Win2K3 Srv Creating New User Accounts On Boot

Home Forums Server Operating Systems Windows Server 2000 / 2003 / 2003 R2 Win2K3 Srv Creating New User Accounts On Boot

This topic contains 8 replies, has 4 voices, and was last updated by Avatar universal 4 years, 1 month ago.

Viewing 9 posts - 1 through 9 (of 9 total)
  • Author
    Posts
  • Avatar
    GreenGhost
    Member
    #166175

    My Win2K3 Server is creating a new user account when it boots up, instead of using the existing account.
    For example, assume the account is called “USER”
    It is creating a new account named “USER.DOMAIN”

    The new “USER.DOMAIN” account appears to have migrated all the settings from the “USER” account, so that it’s almost impossible to tell them apart.

    My problem is that this account doesn’t seem to be able to access the DHCP nor DNS server (as well as other services) and the other Win2K3 server, which is the BDC.

    I have tried to remove the HDD from the machine and on another windows machine, remove the directory “USER.DOMAIN” and place it on a USB key. Then put the drive back in and boot up again. It just creates another “USER.DOMAIN” account again but this time all the settings were also lost as if it created a completely new USER account from scratch.

    I would need to have it revert back to the original “USER” account so that everything is functional again.

    I would also like to know how this happened and why, if someone would be kind enough to explain that to me.

    Your help would be greatly appreciated.

    Avatar
    universal
    Member
    #388822

    In the subject field you say Windows is “creating new user accounts” (which would be really, really strange), but reading the contents of your post I get the impression that you’re actually referring to a new user profile.

    Have you logged in to this particular server using this exact user account before? If not, Windows will indeed create a new profile. The only way to use the exact same user profile across multiple computers is to implement Roaming Profiles. You can also achieve partial profile synchronization using Folder Redirection.

    On the other hand, if you have logged in to this server before, using this user account, you should expect to see the same user profile. However, Windows will create a new profile under certain conditions:

    • If Roaming Profiles are configured but the profile server is unavailable, Windows will create a temporary profile which will be discarded when you log off.
    • If the profile directory for the user in question is damaged or has been deleted, Windows will create a new profile in a folder called “user.domain” or “user.computername” or “user.”, depending on the circumstances.
    • If the “ProfileList” Registry setting for the user account in question has been damaged/deleted, Windows will create a new profile.
    • If the “ProfileList” entry doesn’t match the SID of the user account (for instance, if you’ve deleted and recreated the account in Active Directory), Windows will create a new user profile

    If you can provide some more details regarding the account and whether you’ve logged in to this server before, I’m sure we can get to the bottom of this.

    Avatar
    Markoni
    Member
    #385560

    Thanks Ser Olmy for the reply.

    Yes, it’s User Profiles. My post is misleading.

    I have logged into this profile many times before.

    These two servers have been working fine for – I would say – about 2 years now, without much activity from admins with no issues. One of the UPS units in the cabinet had an alarm and I replaced the batteries for it. The Server was supposed to be down for about 1/2 hour or so while I did the work. On restart the server couldn’t connect to DHCP (and other services) and now, is not handing out IP’s. The DHCP scope shows a green indicator arrow but it doesn’t seem to be authorized as per the error logs. I feel like this is an SID issue because of that and I get an “access denied” if I try to connect to the other Server (on which the correct user profile is running) for example using the DNS service.

    ” – If the profile directory for the user in question is damaged or has been deleted, Windows will create a new profile in a folder called “user.domain” or “user.computername” or “user.”, depending on the circumstances.”

    It seems like this is what has happened.

    I am also getting a error pop up saying raupdate.exe encountered a problem and needed to close (send error report / don’t send)

    What do I need to do? I need to merge the two profiles? I’m not sure exactly where the issue lies and I don’t want to just blindly try to fix this. I’m actually under a lot of pressure here so your help is appreciated.

    Blood
    Blood
    Moderator
    #337069

    The only time I have seen this is when I have set up a new computer/server and have created a local user account during the set up procedure e.g. Blood on a computer named Bone. Thus, my login is boneblood

    If I join that computer/server to a domain (e.g. named Megacorp.local), and I have an Active Directory user account named Blood, if I then log on to the server/computer a new user account is created named blood.megacorp because the machine automatically assumes I am logging onto the domain.

    The computer/server distinguishes the local account boneblood from the Active Directory domain account megacorpblood. But, these accounts are listed as blood and blood.megacorp

    Avatar
    universal
    Member
    #388823
    GreenGhost;n495410 wrote:
    What do I need to do? I need to merge the two profiles? I’m not sure exactly where the issue lies and I don’t want to just blindly try to fix this.

    Precisely. Some further detective work is required to find out what’s actually causing the issue.

