Solved

Alternative Method of Changing User's Assigned Groups?

Posted on 2004-04-24
12
264 Views
Last Modified: 2010-04-11
Hi...

I think an error has been introduced into my XP Pro SAM file, it seems one user is assigned to a group that doesn't exist.  It prevents the user from logging on, and I can't even edit the user's groups through the "Computer Management" tool.  It gives this error:

"The following error occured while attempting to read the properties for the user XXX:  The group name could not be found."

Anyone have any ideas about how I could reset the groups the user belongs to without going through the "Computer Management" tool?  Changing a user from "administrator" to "limited" in the "Users" Control Panel does not help.  Does the registry hold any of this information?  Is there a third-party tool I could try?

Simon.
0
Comment
Question by:simoneast
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 7
  • 5
12 Comments
 
LVL 1

Author Comment

by:simoneast
ID: 10909925
[Follow-up...]
I guess I could restore a previous version of the SAM file from somewhere, but I'd don't want to do a full system-restore, nor go this route if I don't have to.  And I don't want to delete the user and create them again at the risk of losing their documents and settings.

Simon.
0
 
LVL 67

Accepted Solution

by:
sirbounty earned 500 total points
ID: 10909983
One method you could try -
Look in %systemroot%\repair - what's the date of that SAM file?

Boot into recovery console.
ren %systemroot%\system32\config\sam
then copy the one from %systemroot%\repair

Alternatively, if you want to rename the username and create a new username with the original one...
You should be able to copy the profile by right-clicking my computer/properties/advanced/user-profile's settings/Copy To
0
 
LVL 1

Author Comment

by:simoneast
ID: 10910028
Yeah, I didn't think of that second option (well I guess I didn't think it would copy all settings) - but it seems to have worked.

I just renamed the old user, created a new user with that name and copied the old profile into the new user's "Documents and Settings" directory.  I noticed it didn't seem to copy the Outlook Express messages and folders though, so I copied those manually.  I haven't noticed any other differences yet, so it seems you've solved my problem.

On a side note, it seems the original account can now login successfully, but I still can't change the users' groups so I need to get rid of it anyway.

Thanks heaps!
0
Threat Trends for MSPs to Watch

See the findings.
Despite its humble beginnings, phishing has come a long way since those first crudely constructed emails. Today, phishing sites can appear and disappear in the length of a coffee break, and it takes more than a little know-how to keep your clients secure.

 
LVL 67

Expert Comment

by:sirbounty
ID: 10910043
>>but I still can't change the users' groups so I need to get rid of it anyway<< How are you trying this?
0
 
LVL 1

Author Comment

by:simoneast
ID: 10910129
How am I changing the groups?  Via the "Computer Management" console in WinXP.  I open the "Users" folder, and double-click a user.  As soon as I try and change to the "Member of" tab, it gives me that error message and closes the dialog box.

I should have said "I can't change the user's groups" (user singular) -- the error only applies to that one user, I can change groups for any of the other users fine (including the replacement account I just created).

I will probably delete the problematic account once I'm satisfied the replacement account has all the documents and settings moved across.  I hope it will allow me to delete it.

Simon.
0
 
LVL 67

Expert Comment

by:sirbounty
ID: 10910133
You might also try Start->Run->lusrmgr.msc
0
 
LVL 1

Author Comment

by:simoneast
ID: 10910141
Yeah, I think that's the same as what you get in "Computer Management" (several snap-ins are just congregated there).  And yes, I get the same error.

Thanks for your suggestions though.
0
 
LVL 67

Expert Comment

by:sirbounty
ID: 10910142
OOps - misread how you were getting in there - most people choose control panel.
Try Start->Run->Control Userpasswords2
0
 
LVL 1

Author Comment

by:simoneast
ID: 10910220
Oh OK - I've never seen that dialog box before, and it did list the main groups the user belonged to, but even after changing the group from that window the "Member of" tab under Computer Management still won't open.

How do you get to that dialog box normally?
0
 
LVL 1

Author Comment

by:simoneast
ID: 10910233
(My Control Panel > Users has a more simple/friendly interface to dealing with users, that's why I use Computer Management)
0
 
LVL 67

Expert Comment

by:sirbounty
ID: 10910242
That's the only way I know of...just one of those hidden gems...
Must simply be a corrupt profile then.  Did you reboot afterwards?  Just curious...
0
 
LVL 1

Author Comment

by:simoneast
ID: 10910651
No, I didn't reboot, dunno whether that would have an effect.  Anyway thanks for all your help, even after I awarded you the points.  It's pretty-much fixed.

Simon.
0

Featured Post

Is your NGFW recommended by NSS Labs?

Ours is! NSS Labs Next Generation Firewall Test gives the WatchGuard Firebox M4600 a "Recommended" rating! Curious where your NGFW landed on the  Security Value Map? See the map and download the full report today!

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

A 2007 NCSA Cyber Security survey revealed that a mere 4% of the population has a full understanding of firewalls. As business owner, you should be part of that 4% that has a full understanding.
There is a lot to be said for protecting yourself and your accounts with 2 factor authentication.  I found to my own chagrin, that there is a big downside as well.
Sending a Secure fax is easy with eFax Corporate (http://www.enterprise.efax.com). First, just open a new email message. In the To field, type your recipient's fax number @efaxsend.com. You can even send a secure international fax — just include t…
Nobody understands Phishing better than an anti-spam company. That’s why we are providing Phishing Awareness Training to our customers. According to a report by Verizon, only 3% of targeted users report malicious emails to management. With compan…
Suggested Courses

728 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question