Re: Recover User Profile

[JJ]

I am so confused at this point, I only hope I can explain the problem
clearly. I need to restore my user’s profile in W-XP Home Edition; SP3.

I installed a new OS on a new HD. The legacy HD with XP is now chain
loaded as the ‘Slave’ HD. The boot loader for the new OS uses GRUB2.
After I got it up and running, I discovered that I was unable to boot
into XP! After futzing around, I was finally able to get XP back in the
Boot Menu, but when I clicked in, I got an intermediate alert saying
Windows was unable to load ‘my profile’. I didn’t appreciate what this
meant and I let it continue to load. A new “User Profile” seems to have
been created although it seems the new profile was given my old 'user
name'/'log in name'.

If your configuration is now like this:
SATA1= New HD (new OS)
SATA2= Legacy HD (Windows XP)
BIOS Boot= Harddisk 1 or IDE 1 or SATA 1

Then the problem is because of drve assignment change and GRUB. Even
though GRUB has a drive mapping feaure, it is done at software level (a
hack). However, Windows use its own drive accessing functions so GRUB
drive mapping is ignored. This is why GRUB "drivemap" command only work
for some OS.

 

[JJ]

If you don't mind, I would like to reiterate my objective. How do I find
the user profile (Directory?) for 'rooster'? The 2 profiles I created
trying to solve the problem are in evidence in "My Computer". But
'rooster' is not.

Further, the Directory containing my old (rooster’s) Docs & Sets appears
(to me) to be in a directory named: “Owner” listed below. However, the
current ‘logged in as’ user is “rooster” which does not appear in the
command module’s list below; whereas “Owner” doesn’t appear in the list
of users at the login prompt/screen above.


Code:
--------------------
Directory of C:\Documents and Settings

05/08/2012 10:14 PM DIR .
05/08/2012 10:14 PM DIR ..
08/18/2011 01:02 PM DIR Administrator
03/08/2011 05:54 AM DIR All Users
04/10/2006 03:58 PM 1,184 backup04.log
08/18/2011 01:02 PM DIR Guest
05/29/2012 08:57 AM DIR Owner
05/08/2012 06:16 PM DIR Owner.TRIGGER
05/08/2012 10:14 PM DIR penguin
05/08/2012 09:20 PM DIR pilgrim
1 File(s) 1,184 bytes
9 Dir(s) 15,648,595,968 bytes free
--------------------


Given that my understanding of Windows file nomenclature is at the
newbie level, my best guess at what I am hoping to do is copy/rename the
'Owner' profile to/as 'rooster'. But I don't know where 'rooster' is
much less understand why it isn't in the list above.

rod

Below are a couple of things that you can use to determine which "Owner*"
folders is the "rooster" folder.

* File names in "My Documents" folder. I assume you remember what files
you have saved. You can use it as identifications.

* Folder content size. There must be numeruous files piled up in the
"rooster" profile folder. The larger one is likely the roster profile.

* Folder creation date & time. One of the "Owner" or "Owner.TRIGGER" is a
newly created folder by the system due to that glitch. The older one is
likely the roster profile.

There is a sure method to find it, but it's too risky since it requires
experience in Windows registry.

 

[JJ]

If I understand your analytics correctly, my question would be: how do
I get the ‘rooster’ that appears in my Log in Screen to ‘associate’
with;
Code:
--------------------

Directory of C:\Documents and Settings\Owner\My Documents
--------------------


If using the Command Module is the way to go, would I use a ‘cp’, ‘mv’
or ‘rn’ command?

rod

If you don't have any encrypted files or any secured data that depend
on rooster account, you can try to do a manual user profile *copy*.
Don't move the files so that your original files are safe. However, you
mighthave a problem copying them due to file permission issue. And
Windows XP Home Edition AFAIR, don't have a "Security" property tab for
file system objects. So you can't change the permissions when you need
to.

 

[JJ]

Pardon the naiveté, but by “encrypted files” are you including
compressed/zipped files and folders? I have a couple of those that I
created when making backups to removable media for ‘rooster’s “Documents
and Settings” before the profile troubles.

I meant the native NTFS-specific encrypted files. It's an NTFS
"Encrypted" attribute to be more specific. It's accessible via
folder/file property dialog's "Advanced Attributes" dialog via
"Advanced" button (if it's available in XP Home edition). ZIP or any
other archives won't be affected.

GER"

My question now becomes: Can I rename ‘\Owner.TRIGGER’ ‘rooster’? If I
can,
can I then *copy* the contents of ‘…\Owner’ into it?

