Unable to remove a user from virtual server

We have an IIS 6 server also running FP Extensions 2002 that is in production. One of our sites is causing us a problem that so far have been unable to resolve.

The user called us saying he could not login so we we're going to reset their password, when we went to that site's admin section we found that the user was not showing up. When I tried to add the user it tells me that the user already exists on another site.

I have checked every site we currently host and do not see the user anywhere. I can find them listed under local users and groups, if I attempt to remove them it gives me an error saying something about how that user is tied to a unique identifier and even if you create a new user with the same name it won't allow you access to the current users resources. I'm assuming it's referring to a SID but don't know for sure and every search I've done on Google is a dead end.

Do we have any options, short of formatting the box and starting over?

Thanks,
Neil
neiljstandleyAsked:
Who is Participating?
I wear a lot of hats...

"The solutions and answers provided on Experts Exchange have been extremely helpful to me over the last few years. I wear a lot of hats - Developer, Database Administrator, Help Desk, etc., so I know a lot of things but not a lot about one thing. Experts Exchange gives me answers from people who do know a lot about one thing, in a easy to use platform." -Todd S.

meverestCommented:
>>  if I attempt to remove them it gives me an error

is that an error and not a warning?  normally you can just click OK and delete him anyway.

Cheers.
0
neiljstandleyAuthor Commented:
Just tested your thought on one of my personal sites/users and now when trying to add that user name back to my web it says that the users already exists. I also removed an entry under local groups there is an account called OWS_1350163818_AdvancedAuthor and it is for that specific web, but still get the same error.

Is there a SID entry for this user somewhere I need to remove also?

Thanks in advance,
Neil
0
alimuCommented:
Have you checked all your OWS groups for this user's account?
Is the user account a local account or a domain account?
Is anything getting posted to your event log when fail to add the user?
0
Get your problem seen by more experts

Be seen. Boost your question’s priority for more expert views and faster solutions

neiljstandleyAuthor Commented:
Yes, there are no listings for the user account, the account is local.
This server is a stand alone web server and there is nothing showing up in my event viewer. I've also looked at the IIS logs and there is nothing there either.

Neil
0
alimuCommented:
Try DumpSec by somarsoft http://www.somarsoft.com/somarsoft_main.htm#DumpAcl to get a listing of all the existing NTFS ACL's on your drives.  This will allow you to check for the problem user account's existing access to directories.  

If the account no longer exists in users & computers on your server then the account will take the appearance of a SID instead of a name (eg: S-1-5-....... user icon will have a question mark over it).

Have you tried to run a server recalculate & health check on your extensions?  http://yoursite/_vti_bin/_vti_adm/fpadmdll.dll  
"Recalculate the Web"
"Check Server Health"

Formatting is a bit extreme and I don't believe it is necessary.  At the most I would try reinstalling server extensions.

Could you please post the exact text of the error you receive?
0
neiljstandleyAuthor Commented:
Tried dumpsec and can see the SID for the user but it doesn't say it's tied to any sites.

Have also tried recalculating the site, uninstalling and reinstalling the extensions. In various sequences as well as checking the server health. All that ever comes up with is security could be tighter, the standard message.

The error I get when I try to add the user name to the site is
Error adding one or more users: the following user names already exist: 'username'.

When I use dumpsec to dump permissions for the file system on "d" where all the sites are listed I see an unknown user of "?" listed on the website I'm having problems with. Is there a way to find this SID and remove it from the system entirely.

Thanks,
Neil
0
alimuCommented:
If it's only showing SIDs then it is likely that the account has been removed from the server.  The residual SID indicates that permissions are attributed to an account that can no longer be referenced.

The only thing I can think of right now is that there might be some stuff floating around in your database.  Take a look at geboman's description of the layout  here:  http://www.sharepointu.com/forums/ERROR!_user_names_already_exist/m_2682/tm.htm

All I could find from Microsoft was basically that this error means your account was removed from server extensions roles but not your local user list in computer management - the fact your account is only showing up as a SID would suggest this is not the case for you (vice versa in fact).
0
alimuCommented:
Hi Neil,
how'd you go with this?
0
neiljstandleyAuthor Commented:
Page editor please delete this message, no resolution was found. We've rebuilt the box to solve the issue.

Thanks,
Neil Standley
0
moduloCommented:
PAQed with points refunded (500)

modulo
Community Support Moderator
0

Experts Exchange Solution brought to you by

Your issues matter to us.

Facing a tech roadblock? Get the help and guidance you need from experienced professionals who care. Ask your question anytime, anywhere, with no hassle.

Start your 7-day free trial
It's more than this solution.Get answers and train to solve all your tech problems - anytime, anywhere.Try it for free Edge Out The Competitionfor your dream job with proven skills and certifications.Get started today Stand Outas the employee with proven skills.Start learning today for free Move Your Career Forwardwith certification training in the latest technologies.Start your trial today
Microsoft IIS Web Server

From novice to tech pro — start learning today.

Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.