    The non-working DHCP service and the inability to connect to other services is not related to the user profile. Your account retains all access rights regardless of the profile, so something else is going on here. It’s much more likely that your profile issues is the symptom of an underlying network issue.

    First things first:

    • Have you checked the IP settings on the server? What does “ipconfig /all” report?
    • Is the network interface visible in Device Manager, and can you see it in Network and Sharing Center under “Change adapter settings”?
    • Can you ping the IP address of the other server?
    • Can you ping the other server by name?
    • Is this server a Domain Controller?

    You should perform the above tests/checks using an account with administrative privileges. If the server isn’t a Domain Controller, a local account with sufficient privileges can be used.

    Avatar
    Markoni
    Member
    #385562

    [IMG]https://www.petri.com/forums/core/image/png;base64,iVBORw0KGgoAAAANSUhEUgAAAfoAAACwCAIAAABowzugAAAMqklEQVR4nO3d7W9b1QHH8fwTm8bTYJQO3OahbdK0lBTUghCCF4gsNIjQhgLJwtomaZrGidoIIaEhV6IdRVDGhDoettEW2FYkxuMYEY0TcxPiNG5C05A2aZOY0Dy7jR3H2QtvkeOH62P72u695/vRT8K PveccLn8MtDRkLGRmEEEIMn/TvgBBCSAryv380NjY //zz1tZv2zsdtvZOQgghBkh7p OUtXVJ3e/fv9/a u3Zvv5Zt3sBAGAIs7Pu78/1L6n7ffv2tdkdbrcn3XsDAGjJ7fYsqfuGhgZbe2e6dwUASILAus/IyKDuAcCYAuvebDZT9wBgTIF1X1dXR90DgDEF1v3evXupewAwJuoeAKRA3QOAFKh7AJACdQ8AUqDuAUAK1D0ASIG6BwApUPcAIAXqHgCkoGHdL8/MUUnUs8K XTwS6wbivgp9CXuv5Ll8ADG4xutesL9iXdQYIn01Gv7CAcTjWqv7mD6Num7c16ILklwmAG0ko 5jGqny47xgfav8kBt0ispskdYVWSXuJcKeEnqZYT8Ne5bmVw3AOFJf9 o/icda9 oVGXXdqLsKu7GoRwSXiHo3VOYUrPsErxqAcaT4YY5KZwUNCPtWZVHxvamvK76TuAeIT6LtinFcNQDjSFfdh54l8lZlUcG9Ca4b9Uis4yNtNex3gPolJOMbSOUqABgEdS84YEG47sWvPeyJKpun7gHEL8XP7lNW9zF1t8iAoGkjfRRH3YeeG kCqXsA8dN73avPqXnxCfay4D4jDRC8G9Q9gBjo/Y9q1dcNO0Zk3UhLx1T3IteSSL Lr5jgVQMwgtT/NSvB74Owg2NdOuqY0E9Vjqgfj2MJ8bsh8qn6VSR41QB0Ly1/q1alodQLS3wDIjuMtKVIR9SPx7FE2FNUvg9CJ4la91pdNQDd4zdiAoAUqHsAkAJ1DwBSoO4BQArUPQBIgboHACkE1n1GRgZ1DwDGRN0DgBSoewCQAnUPAFKg7gFACtQ9AEiBugcAKVD3ACAF6h4ApBBa94QQQowXfokCAMiBugcAKVD3ACAF6h4ApEDdA4AUqHsAkAJ1DwBSoO4BQArUPQBIgboHAClQ9wAgBeoeAKRA3QOAFKh7AJACdQ8AUqDuAUAK1D0ASIG6BwApUPcAIAXqHgCkcI3U/ZzdPrVz53hBwXhBweS2be4vvkjLNgDAsK6Fup9rbx/fvNnf9YuZ/eij1O8EAAwr7XXvPXcutOv98VitKd4MABhW2ut as esYKCsJkoLvZ5PCneDwAYU3rr3n3q1OW77lLJ1WPHUrkfADCsNNa9z MZ37JFve7HHnhgfnIyqdtYnpkTmqSuqL56ypYGIJc01v3VDz74acOGqJk5fDip29C8YWOaMHQwjQ8gKdJV9/OTkz/df//onXcGZeSee4IPbtzoHRxM3k6oewBSSFfdTx2wOO9cH5gz5WVfnjzZ1NTU8umnfdufDPxo3GxO3k5U6tX/UeAzlqDnLZEGBL5VX0i97sM 4Qk9GLqNxEdGOghAr9JS93MDA86CAuf69Yvpf/jhLz/7zG63X7p0aXR0dLC727lhQ AAd0dHkjaj8uxe5bX6wcDJw75WOag T6SDgtuIaaT6zgHoTFrqfmz37pF16wLzndlss9mcTufc3JzP5/N4PMPbtgUO OmJJ5K0mag/3au8jnpw8W2kVVT