Renaming "Owner.TRIGGER" profile folder to "rooster" alone won't fix it
because the registry setting for "rooster" account is still pointing to
"Owner.TRIGGER".

I want to provide a guide to fix it, but I need to know the current state
of the relevant registry settings. Also, I'll be assuming that the
contents of "Owner" profile folder is the one you really want for
"rooster" account.

Starting at this point, please login using Administrator account. Then
open the command prompt and follow these steps.

1) Execute this command line (it may get broken due to formatting).

REG /EXPORT "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion
\ProfileList" C:\OrgProfileList.reg

It will get all account profile registry settings. No private data is
included except for account IDs and user profile path names.

2) Right-click on C:\OrgProfileList.reg and choose "Edit" to open it with
Notepad.

3) Copy all text into clipboard and paste it into your message. Or send
the file to my email if you want. FYI, the SID field is a unique Security
ID to indicate user and group membership, so it's not a password.

Keep the OrgProfileList.reg file for later. I'll give you further guide
after I edit the registry settings.

 

[JJ]

Do you prefer to be addressed as GER*?

My news client probably acting up.

I’m logged in as ‘rooster’. That should suffice as Administrator; eh?

It's OK for this step. But later, for the actual fix, it would not be OK
because its user profile folder including some of its files are being
used by the system. The fix involves renaming the profile folder at
specific step later. So, please use other account.

No joy.

Code:
--------------------
C:\Documents and Settings\Owner.TRIGGER REG /EXPORT
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion

Error: Bad operation. Use /? for help

That command line got broken by my news client. Please assume as one
single line and please don't remove the quotes (type it as is).

REG /EXPORT "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion
\ProfileList" C:\OrgProfileList.reg

 

[JJ]

I tried both copy/paste and typing the command, but I get the same
result. Sorry for the copy job from cmd mod. That's the best I can do
without manually alt/editing it. I tried copying to MS Word, NotePad
and copying directly. They all get -bemangled- when copying here.

I really appreciate you patience. I only wish I knew where I'm going
wrong.

My bad. I subconsciously inserted a "/" before the "EXPORT". It should
have been:

REG EXPORT "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion
\ProfileList" C:\OrgProfileList.reg

Terribly sorry about that.

 

[JJ]

I was expecting a P/O or new window of some kind to appear so I could
proceed with:
...but nothing presented!!

That "The operation completed successfully" message means the registry
settings have been saved into "OrgProfileList.reg" file in drive C:.
That file should be around 12 KB.

You might want to send that "OrgProfileList.reg" file via email instead.
I'll send a copy of this message to your email (assuming I get your
email address right). Please do not post unobfuscated email address into
newsgroup.

 

[JJ]

That "The operation completed successfully" message means the
registry settings have been saved into "OrgProfileList.reg" file in
drive C:. That file should be around 12 KB.

You might want to send that "OrgProfileList.reg" file via email
instead. I'll send a copy of this message to your email (assuming I
get your email address right). Please do not post unobfuscated email
address into newsgroup.

I can't seem to figure out your email address. The ".c0m" has been
renamed to ".com". Also tried removing the "i-" from the user name.

For my email address, remove the "_at" from the user name then use
"googlemail.com".

 

[JJ]

I'm new to this forum. When I went to the messages utility I got:
So, I couldn't retrieve your '20'.

I have "OrgProfileList.reg" in Notepad.

I was better/worse at munging my addie than intended; eh?

mocDOTliamgATnospoocsDOTdori

OK. The mail seem got through. I just hope it doesn't endup on some
lawyer's mailbox.

And what's that "mocDOTliamgATnospoocsDOTdori"?

 

[Char Jackson]

OK. The mail seem got through. I just hope it doesn't endup on some
lawyer's mailbox.

And what's that "mocDOTliamgATnospoocsDOTdori"?

Looks like some kind of backwards-speak to me...

 

[JJ]

Looks like some kind of backwards-speak to me...

You're right.
It's backward except the capitalized ones, which confuses me.
But really, I'm not a bot. Honest! \( O_O,)/

When I looked at it at first glance, I read it as:
docomo... i am god... no spoon... midori...
Don't know where the heck that last one came from... -_-

 

[Char Jackson]

;3528391']Char Jackson (e-mail address removed) wrote:
--
And what's that "mocDOTliamgATnospoocsDOTdori"?-

Looks like some kind of backwards-speak to me...-

You're right.
It's backward except the capitalized ones, which confuses me.
But really, I'm not a bot. Honest! \( O_O,)/

When I looked at it at first glance, I read it as:
docomo... i am god... no spoon... midori...
Don't know where the heck that last one came from... -_-

OK, yous' guyses; so I'm a lousy cryptologist. I'm homely, too;... and
my wife dresses me.

