Want to protect your cyber security and still get fast solutions? Ask a secure question today.Go Premium

x
?
Solved

Unable to remove a user from virtual server

Posted on 2004-11-06
12
Medium Priority
?
366 Views
Last Modified: 2012-08-13
We have an IIS 6 server also running FP Extensions 2002 that is in production. One of our sites is causing us a problem that so far have been unable to resolve.

The user called us saying he could not login so we we're going to reset their password, when we went to that site's admin section we found that the user was not showing up. When I tried to add the user it tells me that the user already exists on another site.

I have checked every site we currently host and do not see the user anywhere. I can find them listed under local users and groups, if I attempt to remove them it gives me an error saying something about how that user is tied to a unique identifier and even if you create a new user with the same name it won't allow you access to the current users resources. I'm assuming it's referring to a SID but don't know for sure and every search I've done on Google is a dead end.

Do we have any options, short of formatting the box and starting over?

Thanks,
Neil
0
Comment
Question by:neiljstandley
10 Comments
 
LVL 37

Expert Comment

by:meverest
ID: 12514920
>>  if I attempt to remove them it gives me an error

is that an error and not a warning?  normally you can just click OK and delete him anyway.

Cheers.
0
 

Author Comment

by:neiljstandley
ID: 12515053
Just tested your thought on one of my personal sites/users and now when trying to add that user name back to my web it says that the users already exists. I also removed an entry under local groups there is an account called OWS_1350163818_AdvancedAuthor and it is for that specific web, but still get the same error.

Is there a SID entry for this user somewhere I need to remove also?

Thanks in advance,
Neil
0
 
LVL 14

Expert Comment

by:alimu
ID: 12519611
Have you checked all your OWS groups for this user's account?
Is the user account a local account or a domain account?
Is anything getting posted to your event log when fail to add the user?
0
Technology Partners: We Want Your Opinion!

We value your feedback.

Take our survey and automatically be enter to win anyone of the following:
Yeti Cooler, Amazon eGift Card, and Movie eGift Card!

 

Author Comment

by:neiljstandley
ID: 12520202
Yes, there are no listings for the user account, the account is local.
This server is a stand alone web server and there is nothing showing up in my event viewer. I've also looked at the IIS logs and there is nothing there either.

Neil
0
 
LVL 14

Expert Comment

by:alimu
ID: 12520361
Try DumpSec by somarsoft http://www.somarsoft.com/somarsoft_main.htm#DumpAcl to get a listing of all the existing NTFS ACL's on your drives.  This will allow you to check for the problem user account's existing access to directories.  

If the account no longer exists in users & computers on your server then the account will take the appearance of a SID instead of a name (eg: S-1-5-....... user icon will have a question mark over it).

Have you tried to run a server recalculate & health check on your extensions?  http://yoursite/_vti_bin/_vti_adm/fpadmdll.dll  
"Recalculate the Web"
"Check Server Health"

Formatting is a bit extreme and I don't believe it is necessary.  At the most I would try reinstalling server extensions.

Could you please post the exact text of the error you receive?
0
 

Author Comment

by:neiljstandley
ID: 12520522
Tried dumpsec and can see the SID for the user but it doesn't say it's tied to any sites.

Have also tried recalculating the site, uninstalling and reinstalling the extensions. In various sequences as well as checking the server health. All that ever comes up with is security could be tighter, the standard message.

The error I get when I try to add the user name to the site is
Error adding one or more users: the following user names already exist: 'username'.

When I use dumpsec to dump permissions for the file system on "d" where all the sites are listed I see an unknown user of "?" listed on the website I'm having problems with. Is there a way to find this SID and remove it from the system entirely.

Thanks,
Neil
0
 
LVL 14

Expert Comment

by:alimu
ID: 12520658
If it's only showing SIDs then it is likely that the account has been removed from the server.  The residual SID indicates that permissions are attributed to an account that can no longer be referenced.

The only thing I can think of right now is that there might be some stuff floating around in your database.  Take a look at geboman's description of the layout  here:  http://www.sharepointu.com/forums/ERROR!_user_names_already_exist/m_2682/tm.htm

All I could find from Microsoft was basically that this error means your account was removed from server extensions roles but not your local user list in computer management - the fact your account is only showing up as a SID would suggest this is not the case for you (vice versa in fact).
0
 
LVL 14

Expert Comment

by:alimu
ID: 12550471
Hi Neil,
how'd you go with this?
0
 

Author Comment

by:neiljstandley
ID: 13220294
Page editor please delete this message, no resolution was found. We've rebuilt the box to solve the issue.

Thanks,
Neil Standley
0
 

Accepted Solution

by:
modulo earned 0 total points
ID: 13449267
PAQed with points refunded (500)

modulo
Community Support Moderator
0

Featured Post

[Webinar On Demand] Database Backup and Recovery

Does your company store data on premises, off site, in the cloud, or a combination of these? If you answered “yes”, you need a data backup recovery plan that fits each and every platform. Watch now as as Percona teaches us how to build agile data backup recovery plan.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Here are the symptoms: You start receiving calls from users that one of your legacy web apps isn't coming up, so you log into your IIS 5 server to check it out.  When you pull up the services, you notice that the WWW Publishing service isn't runn…
A phishing scam that claims a recipient’s credit card details have been “suspended” is the latest trend in spoof emails.
This lesson discusses how to use a Mainform + Subforms in Microsoft Access to find and enter data for payments on orders. The sample data comes from a custom shop that builds and sells movable storage structures that are delivered to your property. …
Look below the covers at a subform control , and the form that is inside it. Explore properties and see how easy it is to aggregate, get statistics, and synchronize results for your data. A Microsoft Access subform is used to show relevant calcul…
Suggested Courses

572 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question