Solved

administrator.mydomain appears on my windows 2003 standard server

Posted on 2011-03-17
4
220 Views
Last Modified: 2012-05-11
Hey Guys...

So something crazy just happened on my server.

We got an error saying low drive space... I cleared the temp folder and gave me 2 gigs back.  That's not the problem.

What I noticed is that under documents and settings on the server, there is an additional account on there called administrator.mydomain (don't want to say my real domain).

I go into that folder and find just standard files and icons.  

When I go back into docs and settings and go under the regular "administrator" account, I find all my icons and everything else.

When I shutdown and restart, log in... It logs me into the administrator.mydomain account instead of then normal one.

I would love to find the cause, but now I just need a solution in order to get us back up and running.  I know there is no "system restore" for windows server 2003, So I just need to know how I can bring it back to logging in with the regular Administrator account instead of administrator.mydomain...

There is no way to log in "locally" on the server anyway, so I don't understand why it would create the administrator.mydomain.

Anything you can do to help me quickly is greatly greatly appreciated.

Thanks!


0
Comment
Question by:mtech-clint
  • 2
  • 2
4 Comments
 
LVL 83

Expert Comment

by:oBdA
ID: 35160797
You are logging on with the exact same account as before--you just have a new profile, because the old one got corrupted during the drive space error, so Windows created a new one.
Just copy whatever files you need from the old profile into the new one (check whatever you copy: again, the files might be corrupted), and customize the current profile to your likings.
0
 

Author Comment

by:mtech-clint
ID: 35160849
But there are registry entries for the old profile that are not in the new one.  How do I transfer that over? And it won't let me copy over files to this profile while I am logged into this profile.

But...

It doesn't look like the old account was corrupted.  Everything is still there.

There isn't any way for me to tell the server to log into that account instead???
0
 
LVL 83

Accepted Solution

by:
oBdA earned 500 total points
ID: 35160949
Again: you are not working with a new account. Your account just has a new profile, just as if it had logged on for the first time.
The most likely thing to have gone overboard is actually the old HKCU registry part (ntuser.dat in the old profile folder).
Just copy over the files you actually need (most likely the "My documents" folder), do not try to copy from the root of the profile.
Windows wouldn't have created a new profile if the old one was still working.
If you happen to have a backup of the C: drive that was taken, you can try to restore the old profile folder to a new location.
Log off from the server, connect remotely to C$, copy the content of the restored folder into the new profile folder. Reboot if you get errors during the copy, then the profile wasn't unloaded fully during the logoff.
The account-to-profile mapping is stored in HKLM\Software\Microsoft\Windows NT\CurrentVersion\ProfileList\<Your SID>, "ProfileImagePath", but I'd advise against manipulating it. You're likely to just create a third profile (probably Administrator.001) when you logon again.
0
 

Author Closing Comment

by:mtech-clint
ID: 35178468
"The account-to-profile mapping is stored in HKLM\Software\Microsoft\Windows NT\CurrentVersion\ProfileList\<Your SID>, "ProfileImagePath", but I'd advise against manipulating it. You're likely to just create a third profile (probably Administrator.001) when you logon again."

All I needed was that registry key...  

1. I logged in using another user account that had admin rights... Deleted the administrator.mydomain folder in documents and settings (actually I couldn't delete the folder, I had to leave the ntuser.dat because it wouldn't delete it)

2. went into the registry and deleted the administrator.mydomain SID from the key you provided (exported the key first to cover my a$$)...

3. reboot...

logged back in as administrator and I'm back to my original folder... success... ;-)
0

Featured Post

PRTG Network Monitor: Intuitive Network Monitoring

Network Monitoring is essential to ensure that computer systems and network devices are running. Use PRTG to monitor LANs, servers, websites, applications and devices, bandwidth, virtual environments, remote systems, IoT, and many more. PRTG is easy to set up & use.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

A quick step-by-step overview of installing and configuring Carbonite Server Backup.
ADCs have gained traction within the last decade, largely due to increased demand for legacy load balancing appliances to handle more advanced application delivery requirements and improve application performance.
This Micro Tutorial hows how you can integrate  Mac OSX to a Windows Active Directory Domain. Apple has made it easy to allow users to bind their macs to a windows domain with relative ease. The following video show how to bind OSX Mavericks to …
Microsoft Active Directory, the widely used IT infrastructure, is known for its high risk of credential theft. The best way to test your Active Directory’s vulnerabilities to pass-the-ticket, pass-the-hash, privilege escalation, and malware attacks …

813 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

11 Experts available now in Live!

Get 1:1 Help Now