Red hair, by chance? ;-)

 

[JJ]

I rationalized my addie herein and attached the errant
'OrgProfileList.reg' file to JJ via his email.

OK. I received the file. I've edited it and split to two files:
"ProfileFix.reg" and "ProfileRevert.reg".
I've sent them to your email.

The "ProfileFix.reg" will patch the registry to fix the "rooster"
account's profile folder to "rooster". And the "ProfileRevert.reg"
will revert that patch in case something wrong happen. I've tested
this on my own Windows XP PC (but not my own account, of course).

So here are the steps.

1. Save this newsgroup message into a text file.
e.g.: "C:\FixGuide.txt". Use this file instead, since later at some
point, you might not have access to your news client. Also you'll
need to memorize step #3-#5, since you won't have access to your
files at that stage. Or just print this message.

2. Save my email attachments into "C:\". It's only two files. So you
should have "C:\ProfileFix.reg" and "C:\ProfileRevert.reg".

3. Reboot your PC and keep tapping the F8 key repeatedly at start of
BIOS screen until you are presented with a text based menu that has a
"Safe Mode" text on it. If you see a Windows logo image instead of
that menu, that means you missed it and you need to try it again
(wait until Windows is loaded in order to restart the PC). Be sure to
press the F8 key fast enough.

4. When you get that text based menu, make sure the selection is at
the "Safe Mode" (topmost), then press ENTER. You'll get another menu
with one selection: "Microsoft Windows XP"... Then press ENTER again.
Now wait for it to load Windows.

5. You'll be prompted with user login screen. Please choose
"Administrator". This is important.

6. When you are prompted with "Windows is running in safe mode.",
click on the "Yes" button. Later, you might also be prompted to
restart because Windows has installed a new device. Please choose
"No" on this prompt.

7. Open Windows Explorer and go to "C:\Documents and Settings".

8. Make a copy the "Owner.TRIGGER" folder by selecting it (not
double-click), press CTRL-C, then press CTRL-V. The copy will be
named as "Copy of Owner.TRIGGER". Make sure you have free space. Or
copy it to another drive.

9. Rename the "Owner.TRIGGER" folder to "rooster". If a blackout
occured after you've done this, repeat the task starting at step #2
and check if the "Owner.TRIGGER" folder has been sucessfully renamed
to "rooster" or not. Then continue to next step.

10. Now, go to "C:\".

11. Double-click the "ProfileFix.reg" file to apply that patch. On
the "Are you sure you want to add..." prompt, press the "Yes" button
and press the "OK" button on the next acknowledgement dialog. In case
of blackout, repeat the task like explained in step #8 and repeat
this step, then go to next step.

12. You are done. Reboot your PC normally and without pressing the F8
key. If the text menu appeared, select "Start Windows Normally" then
press ENTER. And press ENTER again on the next "Microsoft Windows
XP..." menu selection.

13. On login screen, select "rooster" account.

14. Now check it by running the Command Prompt. It should show like
this.
--------------------------------------------------
Microsoft Windows XP [Version 5.1.2600]
(C) Copyright 1985-2001 Microsoft Corp.

C:\Documents and Settings\rooster>
--------------------------------------------------

If somehow it doesn't work, revert the fix by booting into "Safe
Mode". Use the "C:\ProfileRevert.reg" by double-clicking it like
before. If "Owner.TRIGGER" folder is present again, delete it. Rename
back the "rooster" folder into "Owner.TRIGGER". Then reboot normally.
At this point, I have no solution. All files & folders listed at end
of this message can be deleted.

If it works, next is to check you memory. Not the RAM, but your
"memory". When your profile is still "Owner.TRIGGER", what programs
have you used? I asked this because the settings for those programs
might have been changed to use "Owner.TRIGGER", instead of "rooster".
So you might want to check them.

If you have confirmed the fix worked, these can be deleted:
- "OrgProfileList.reg", "ProfileFix.reg", and "ProfileRevert.reg".
- "Copy of Owner.TRIGGER" profile folder.
- "Owner" profile folder. This is an orphan profile folder.
Note that you might need to use "Safe Mode" to delete a profile
folder.