qFZk8kT2FsecAHQs9XU/29w8nJ8flLYXXuju7p6ZmVkc9uPu3UFjrnzySTL2k/a6j7QTla BWL8YRP7NI9IqPM8BDCLFde/zen8sKRnKXxuUjuee6 3tvXr16uLIH vrg8aMPPSgL2CAVq6duldZUf3cxOs 6lUA0L0U1/30iRMX1 aFpqPefPbs2StXriyOHKmqDB02dfSo5ltKsO7VH4XHtITginFsIxlfDAB0JpV1P 9yXdy8aTAvNzT2mpqenh6Xy7U4eLjsmdBhFzcWeJ1ObXcV vRc5NFH4Iuwj0GCllBZXeVI2GcpkR7miI MeyEAOpbKuh9/5fBA7pqw6Xz22aBn95eKt4QdefnF3ydvh7ESrMJkNyaNDCC6lNW9Z DC fy159esDpvTpdu6uroC6/7CffeGH5yX6 7pSdImY0XdA9CNlNW9s7a2f/WqSOna8mhnZ fU1NTi P61eZEGj zamaRNxkrkT1NT0MXUPYDoUlP3V9vb 1blqMTx0IMdHR2T//9taN6xMfXxrqavk7FPADCsFNS9z u9sOXR3pxslZzZvKmtrW1iYsJ/ymxfn/r4C78p9Hm9mm8VAAwrBXU/ Y /n83OUk/3 nU2m21sbMx/ykxra9RTxt97T/OtAoBhJbvu512uc/du7snKjJqWlpbLly/7zxr/ OOo43vv3jgf8B9uAgDUJLvunYcOdmeuEIn1889HR0f9Z43 5V2RU5yHDmq7WwAwrKTWvWdk5MyaVY6VJpE0f/ih0 mcn59fWFgYOvyy0Fk52Z6REQ03DACGldS6H9i75/SKOwRjPXJkaGjI6/UuLCz011QLnjWwd4 GGwYAw0pe3c8oSqfpdvG07q4 f/682 1eWFg4s ke8RNddrtWewYAw0pe3fc /pj9juXi6Vid3XX8 OTo6NAfDsV0Yu/jj2m1ZwAwrCTV/djJf353 20py/i/PtZk2wBgWMmoe /MTGfBhrbly1KWrns3z7vdie8cAAwrGXU/dOTIt7fdGmtacld/VW/ z2uvnarba1tpivX04Tf mPjOAcCwNK979/CwkrXCtuyWmNKyZtWn759oaWnp6en54Ycfuk6etC2/NaYZ2tbkzI2Pa3JPAMCANK/7czXVLbfeHGv vXOH1WodHBx0uVyzs7PT09PtxY/GOkn/c42a3BMAMCBt637G0dW87JbmX/0y1nxlrnM4HNPT0/55fD5f12/LYp3E utlV/r7NbgpAGA82tZ9z87ffXPLTXGk6cEHuru7F//nhV7XTGt bhzz9DaYtbgrAGA42tb9qcw7mm6 Ib5Y9 weHR72er2esbHTT5XGN0nrXeu1ujMAYCja1v3XN9/49U3XJ5LmDesSOj0nU6s7AwCGom3dt266 6sbr0tj2ose0erOAIChaFv3g28d/fKGX6Qxwx9 oNWdAQBD0bbufV6v/aknv7j 52mJo3qXVrcFAIwmGX rduDNP1k33f35dT9LWaz3bRp8563Edw4AhpWC/1ctACD9qHsAkAJ1DwBSoO4BQArUPQBIgboHAClQ9wAgBeoeAKRA3QOAFKh7AJACdQ8AUqDuAUAK1D0ASIG6BwApUPcAIAXqHoAkXrVNZB86bbIoekzOodOvKxMJXT91D0ASWQc7c9 ZXPe T4/Je3sy 2Bi/UzdA5CEyaKkvbUTicmiJHT91D0ASVD31D0AKZgsyroT8/oNdQ8AQkwWJf 4V7 h7gFACHVP3QOQgsmi5B/z6DfUPQAIMVmU/GNu/Ya6BwAhJouy9r1ZrRI4c9DBSG8TDHUPAEJMFmXt365oEv E4q81CXUPAEJMFiXvr67E458t7JHQFxqGugcAISaLkvfuVOLxzxb2SNCKmiy3GOoeAISYLEru2xOJxz9b2COhi2qyoj/UPQAIMVmU3D PJR7/bGGPBH4UOizBUPcAIMRkUdYcHU08/tnCHgn8KHRYgqHuAUCIyaKsfnNEk/gnVH8d jbBUPcAIMRkUVa/cVGrBM4cdDDS2wRD3QOAEJNFWfX6Bf2GugcAISaLkvNan35D3QOAEJNFyX7le/2GugcAISaLkvWyQ7 h7gFAiMmiZB606zfUPQAIMVmUlQd0HOoeAISsPKCseLF1xYst kzrygPUPQAIeNU2kfWS3WRR9Jisl yvK2F J08MqHsAkAJ1DwBSoO4BQArUPQBIgboHAClQ9wAgBeoeAKRA3QOAFKh7AJACdQ8AUqDuAUAK1D0ASIG6BwApUPcAIAXqHgCkQN0DgBSoewCQAnUPAFIIrPu6urr2Tofb40n3pgAAWnK7PUvq3mw2n7K2nu3r99D4AGAUbo/n 3P9S q vr7e3/htdoetvZMQQogB0mZ3NH3TvKTuGxoaamtrKysrKyoqtm/fXlJSUlxcXFRUVFhY AgAQIcKCwuLioqKi4uX1P2 ffvMZnNNTc2uXbsqKiqefvrp0tLSrVu3lpSUlJSUPA4A0BV/e2/durW0tHRJ3e/fv7 hoaGurq6mpqaysnLHjh0VFRXl5eVlZWXPAAB0qKysrLy8vKKiYkndNzY2 hvfbDbX1tbW1NRUV1dXVVVVVlbuAgDoUGVlZVVVVXV19ZK6J4QQYuykfweEEEJSkP8CwpE6/wDhO34AAAAASUVORK5CYII=[/IMG] I get this when trying to post a reply….. It’s not easy being Green…….

