The movie "Delta Force" was extremely hard to make because Chuck Norris had to downplay his abilities. The first few cuts were completely unbelievable.








  
Thank you for your support   
Windows appends / adds .000 to User profiles

 
Post new topic   Reply to topic    EvilBytes Forum Index -> Knowledge Base (Microsoft Platform)
View previous topic :: View next topic  
Author Message
AdamWorkingHard
System Engineer


Joined: 09 May 2006
Posts: 969
Location: miles from where you are

PostPosted: Mon Feb 25, 2008 10:39 am    Post subject: Windows appends / adds .000 to User profiles Reply with quote

[Problem]
User logs into their computer and they notice all their desktop icons are missing, My Documents files are gone, Outlook email no longer works, etc. Admin notices that her profile has been recreated.

Here's a list of how the automated Windows profiles look like:

1. Username.DomainName
2. Username.000
3. Username.ComputerName

[Solution]
There are a couple of reasons for this. One reason is that Windows creates a new profile is because the original/old profile loses "Full Control" permissions to their profile folder. The user's SID no longer has access rights to it's own folder therefore XP will create a new one and append .DomainName or .000

Another reason is that the "trust relationship between this workstation and the primary domain failed." This usually means you would need to disjoin and then re-join the computer to the domain. You would also need fix2.

Another reason within the the ProfileList within the registry has .Bak appended to the orginal profile, hence forcing windows to create a new profile with ksmith.000. Check fix2.

Fix1
1. If windows created a new profile, log off that user, and log in as administrator.
2. Go to C:\Documents and Settings -> delete the new profile that has the appended .Domain or .000 (may require a restart to release write protection on profile files).
3. Right click the original profile folder -> Properties -> Security TAB
4. You might notice that there's a broken SID account. There's an account that says "S-1-5-21-2928393..." This SID does not give the "display name" because it's corrupt and lost it's link to the domain. You can delete broken SIDs because they don't work anyways.
5. Re-add the appropriate user account to the profile folder and give it Full Control under "Documents and Settings," and to it's sub-folders and files.


Fix2
Always backup your registry before making any changes. Open "regedit" -> File -> Export

1. Use the Registry Editor to navigate to HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\ProfileList.
2. In each SID sub-key, inspect the ProfileImagePath value name, a REG_EXPAND_SZ data type, for a string that contains your UserName. It will look something like %SystemDrive%\Documents and Settings\Username.DomainName Or Username.000
3. Delete all the corrupt profiles with the appended .Domain or .000
4. Leave only the orginal one, ensure desired Username has Full control.
5. Also you might notice that the desired orginal SID (folder) with the good profile has .Bak appended to the end I.E.

Quote:
S-1-5-18
S-1-5-19
S-1-5-21-1844237928-298477389-9283727847-1003
S-1-5-21-1844237828-298234798-2348237890-500.Bak


6. This SID with the .Bak is the profile you want but because it's appended with the .Bak, each time you login with the local or domain account it keeps creating a new profile with the user name and appending to their c:\documents and settings\ksmith.000.
7. Delete the profile folder ksmith.000.
8. Edit the SID registry entry with the .Bak. Just remove the .Bak, ensure the profile folder ksmith.000 is deleted, restart the computer, re-login and the user should see his orginal profile again.

_________________
Artificial intelligence is not match for natural stupidity...
Back to top
View user's profile Send private message Send e-mail AIM Address
Display posts from previous:   
Post new topic   Reply to topic    EvilBytes Forum Index -> Knowledge Base (Microsoft Platform) All times are GMT - 8 Hours
Page 1 of 1

 
Jump to:  
You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum
You cannot attach files in this forum
You can download files in this forum


Support@EvilBytes.com
www.EvilBytes.com © 2006