Results 1 to 6 of 6

Thread: Problem loading/unloading domain account registry hives

Threaded View

Previous Post Previous Post   Next Post Next Post
  1. #1
    Member
    Join Date
    Oct 2007
    Posts
    55

    Default Problem loading/unloading domain account registry hives

    Hi PepiMK,

    I have discovered another problem with hive loading/unloading. In this case the accounts on the machine are domain accounts. The users login to the domain controller using thier account on the server. This means the profile folder(s) under Documents and Settings on the workstation are in the form Domainname.Username.

    I login to a workstation using the Domain Administrator account. When I run Spybot the other user accounts are loaded into HKEY_USERS in the form of PE_C_Domainname.Username. I am not sure why the SID is not used for the other accounts? If I examine the following registry key, the other user accounts have a SID so why isn't Spybot using it?

    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\ProfileList]

    To make matters worse, the PE_C_Domainname.Username hives are not unloading when terminating Spybot. This further confirms my findings that no PE_C_ hives are getting unloaded in my thread.

    http://forums.spybot.info/showthread.php?t=43902

    This is a real problem because we are right back to user hives being locked by Spybot if the user accounts are domain accounts. If a user logs out and another logs in, then the new user will have a temporary profile created because thier hive is locked.

    Would you please step through the code and find out why none of the PE_C_ hives get unloaded. They used to get unloaded most of the time until the change to using SID's. Now they never do. While your in the code can you determine why Domain user accounts do not get loaded with thier SID? I look forward to your reply and thanks for your support...
    Last edited by MrGreg; 2009-01-23 at 04:52.

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •