Windows 7 Forums

Welcome to Windows 7 Forums. Our forum is dedicated to helping you find support and solutions for any problems regarding your Windows 7 PC be it Dell, HP, Acer, Asus or a custom build. We also provide an extensive Windows 7 tutorial section that covers a wide range of tips and tricks.


Windows 7: Unknown User

27 Jun 2014   #1
Oscar53

Windows 7 Ultimate 64Bit SP1
 
 
Unknown User

Please can anyone help me. When I go to C:\Users\[My User Name], Properties, Security, an unknown user with a red question mark and a long series of numbers for a name shows up. I did remove this unknown user but now what happens is when I go to C:\Users\[My User Name], Properties, Security this unknown shows up momentarily and then disappears. It does however remain in the registry. I deleted it from the registry as well but it keeps comming back. It's no big deal because everything still works OK. But it is annoying. Does anyone know how to fix this. I do have some screenshots in case it helps. OS is Windows 7 Ultimate X64.




Attached Thumbnails
Unknown User-registry.jpg  
Attached Images
Unknown User-s-1-5-21-1959337425-3215390515-242915364-1004.jpg 
My System SpecsSystem Spec
.
27 Jun 2014   #2
Slartybart

x64 (6.3.9600) Win8.1 Pro & soon dual boot x64 (6.1.7601) Win7_SP1 HomePrem
 
 

It's probably a user that was deleted.
-1004

Press Edit and remove the id from the security list.

You might want to check the security tab on root of each partition (C:\ D:\ E:\ ...) to see if the -1004 user is defined in those security settings. It's probably inherited downwards.

Where did you remove the -1004 in the registry?
HKLM\......\Microsoft\WindowsNT\ProfileList?

I'll have to look up the full key if you need it.

Hmmm, why is the advanced button greyed out. Are you not an administrator?
My System SpecsSystem Spec
27 Jun 2014   #3
Oscar53

Windows 7 Ultimate 64Bit SP1
 
 

This is where they showed up when I did a search in the registry. I delete them they come back.
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Group Policy\GroupMembership
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Group Policy\S-1-5-21-1959337425-3215390515-242915364-1001\GroupMembership
Yes I am the admin and by the way the advanced button was only greyed out on that unknown user.
My System SpecsSystem Spec
.

27 Jun 2014   #4
lehnerus2000

W7 Ultimate SP1, LM18 MATE, W10IP VM, W10 Home, #All 64 bit
 
 
Different Install?

Did the HDD (and files) come from another Windows machine?
Are you dual booting with another version of Windows (e.g. XP)?

That normally happens if the user ID has been assigned by a different Windows installation.
One Windows install doesn't know the names that are assigned to the SIDs by a different Windows install.

This picture shows what W7 says when I look at my XP user folder.
Unknown User-unknown-user.png


My System SpecsSystem Spec
27 Jun 2014   #5
Slartybart

x64 (6.3.9600) Win8.1 Pro & soon dual boot x64 (6.1.7601) Win7_SP1 HomePrem
 
 

Good point lehnerus2000 - either way, it's an account not currently on the system and it seems as though Oscar53 wants it removed.

Please check the following registry location for the -1004 account
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\ProfileList

Remove it if found.

You only have the one 500GB drive - how many partitions?
In the Explorer computer view,
right click each drive
pick properties
open the security tab
if -1004 is presented, press the edit button
highlight -1004
press remove
apply to this folder and sub-folders.

let it change the security on the files. It might complain about some system files, but that's ok.


Quote   Quote: Originally Posted by Oscar53 View Post
.....
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Group Policy\S-1-5-21-1959337425-3215390515-242915364-1001\GroupMembership
Yes I am the admin and by the way the advanced button was only greyed out on that unknown user.
You're showing a different user: -1001; is that your GUID?

BTW, the title in the image you posted shows Bob Properites
Object C:\Users\Bob
That's what the dialog window has in focus. The advanced tab is for Bob: user -1004 is simply included in the security setting for that object. Advanced should not be greyed out.
My System SpecsSystem Spec
27 Jun 2014   #6
Oscar53

Windows 7 Ultimate 64Bit SP1
 
 

No other OS's, no transfers from other machines, just this stange behaviour. It doesn't show up in HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\ProfileList

I will record exactly what happens and post it. Does this forum support video recordings as attachments.
My System SpecsSystem Spec
28 Jun 2014   #7
Slartybart

x64 (6.3.9600) Win8.1 Pro & soon dual boot x64 (6.1.7601) Win7_SP1 HomePrem
 
 

You cannot directly attach a video, but if you post it on a cloud or Youtube, you can post a link to it.

