3
votes
1answer
170 views

What is causing the Collateral damage when deleting old profiles?

#Get user names that have logged onto workstation $Users = gwmi win32_networkloginprofile | where {$_.name -match "EXP\\"} | where {$_.name -notmatch "srvtasksched"} $Users | foreach{ $Name = ...
6
votes
3answers
468 views

How to find the creation date of a local user account?

I would like to get the creation date of a local user account (Win 7 if it matters). I've looked at the following WMI objects (and google of course): Win32_UserAccount Win32_NetworkLoginProfile The ...
5
votes
2answers
180 views

Delegating Control — Windows Active Directory

Attempting to make a site administrator user account for an Active Directory Domain. Using the Active Directory Delegate Authority Wizard. a user account has been grated rights in a OU. However, when ...
1
vote
1answer
145 views

When is a user considered “Everyone” in the “Access this computer from the network” policy

I am a bit puzzled by the existance of the "Everyone" group in this policy. Per http://technet.microsoft.com/en-us/magazine/dd637754.aspx: The Everyone identity All interactive, network, dial-up, ...
3
votes
4answers
2k views

What do I need to be cautious of when changing a User Logon Name in Active Directory?

I'm new to my current employer, being their only Sysadmin. I'm seeing a small handful of users who have User Logon Names which don't conform to the naming convention standard which majority of users ...
0
votes
2answers
468 views

Share desktop and documents folders among multiple Windows accounts?

We have several Windows workstations which are shared by multiple users. I'm currently considering a scheme where users have their own user accounts and profiles, but they share the same Desktop and ...
1
vote
2answers
206 views

When should Windows account be in the Users group?

When you create an account in Windows through the GUI, it is automatically added to the local Users group. It is possible to remove the account from this group. For example, when using the account for ...
2
votes
1answer
233 views

Restricting access to Share using both an AD user using a specific Computer

The Environment: One AD domain that is not managed by local admins (can’t edit, can’t add GPO, etc.) Users have accounts here. Call this AD alpha This AD Alpha has a trust to a local AD domain (Call ...
7
votes
3answers
39k views

How to delete domain user profile from a computer?

I'm wondering how to safely remove a domain user profile from a computer that is a part of a domain. I don't want to delete the account from the domain itself, I just need to remove the profile from ...
3
votes
5answers
2k views

Restore “lost” user after Active Directory removal?

Is it possible to restore lost users after Active Directory unistallation ? (I forgot to switch users to local users) The computer run Windows Server 2008 R2 Entreprise, and all the registry linked to ...
1
vote
1answer
89 views

Which user account should I use for an intranet web-app service?

I've written a web-application to run on Windows (XP,7,2008, etc), not using MS tools (python/django/nginx, though it should not matter). To run the app I've created a Windows Service which installs ...
0
votes
0answers
337 views

Login on VMWare XP guest machine keeps locking user AD account

Environment: Windows 2003 AD Host: Windows 7 Pro VMWare Guest: Windows XP I use a normal user but I also have AD Admin rights (via another user). I use my AD account to login on the host as well on ...
-1
votes
3answers
477 views

Windows 2003 Active Directory: Log failed login attempts with the password used?

Windows 2003 Active Directory: Log failed login attempts with the password used? I want to log not only the username but the password used also for debugging purpose. Is there a way to do that? One of ...
1
vote
1answer
738 views

How to create AppData folder for a domain user added to a local group

I have added a domain user into group Users using Add User wizard in Windows 7. Unfortunatelly the folder for user data (c:\Users\<NewUser>\AppData) was not created. How can I instruct Windows ...
0
votes
3answers
6k views

How can I disable account lockout policy for one user in a Windows domain

My company is running a Windows based domain. The domain has a group policy of locking out a user after several failed log-in attempts, for 5 minutes. Unfortunately, this account functions as a ...
5
votes
1answer
747 views

How does Windows hide internal users?

I just recognized that Windows hides some special users, like for example the NT Authority\SYSTEM user or the users which are added after the installation of SQL Server (ReportServer$SQLEXPRESS, ...
2
votes
1answer
1k views

Excluding folders from a roaming profile, client-side

I am using a laptop connected to our company's domain network, and after logging in this morning it told me that I have exceeded my roaming profile space. After looking into the issue I realized that ...
-1
votes
1answer
276 views

How to change local user home folder on Windows 2000 and above

I was using a local account on a Windows 7 desktop that is not connected to any Active Directory. After a while it was required to rename the local account. Renaming the account was simple using ...
0
votes
0answers
36 views

Clone windows account privileges

I need to create few domain accounts to run my applications under. The accounts should be equivalent to standard accounts like NETWORKSERVICE and IIS APPPOOL\ASP.NET v4.0. How can i easily do that ...
2
votes
1answer
326 views

How to prevent user from logon of an account used for impersonation only?

Currently I have a windows service written in C# (running as LocalSystem) which creates a user account, needed for impersonation, by using the DirectoryEntry to add the user/password and associated ...
1
vote
2answers
658 views

the context of local user of AD-joined machine? Is it of domain machine account or of local machine account?

I am developer and curious how Windows server machines are used. A) I believe that they show interactive login screen but run without any user had ever logged-in. Correct? In context of ...
0
votes
3answers
912 views

Windows user account gets automatically locked

One of the user accounts on a Windows 2003 server is frequently locked. Each time the "Account is locked" (roughly translated) checkbox is enabled in the Account Properties -> Account tab. The event ...
0
votes
1answer
629 views

Why doesn't my Administrator account have access privileges?

We are running windows server 2003.I log in as Administrator but I don't have any access rights. I tried to create a new Administrator account but when logging into that one I still face the same ...
4
votes
2answers
1k views

Can I use Active Directory for user-level security in an Access application? Pretty Please?

My company makes fairly extensive use of an Access + MySQL application that would probably see some significant traffic on the Daily WTF if I posted the source code. The management of users and their ...