 

[JJ]

1. Save this newsgroup message into a text file.
e.g.: "C:\FixGuide.txt".

Action: [Downloaded and Saved newsgroup message as addendum to
existing doc “C:\Documents and Settings\Owner.TRIGGER\Desktop\
PCBanter User Profile Recovery”]

Use this file instead, since later at some
point, you might not have access to your news client. Also
you'll need to memorize step #3-#5, since you won't have access
to your files at that stage. Or just print this message.

Action: Printed Message in addition to saving as Draft email in
gmail account accessible via chainloaded Hard Drive.

2. Save my email attachments into "C:\". It's only two files.
So you should have "C:\ProfileFix.reg" and
"C:\ProfileRevert.reg".

Action: [Downloaded files as "C:\ProfileFix" and
"C:\ProfileRevert" to "C:\Documents and
Settings\Owner.TRIGGER\Desktop"] [Copied & Saved files into
Registry using Registry Editor as: “C:\ProfileFix.reg” and
“C:\ProfileRevert.reg” [*Received confirmation files had been
entered into registry*]

Query: I can’t stat either file using “My Computer” by entering,
“C:\ ProfileFix.reg” or "C:\ProfileRevert.reg" in location
window. Received error message: "Cannot find
'file:///C:/ProfileFix.reg' Make sure the path or internet
address is correct". (*Note:* alert used '/' instead of '\'.)
Likewise, neither file appears in the list of folders and files
per “Directory of C:\’ using cmd module.

Please double-click the "ProfileRevert.reg" in our desktop and
press "Yes" to apply it.

If you can't find it, open Windows and go to this directory:
C:\Documents and Settings\Owner.TRIGGER\Desktop
The file should be there. Double-click it and apply it.

If you still can't find it, use the Search menu from Windows Start
button to find a file named "ProfileRevert.reg" in your "C:\". You
need to apply that one file to avoid more damage. Leave the
"ProfileFix.reg" alone.

I'm sorry to say but honestly, that at this point, I strongly
suggest that you to seek help from a friend who knows more about
Windows. That guide is too risky to follow if you're not familiar
with Windows.

 

[Char Jackson]

]Please double-click the "ProfileRevert.reg" in our desktop and
press "Yes" to apply it.

If you can't find it, open Windows and go to this directory:
C:\Documents and Settings\Owner.TRIGGER\Desktop
The file should be there. Double-click it and apply it.

If you still can't find it, use the Search menu from Windows Start
button to find a file named "ProfileRevert.reg" in your "C:\". You
need to apply that one file to avoid more damage. Leave the
"ProfileFix.reg" alone.

I'm sorry to say but honestly, that at this point, I strongly
suggest that you to seek help from a friend who knows more about
Windows. That guide is too risky to follow if you're not familiar
with Windows.

*JJ:*

The files appeared on my desktop titled: "C:\ProfileFix" and
"C:\ProfileRevert". Note: ".reg" was/is not appended. I did "Apply"
them using the Registry Editor and, as I wrote, a confirmation notice
appeared. Perhaps it wasn't clear from my query. The issue that
concerned me was whether or not a conventional file search _should_
acquire those files with the ".reg"? I was hoping for a response
indicating this was not an issue. I'm just being extra careful; don't
you see...

Your system is configured to hide file extensions. Change it.

Go to Windows Explorer and click Tools, Folder Options. Select the
View tab, then find the option called "Hide extensions for known file
types." Uncheck that option, then click OK to dismiss the dialog.

 

[JJ]

The files appeared on my desktop titled: "C:\ProfileFix" and
"C:\ProfileRevert". Note: ".reg" was/is not appended. I did
"Apply" them using the Registry Editor and, as I wrote, a
confirmation notice appeared. Perhaps it wasn't clear from my
query. The issue that concerned me was whether or not a
conventional file search _should_ acquire those files with the
".reg"? I was hoping for a response indicating this was not an
issue. I'm just being extra careful; don't you see...
Quote:
[*Received confirmation files had been entered into registry*]

Whether you actually pressed the "Yes" button at that confirmation
dialog or not, you shouldn't have "applied" it in the first place.
I assumed you have already did, so I gave an instruction to undo it
immediately. I'm really worried if I'm actually causing damage
rather than helping. Perhaps you may want to read the guide
thoroughly first and ask if you don't understand something?

In the mean time, please follow the instructions that is kindly
provided by Char Jackson.