WordPress is the web's most popular CMS, but its dominance also makes it a target for attackers. Our eBook will show you how to:
Prevent costly exploits of core and plugin vulnerabilities
Repel automated attacks
Lock down your dashboard, secure your code, and protect your users
Course Of The Month
1 day, 21 hours left to enrollBecome a Premium Member and unlock a new, free course in leading technologies each month.
Solved
Accounts not shown in USRMGR ?
Posted on 1998-08-11
I run a standalone NT Server 4.0 SP3.
Suddenly ALL accounts are no longer visible within the GUI in USRMGR.
I can still create new accounts, but afterwards they don't show up in the GUI.
I still see all the groups, and I can add/remove accounts to them.
Note that since that point "Adduser /d" is looping. "Net Users" doesn't show accounts anymore.
The system still works fine. The only thing is I can't look at and manage existing accounts !
I've also checked their existence and security within registry. But there is no difference to another
system of mine which has no problems with USRMGR.
Any help is welcome.
Thanks in advance
Jürgen
Suddenly ALL accounts are no longer visible within the GUI in USRMGR.
I can still create new accounts, but afterwards they don't show up in the GUI.
I still see all the groups, and I can add/remove accounts to them.
Note that since that point "Adduser /d" is looping. "Net Users" doesn't show accounts anymore.
The system still works fine. The only thing is I can't look at and manage existing accounts !
I've also checked their existence and security within registry. But there is no difference to another
system of mine which has no problems with USRMGR.
Any help is welcome.
Thanks in advance
Jürgen
[X]
Welcome to Experts Exchange
Add your voice to the tech community where 5M+ people just like you are talking about what matters.
- Help others & share knowledge
- Earn cash & points
- Learn & ask questions
-
6
-
2
-
2
- +2
13 Comments
Is your server a domain member? If so, to view your domain-accounts you need to use the usermanager for domains.
(available on any BDC or the PDC of your domain in the %systemroot%\system32 directory.)
(available on any BDC or the PDC of your domain in the %systemroot%\system32 directory.)
If you have emergency repair disk which you prepared before coming this problem. . You can try to repair user database with the help of ERD.If you are having erd you can try this...
I enabled auditing (success/failure on 'use of rights' and 'user/group mgmt') .. but there
is nothing usefull in the eventlog.
I also used REGMON: I see that usrmgr/lsass are scanning the registry (for all accounts) and all the reads are successfull, but no account data is displayed. The funny thing is
that account related dialogs within USRMGR (i.e add/remove from group, add/remove
user rights) work fine i.e they display all the users
is nothing usefull in the eventlog.
I also used REGMON: I see that usrmgr/lsass are scanning the registry (for all accounts) and all the reads are successfull, but no account data is displayed. The funny thing is
that account related dialogs within USRMGR (i.e add/remove from group, add/remove
user rights) work fine i.e they display all the users
I don't have an uptodate repair disk.
Well, it's not an important or a production system, therefore I can easily reinstall and recreate the accounts.
But I wan't to find out what's wrong. A system only does what it has been told to, unless
something is really corrupt.
Well, it's not an important or a production system, therefore I can easily reinstall and recreate the accounts.
But I wan't to find out what's wrong. A system only does what it has been told to, unless
something is really corrupt.
Since other apps are showing users correctly, I would go for the following:
- run chkdsk on your system partition and see if this turns up anything
- check all usrmgr files against the original NT cd and/or SP3 installation. Any changes there?
This is indeed a very strange problem.. I would love to know what has gone wrong here too.. ;-)
- run chkdsk on your system partition and see if this turns up anything
- check all usrmgr files against the original NT cd and/or SP3 installation. Any changes there?
This is indeed a very strange problem.. I would love to know what has gone wrong here too.. ;-)
Chkdsk runs without complaining about anything.
I connected via another machines USRMGR to this very node... same effect.. no accounts
I connected via another machines USRMGR to this very node... same effect.. no accounts
I believe the sam is corrupted and can only be fixed by with repair disk or by running winnt32.exe and selecting repair, there are default repair files on the harddrive and it can be put back to normal with them. This is only a begining problem and I believe it would get worse over time.
