How do I list & identify all XP profiles?

Discussion in 'Computer Security' started by Andy, Apr 21, 2006.

  1. Andy

    Andy Guest

    Can you guys help me.

    I run XP Pro/SP2 at home. I have administrator rights.
    There is no network and I access the Internet using cable.

    ------

    I can see the user profiles on my machine at:
    System Properties > Advanced > User profiles

    QUESTION ONE: How do I get a complete list of *all* the profiles
    including the hidden ones?

    -----

    I have done a manual search through the registry while logged on as
    "Bigboss" (S-1-5-21-861567501-920026266-1957994488-1003) who has
    administrator rights. The results are shown below.

    QUESTION TWO: Who do these two keys (shown below) relate to?
    S-1-5-18
    S-1-5-21-861567501-920026266-1957994488-1007


    Thank you.
    Andy



    ------------ PROFILE KEYS FOUND IN MY REGISTRY --------------

    (1) HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\...
    Group Policy\
    (2) HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\...
    Group Policy\State\

    S-1-5-21-861567501-920026266-1957994488-1003
    S-1-5-21-861567501-920026266-1957994488-1004
    S-1-5-21-861567501-920026266-1957994488-1006
    S-1-5-21-861567501-920026266-1957994488-1007
    S-1-5-21-861567501-920026266-1957994488-500


    (3) HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\...
    Installer\UserData\

    S-1-5-18
    S-1-5-21-861567501-920026266-1957994488-1003


    (4) HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\ProfileList\
    Note: Entries below also show the value of \\ProfileImagePath


    S-1-5-18
    %systemroot%\system32\config\systemprofile

    S-1-5-19
    %SystemDrive%\Documents and Settings\LocalService

    S-1-5-20
    %SystemDrive%\Documents and Settings\NetworkService

    S-1-5-21-861567501-920026266-1957994488-1003
    %SystemDrive%\Documents and Settings\Bigboss

    S-1-5-21-861567501-920026266-1957994488-1004
    %SystemDrive%\Documents and Settings\Secretary

    S-1-5-21-861567501-920026266-1957994488-1006
    %SystemDrive%\Documents and Settings\Littleboss

    S-1-5-21-861567501-920026266-1957994488-1007
    ????

    S-1-5-21-861567501-920026266-1957994488-500
    %SystemDrive%\Documents and Settings\Administrator


    (5) HKEY_USERS\

    S-1-5-18
    S-1-5-19
    S-1-5-19_classes
    S-1-5-20
    S-1-5-20_Classes
    S-1-5-21-861567501-920026266-1957994488-1003
    S-1-5-21-861567501-920026266-1957994488-1003_Classes


    ------------ END OF PROFILE KEYS FOUND IN MY REGISTRY ------------
    ======================== END OF POSTING =========================



    --

    posted to:
    microsoft.public.windowsxp.general
    microsoft.public.windowsxp.security_admin
     
    Andy, Apr 21, 2006
    #1
    1. Advertising

  2. Andy

    nemo_outis Guest

    Andy <> wrote in news:Xns97ACCA76F121E74C1H4@127.0.0.1:

    > Can you guys help me.
    >
    > I run XP Pro/SP2 at home. I have administrator rights.
    > There is no network and I access the Internet using cable.
    >
    > ------
    >
    > I can see the user profiles on my machine at:
    > System Properties > Advanced > User profiles
    >
    > QUESTION ONE: How do I get a complete list of *all* the profiles
    > including the hidden ones?
    >
    >


    start - programs - administrative tools - computer management - local users
    and groups

    If administrative tools isn't available under programs you can reach it
    from start - settings - control panel - etc.


    -----
    >
    > I have done a manual search through the registry while logged on as
    > "Bigboss" (S-1-5-21-861567501-920026266-1957994488-1003) who has
    > administrator rights. The results are shown below.
    >
    > QUESTION TWO: Who do these two keys (shown below) relate to?
    > S-1-5-18
    > S-1-5-21-861567501-920026266-1957994488-1007
    >
    >
    > Thank you.
    > Andy



    These are SIDs - an introductory discussion may be found at:

    http://support.microsoft.com/kb/243330

    Regards,
     
    nemo_outis, Apr 21, 2006
    #2
    1. Advertising

  3. Andy

    Fred Guest

    also check

    http://www.mvps.org/marksxp/WindowsXP/aspdot.php



    Andy wrote:
    > Can you guys help me.
    >
    > I run XP Pro/SP2 at home. I have administrator rights.
    > There is no network and I access the Internet using cable.
    >
    > ------
    >
    > I can see the user profiles on my machine at:
    > System Properties > Advanced > User profiles
    >
    > QUESTION ONE: How do I get a complete list of *all* the profiles
    > including the hidden ones?
    >
    > -----
    >
    > I have done a manual search through the registry while logged on as
    > "Bigboss" (S-1-5-21-861567501-920026266-1957994488-1003) who has
    > administrator rights. The results are shown below.
    >
    > QUESTION TWO: Who do these two keys (shown below) relate to?
    > S-1-5-18
    > S-1-5-21-861567501-920026266-1957994488-1007
    >
    >
    > Thank you.
    > Andy
    >
    >
    >
    > ------------ PROFILE KEYS FOUND IN MY REGISTRY --------------
    >
    > (1) HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\...
    > Group Policy\
    > (2) HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\...
    > Group Policy\State\
    >
    > S-1-5-21-861567501-920026266-1957994488-1003
    > S-1-5-21-861567501-920026266-1957994488-1004
    > S-1-5-21-861567501-920026266-1957994488-1006
    > S-1-5-21-861567501-920026266-1957994488-1007
    > S-1-5-21-861567501-920026266-1957994488-500
    >
    >
    > (3) HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\...
    > Installer\UserData\
    >
    > S-1-5-18
    > S-1-5-21-861567501-920026266-1957994488-1003
    >
    >
    > (4) HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\ProfileList\
    > Note: Entries below also show the value of \\ProfileImagePath
    >
    >
    > S-1-5-18
    > %systemroot%\system32\config\systemprofile
    >
    > S-1-5-19
    > %SystemDrive%\Documents and Settings\LocalService
    >
    > S-1-5-20
    > %SystemDrive%\Documents and Settings\NetworkService
    >
    > S-1-5-21-861567501-920026266-1957994488-1003
    > %SystemDrive%\Documents and Settings\Bigboss
    >
    > S-1-5-21-861567501-920026266-1957994488-1004
    > %SystemDrive%\Documents and Settings\Secretary
    >
    > S-1-5-21-861567501-920026266-1957994488-1006
    > %SystemDrive%\Documents and Settings\Littleboss
    >
    > S-1-5-21-861567501-920026266-1957994488-1007
    > ????
    >
    > S-1-5-21-861567501-920026266-1957994488-500
    > %SystemDrive%\Documents and Settings\Administrator
    >
    >
    > (5) HKEY_USERS\
    >
    > S-1-5-18
    > S-1-5-19
    > S-1-5-19_classes
    > S-1-5-20
    > S-1-5-20_Classes
    > S-1-5-21-861567501-920026266-1957994488-1003
    > S-1-5-21-861567501-920026266-1957994488-1003_Classes
    >
    >
    > ------------ END OF PROFILE KEYS FOUND IN MY REGISTRY ------------
    > ======================== END OF POSTING =========================
    >
    >
    >
     
    Fred, Apr 22, 2006
    #3
    1. Advertising

Want to reply to this thread or ask your own question?

It takes just 2 minutes to sign up (and it's free!). Just click the sign up button to choose a username and then you can ask your own questions on the forum.

Share This Page