Admin account

[mike-ca]

XPE image creates a default "Admin" account, which component creates
this account? Is this just a regular user account? or is it related
to "Administrator" account.

Thanks!

 

[KM]

mike-ca,

"Administrator account" component will create Administrator account.

You may also have gotten a "User Account" component(s) in your image configuration where you might have set the user name to
"Admin". (if by "Admin" you meant the user name)

 

[mike-ca]

KM,

in my "user account" component, the default user name is "MyUser", when
i added that component, it automatically added "Admin" as a user as
well. after i disabled that component, both "MyUser" and "Admin"
accounts are not present anymore.

i noticed xp created some groups by default, how the rights and
permission are defined for those groups? is there a way i can modify
some of those settings, for example add more rights to "User" group?


thanks!

 

[KM]

mike-ca,

in my "user account" component, the default user name is "MyUser", when
i added that component, it automatically added "Admin" as a user as
well. after i disabled that component, both "MyUser" and "Admin"
accounts are not present anymore.

Wow.. Never seen such behaviour. Are you saying that you only had 1 "User Account" component in the image?
And when you added it two accounts appeared at run time: MyUSer and Admin?

If so you may want to report this as a bug to Microsoft.

i noticed xp created some groups by default, how the rights and
permission are defined for those groups? is there a way i can modify
some of those settings, for example add more rights to "User" group?

The default rights and permission you can verify at run time if you launch Local Users and Groups msc snapshot.
You can't modify those in TD. However, you can always do that at run time. Either use GUI, or automate with commands like "NET
ACOUNTS", "NET GROUP", "NET USER", etc. I personally prefer console version of the User Manager - cusrmgr.exe - where you can set up
anything and easy script the setup. The cusrmgr.exe is availalble with 2K/XP Resource Kit:
http://support.microsoft.com/defaul...port/kb/articles/Q272/5/30.ASP&NoWebContent=1

 

[mike-ca]

KM,

creating 2 users are indeed strange. even more strange is when login
as "Admin", i am able to modify "HKEY_Current_User", but when i created
a new user "mike" and assign it to "User" group, user "mike" is not
able to modify its own "HKEY_Current_User" keys. even though, both
"Admin" and "mike" belong to ONLY one group - "User"

Thanks!

 

[KM]

Weird. How does your FBA log look like? I wonder what it says about the user accounts being set up.

 

[mike-ca]

where can i find FBA log??

thanks

Weird. How does your FBA log look like? I wonder what it says about the user accounts being set up.

 

[mike-ca]

only one line refers to user creation
[FBACreateUserAccounts: Creating User] Administrator

is there any settings to FBALOG more verbose?

thanks

 

[KM]

mike,

only one line refers to user creation
[FBACreateUserAccounts: Creating User] Administrator

is there any settings to FBALOG more verbose?

Nope, unfortunately there is no control over FBA logging.

Is there any custom steps you are performing at run time?
If not, you may want to report the bug to MS. (use feedback alias link)

Konstantin

 

[mike-ca]

KM,

it appears without my knowledge, an other engineer add a script to my
image which create "Admin" account.

however, in the process of investigation, have discovered a problem
related to "fbreseal.exe" which changes the user permission, i am sure
it is a microsoft problem. i will post that soon. thanks for your
tips, you have been very helpful.

thanks

mike,

only one line refers to user creation
[FBACreateUserAccounts: Creating User] Administrator

is there any settings to FBALOG more verbose?

Nope, unfortunately there is no control over FBA logging.

Is there any custom steps you are performing at run time?
If not, you may want to report the bug to MS. (use feedback alias link)

Konstantin

thanks

 

[KM]

Wew.. I am glad the "Admin" issue is not a bug. Otherwise it would be hard to reproduce on Microsoft side

--
=========
Regards,
KM

KM,

it appears without my knowledge, an other engineer add a script to my
image which create "Admin" account.

however, in the process of investigation, have discovered a problem
related to "fbreseal.exe" which changes the user permission, i am sure
it is a microsoft problem. i will post that soon. thanks for your
tips, you have been very helpful.

thanks

mike,

only one line refers to user creation
[FBACreateUserAccounts: Creating User] Administrator

is there any settings to FBALOG more verbose?

Nope, unfortunately there is no control over FBA logging.

Is there any custom steps you are performing at run time?
If not, you may want to report the bug to MS. (use feedback alias link)

Konstantin

thanks

KM wrote:
Weird. How does your FBA log look like? I wonder what it says about the user accounts being set up.

--
=========
Regards,
KM

KM,

creating 2 users are indeed strange. even more strange is when login
as "Admin", i am able to modify "HKEY_Current_User", but when i created
a new user "mike" and assign it to "User" group, user "mike" is not
able to modify its own "HKEY_Current_User" keys. even though, both
"Admin" and "mike" belong to ONLY one group - "User"

Thanks!


KM wrote:
mike-ca,

in my "user account" component, the default user name is "MyUser", when
i added that component, it automatically added "Admin" as a user as
well. after i disabled that component, both "MyUser" and "Admin"
accounts are not present anymore.

Wow.. Never seen such behaviour. Are you saying that you only had 1 "User Account" component in the image?
And when you added it two accounts appeared at run time: MyUSer and Admin?

If so you may want to report this as a bug to Microsoft.

i noticed xp created some groups by default, how the rights and
permission are defined for those groups? is there a way i can modify
some of those settings, for example add more rights to "User" group?

The default rights and permission you can verify at run time if you launch Local Users and Groups msc snapshot.
You can't modify those in TD. However, you can always do that at run time. Either use GUI, or automate with commands like
"NET
ACOUNTS", "NET GROUP", "NET USER", etc. I personally prefer console version of the User Manager - cusrmgr.exe - where you
can
set
up
anything and easy script the setup. The cusrmgr.exe is availalble with 2K/XP Resource Kit:
http://support.microsoft.com/defaul...port/kb/articles/Q272/5/30.ASP&NoWebContent=1


--
=========
Regards,
KM


KM wrote:
mike-ca,

"Administrator account" component will create Administrator account.

You may also have gotten a "User Account" component(s) in your image configuration where you might have set the user
name
to
"Admin". (if by "Admin" you meant the user name)

--
=========
Regards,
KM

XPE image creates a default "Admin" account, which component creates
this account? Is this just a regular user account? or is it related
to "Administrator" account.

Thanks!

 

[Guest]

how do i get another administrator account on my pc i had problems and
removed mine!