    Avatar
    Markoni
    Member
    #385563

    EDIT: Finally.. I could post an answer :(

    Thanks for the help, guys.

    – Have you checked the IP settings on the server? What does “ipconfig /all” report?

    The server has a static IP. I checked it and it’s still the same/correct IP.

    – Can you ping the IP address of the other server?

    Networking is fine and I can ping the other server and any other machine (that also has a static IP) on the same network/subnets.

    – Can you ping the other server by name?

    I’m actually running WINS so, yes I can ping the other server by name

    – Is this server a Domain Controller?

    It is the PCD in the domain and there is also another BDC machine in the same domain (also same O/S). These are the only two windows servers.

    “You should perform the above tests/checks using an account with administrative privileges. If the server isn’t a Domain Controller, a local account with sufficient privileges can be used.'”

    There is another profile with administrator priviledges that is already on the machine (see USERNAME2 below) that doesn’t seem to be corrupted. I logged in with this account but I get the same results (no access with DHCP, DNS, etc…) However, at least it’s not creating another profile (ie: USERNAME2.DOMAIN)

    The C:/Documents and Settings folder in Windows Explorer looks like this:

    C:/
    – Documents and Settings
    – – USERNAME1
    – – USERNAME1.DOMAIN
    – – All Users
    – – Default User
    – – USERNAME2
    – Inetpub
    – Program Files
    – etc….

    So I am thinking that the “USERNAME1 profile is corrupted as you mentioned above. When I log in as USERNAME1, I can see “C:Documents and SettingsUSERNAME1.DOMAIN” in the command prompt window. So I know I’m not in the correct profile.

    In Windows Explorer I can see both machines.
    If I try to open WINS, DHCP or DNS, I cannot connect to the other machine from the console. It gives me an access denied error.
    For AD, I can connect and administer. Although AD is getting DNS errors. I can try to see if I could post the content of the errors here if it helps?

    Avatar
    universal
    Member
    #388824

    Yes, do post the error messages you’re receiving.

    It would seem you’re having some kind of authentication and/or name resolution issues disrupting communication between your DCs, I recommend you run dcdiag on both servers and post the results.

    You’re probably right about the profile being corrupted. Unfortunately, if you copied the entire profile directory to another location (you mentioned a USB drive), you’re likely to have missed some files due to permission issues, which would render the copy unusable. But as I mentioned, the profile does in no way affect the rights of the user account.

    The name of a profile directory is not necessarily related to the name of the corresponding user account. For instance, if you rename a user account, the name of the profile directory stays the same. The fact that you’re seeing a directory called “USERNAME.001” or somesuch does not imply the existence of a user account by that name. By the way, the mapping between account SIDs and profile directories are local to each machine and can be found in the registry under “HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindows NTCurrentVersionProfileList”.

    I wouldn’t spend too much time on the profile issue, especially since it may not be fixable. If the old profile contains shortcuts, documents or other data that are of value to you, you could just copy those over to the new profile directory.

    Avatar
    Markoni
    Member
    #385564

    Thanks for your help. There were problems with DNS and then there were problems where I could not log into any services of the other DC. To make the story short, I spent about 4 days straight on both machines and finally fixed the issue. Then I fixed the problem with the corrupted profile. :(

    What a mess. Anyway it’s done now.

Viewing 9 posts - 1 through 9 (of 9 total)

You must be logged in to reply to this topic.