Windows 7 Forums
Welcome to Windows 7 Forums. Our forum is dedicated to helping you find support and solutions for any problems regarding your Windows 7 PC be it Dell, HP, Acer, Asus or a custom build. We also provide an extensive Windows 7 tutorial section that covers a wide range of tips and tricks.

Windows 7: Unknown User

28 Jun 2014   #11

x64 (6.3.9600) Win8.1 Pro & soon dual boot x64 (6.1.7601) Win7_SP1 HomePrem

ok, keep digging down on the top most folders on C:\

remove when found

A lot of security is inherited, so it really isn't that much work. It is some work, though.

Wash, rinse, repeat.

My System SpecsSystem Spec
28 Jun 2014   #12

Windows 7 Ultimate 64Bit SP1

Please explain, I'm not sure what you mean. I'm not a novice but I'm not an expert either. What do I need to remove or edit if any?
My System SpecsSystem Spec
28 Jun 2014   #13

x64 (6.3.9600) Win8.1 Pro & soon dual boot x64 (6.1.7601) Win7_SP1 HomePrem

You're looking at the security tab on folders starting at the topmost C:\ and D:\
You've done this on other folder (C:\Users\Bob for instance) so I don't need to explain the how.

Then working your way down the folder tree
C:\Program Files
C:\Program Files (86)

You'll examine the properties of each folder, security tab

If you find that -1004 user, you want to edit the security for that object (folder)
select that mystery user -1004 and remove that entry ( remove button)

Make sure you press the OK button and answer yes to any dialog windows that might pop up

You'll continue doing that same process for each folder I listed above.

The reason I wanted you to go into the advanced properties page is because it's easier to tell ig the descriptor is inherited - it uses the word instead of greyed out check boxes.

Simply put
1) right click a folder
2) select properites
3) select the security tab
4) look for user -1004
5) found? edit and remove
6) not found exit and move on to the next folder

It's easiest if you do it all in one session working down the folder tree, but you don't have to. You can remove the user
-1004 as you come across it.

If the security descriptor comes form the folder above it (inherited), the user will reappear, so you have to work your way up the tree in that case.
My System SpecsSystem Spec

28 Jun 2014   #14

Windows 7 Ultimate 64Bit SP1

OK thanks will do. Just one quick question. See how System and Administrators (B0b PC... have two entries, is that normal?

Attached Images
Unknown User-capture.jpg 
My System SpecsSystem Spec
28 Jun 2014   #15

Windows 7 Ultimate 64Bit SP1

Latest update, first ignore the last question regarding the two entries. I did what you said about checking Program Files etc.. but I went one step further. I checked the AppData folder and found this unknown user in both the Local and Roaming folders. I deleted it and that seems to have fixed the issue. Thanks to all who replied and helped.
My System SpecsSystem Spec
28 Jun 2014   #16

x64 (6.3.9600) Win8.1 Pro & soon dual boot x64 (6.1.7601) Win7_SP1 HomePrem

Glad to hear you managed to unravel the mystery user.

In case you still want an answer re: two entries: if you look closely - on the right side, there are further definitions
1) this folder and
2) subfolders and

different permissions can be assigned to access objects (folders) based on the hierarchy of the folder (this folder) or (subfolders)

If you observe other folders with the -1004 user defined in the security descriptor, you have good working knowledge on how to fix it.

Thank you for marking the thread solved too.


My System SpecsSystem Spec
29 Jun 2014   #17

Windows 7 Ultimate 64Bit SP1

You're welcome, appreciate all the help and suggestions.
My System SpecsSystem Spec

 Unknown User

Thread Tools

Similar help and support threads
Thread Forum
Unknown user name or bad password
"Login failure: Unknown user name or bad password" Two machines, 'A' and 'B', both running W7 sp1 x64, Both have the same username & password, Both are setup to share all drives, Both are using the hidden (or super) Admin account renamed (by design), Both can see one another, all drives,...
Network & Sharing
Unknown user showing in user accounts - possibly compromised?
Hi all, Hoping someone might be able to help. Recently, a few strange things have happened with the PC, which first started when I found I couldn't use the Backup & Recovery software in Windows 7. Whenever I clicked on one of the buttons with a shield, nothing would happen at all. I've looked...
System Security
Unknown User Account
Hi, I've noticed something a bit strange with an unknown user account on my system. Can someone help explain where this may have come from? I have no recollection of creating this account, and it is not possible for someone to have created this account on my system, Background: I am the...
Installation & Setup
Deleting unknown user from ACL
Warning: I thought I'd asked this already... After transferring some HPFS USB drives from my old PC to the new PC, I've ended up with an unknown user in many of my files. It will be OldPC/Steve, but it manifests itself as S-1-5-21-713417444-3787200217-3968111754-1006 as demonstrated by cacls: ...
General Discussion
Unknown session (Other user)
Since a few days, I found a new session that I haven't created, like on this image: Thank you for helping me to delete this account
General Discussion
Unknown User Account
Hello, I noticed in some of my folder permissions there is an account that was not made by me and is not listed under Users in Control Panel. I have included a picture. I am currently dual booting server 2008 with my windows 7 but I noticed that account before that. Any ideas? I currently use...
System Security

Our Sites

Site Links

About Us

Find Us

Windows 7 Forums is an independent web site and has not been authorized, sponsored, or otherwise approved by Microsoft Corporation. "Windows 7" and related materials are trademarks of Microsoft Corp.

© Designer Media Ltd

All times are GMT -5. The time now is 12:00.
Twitter Facebook Google+ Seven Forums iOS App Seven Forums Android App