I found a solution, but I don't really know why this happened. I focused on the
looping "addusers /d" and monitored it with regmon and found out that it was reading
the same keys over and over again.I went into REGEDIT and found that HKLM\sam\sam\domains\accou
key named 000003EB. The same key was found in sam\sam\domains\account\us
along with some others. But the contents of the 'others' looked a little bit different
and therefore i simply did a cut&paste of the contents of the key !
Guess what ! It was a good try. The accounts are back. visible. manageable ...
Thanks for all your hints.
looping "addusers /d" and monitored it with regmon and found out that it was reading
the same keys over and over again.I went into REGEDIT and found that HKLM\sam\sam\domains\accou
key named 000003EB. The same key was found in sam\sam\domains\account\us
along with some others. But the contents of the 'others' looked a little bit different
and therefore i simply did a cut&paste of the contents of the key !
Guess what ! It was a good try. The accounts are back. visible. manageable ...
Thanks for all your hints.
I'm posting the solution found by jkrautner so it can be saved in the PAQ.
Linda Gardner
Customer Service @ Experts Exchange
Solution:
I focused on the
looping "addusers /d" and monitored it with regmon and found out that it was
reading
the same keys over and over again.I went into REGEDIT and found that
HKLM\sam\sam\domains\accou
key named 000003EB. The same key was found in
sam\sam\domains\account\us
along with some others. But the contents of the 'others' looked a little bit
different
and therefore i simply did a cut&paste of the contents of the key !
Guess what ! It was a good try. The accounts are back. visible. manageable
...
Linda Gardner
Customer Service @ Experts Exchange
Solution:
I focused on the
looping "addusers /d" and monitored it with regmon and found out that it was
reading
the same keys over and over again.I went into REGEDIT and found that
HKLM\sam\sam\domains\accou
key named 000003EB. The same key was found in
sam\sam\domains\account\us
along with some others. But the contents of the 'others' looked a little bit
different
and therefore i simply did a cut&paste of the contents of the key !
Guess what ! It was a good try. The accounts are back. visible. manageable
...
I suggested you to try erd(emergency repair disk) I think It would have done the same thing automatically which you have done manually. Please tell me you really tried with ERD.
Thanking You
Surinder Chugh
Thanking You
Surinder Chugh
Featured Post
ZipGrep is a utility that can list and search zip (.war, .ear, .jar, etc) archives for text patterns, without the need to extract the archive's contents.
One of a set of tools we're offering as a way to say thank you for being a part of the community.
Question has a verified solution.
If you are experiencing a similar issue, please ask a related question
The Windows functions GetTickCount and timeGetTime retrieve the number of milliseconds since the system was started. However, the value is stored in a DWORD, which means that it wraps around to zero every 49.7 days. This article shows how to solve t…
Ever visit a website where you spotted a really cool looking Font, yet couldn't figure out which font family it belonged to, or how to get a copy of it for your own use? This article explains the process of doing exactly that, as well as showing how…
- Microsoft Applications
- Windows OS
- Fonts Typography
- Web Browsers
- Microsoft Word
This video Micro Tutorial explains how to clone a hard drive using a commercial software product for Windows systems called Casper from Future Systems Solutions (FSS). Cloning makes an exact, complete copy of one hard disk drive (HDD) onto another d…
- Microsoft Legacy OS
- Storage
- Storage Software
- Windows OS
- Storage Hardware
- Windows 10, Windows Vista, Windows 8, Windows 7, *Disk Cloning
The viewer will learn how to successfully create a multiboot device using the SARDU utility on Windows 7.
Start the SARDU utility:
Change the image directory to wherever you store your ISOs, this will prevent you from having 2 copies of an ISO wit…
Suggested Courses
Course of the Month1 day, 21 hours left to enroll
Earn Certification
Managing Projects with Microsoft Project 2013 (Exam 74-343)
$49.00$44.10
717 members asked questions and received personalized solutions in the past 7 days.
Join the community of 500,000 technology professionals and ask your questions.