I'd like to see what your system knows about users. Please post a screen shot of
Control Panel > User Accounts >Manage another account
See: Screenshots and Files - Upload and Post in Seven Forums
Unknown User-capture.png
I'd also like to see how your disks are partitioned.
Having this information makes it easier to a discuss course of action.
See: Disk Management - Post a Screen Capture Image

Thanks


My System SpecsSystem Spec
28 Jun 2014   #8
Oscar53

Windows 7 Ultimate 64Bit SP1
 
 

Here are the screenshots you asked for.


Attached Thumbnails
Unknown User-capture.jpg  
Attached Images
Unknown User-capture1.jpg 
My System SpecsSystem Spec
28 Jun 2014   #9
Slartybart

x64 (6.3.9600) Win8.1 Pro & soon dual boot x64 (6.1.7601) Win7_SP1 HomePrem
 
 

Thanks,

In Explorer, view Computer
Right click C:\
pick properties
open Security tab
press the advanced button
if user -1004 is displayed
press change permissions
select user -1104
press remove
press OK
answer yes if asked to replace security settings

let it change the files

then for each folder on C:\
do the same
check for user -1004 on the security tab
remove and apply

You'll probably only find if on the Users folder

Then check D:\

I recommended this twice before, if you don't want to do it, that's ok - it's your machine. I won't recommend it again.

Good luck,

Bill
.
My System SpecsSystem Spec
28 Jun 2014   #10
Oscar53

Windows 7 Ultimate 64Bit SP1
 
 

It doesn't show up there, here's what shows up.


Attached Images
Unknown User-capture.jpg 
My System SpecsSystem Spec
Reply

 Unknown User




Thread Tools Search this Thread
Search this Thread:

Advanced Search




Similar help and support threads
Thread Forum
Unknown user name or bad password
"Login failure: Unknown user name or bad password" Two machines, 'A' and 'B', both running W7 sp1 x64, Both have the same username & password, Both are setup to share all drives, Both are using the hidden (or super) Admin account renamed (by design), Both can see one another, all drives,...
Network & Sharing
Unknown user showing in user accounts - possibly compromised?
Hi all, Hoping someone might be able to help. Recently, a few strange things have happened with the PC, which first started when I found I couldn't use the Backup & Recovery software in Windows 7. Whenever I clicked on one of the buttons with a shield, nothing would happen at all. I've looked...
System Security
Unknown User Account
Hi, I've noticed something a bit strange with an unknown user account on my system. Can someone help explain where this may have come from? I have no recollection of creating this account, and it is not possible for someone to have created this account on my system, Background: I am the...
Installation & Setup
Deleting unknown user from ACL
Warning: I thought I'd asked this already... After transferring some HPFS USB drives from my old PC to the new PC, I've ended up with an unknown user in many of my files. It will be OldPC/Steve, but it manifests itself as S-1-5-21-713417444-3787200217-3968111754-1006 as demonstrated by cacls: ...
General Discussion
Unknown session (Other user)
Since a few days, I found a new session that I haven't created, like on this image: http://b.imagehost.org/0330/DSCF5131.jpg Thank you for helping me to delete this account
General Discussion
Unknown User Account
Hello, I noticed in some of my folder permissions there is an account that was not made by me and is not listed under Users in Control Panel. I have included a picture. I am currently dual booting server 2008 with my windows 7 but I noticed that account before that. Any ideas? I currently use...
System Security


Our Sites

Site Links

About Us

Find Us

Windows 7 Forums is an independent web site and has not been authorized, sponsored, or otherwise approved by Microsoft Corporation. "Windows 7" and related materials are trademarks of Microsoft Corp.

© Designer Media Ltd

All times are GMT -5. The time now is 15:22.

Twitter Facebook Google+



Windows 7 Forums

Seven Forums Android App Seven Forums IOS App