

Oh man! Ad-blocking software has been detected! :'(

This website is run by the community, for the community... and it needs advertisements in order to keep running. Blocking our ads means your killing our stats!
Please disable your ad-block, or become a premium member to hide all advertisements and this notice.

Hey guys

Wondering if someone had a guide or a link to a guide on SIDS and the NTUser.dat file...

I understand the NTUser.dat is simply the HKCU part of the registry, set for each user and held in c:\docs and settings\username.

Just I have come across several issues recently and would like to learn more about troubleshooting these - for example.

User left the business at work - and someone took over their role. They wanted their entire user profile as we dont allow people to use other peoples credentials. So i figured I would just rename the profile folder to the other user name, they log on and their profile would be set...

However they logged on after renaming this - and it created a blank profile with the username.domain name. I then logged the user off and renamed the profile with the content to username.domain name - logged them back on and it created another blank profile!

I understand the ntuser.dat holds the SID of the user, and as the username was different, it couldnt use the old NTUser.dat..

Hope some could correct me/point me to a guide!

Many thanks

 

Oh man! Ad-blocking software has been detected! :'(

This website is run by the community, for the community... and it needs advertisements in order to keep running. Blocking our ads means your killing our stats!
Please disable your ad-block, or become a premium member to hide all advertisements and this notice.

Did you not use the rename option in in the Local users and groups window, if you did you wouldn't have had to create a new account, which it sounds like you have done.

 

It was a domain based account so dont think I would have been able to do that

 

My mistake .

 

No worries! Unfortunatly policy says we cant just rename the account on the server which would be a lot easier!

 

Don't we just love policies.

 

But how does that let you use the user profile stored on the local machine? would the SID be copied?

 

Ahh yea the group membership wouldnt be an issue as you suggested its OK to copy the accounts. How do you export the profile? File and settings transfer wiz?

Thanks for the help!

 

You could just copy the contents of the profile folder to the new profile folder.

 

Yep that was what I ended up doing - thing is though i think its the NTUser.dat which holds drive/network printer mappings, and this person had a lot! So it wasnt ideal, but normally that's what i'd do.

Just looking for some more info really - there was another case where a machine slowed right down, and had errors in the event log where by apparently group policy could not identify a SID and I was just curious as to why this could happen