Re: Why do I have multiple HKEY_USERS but only one account?

Isn't S-1-5-18 the normally-hidden Administrator account, the one you
can only access in safe mode?

No.

SID: S-1-5-18
Name: Local System
Description: A service account that is used by the operating system.

SID: S-1-5-domain-500
Name: Administrator
Description: A user account for the system administrator. By default, it is
the only user account that is given full control over the system.
from...
Well-known security identifiers in Windows operating systems
http://support.microsoft.com/kb/243330

On my machine..
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\
CurrentVersion\ProfileList\S-1-5-21-1708537768-1580436667-1202660629-500
ProfileImagePath
%SystemDrive%\Documents and Settings\Administrator

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\
CurrentVersion\ProfileList\S-1-5-18
ProfileImagePath
%systemroot%\system32\config\systemprofile

--
Hope this helps. Let us know.

Wes
MS-MVP Windows Shell/User

In news:%23qriTEztGHA.1508@xxxxxxxxxxxxxxxxxxxx,
mhc <mhc@xxxxxxxxxxxx> hunted and pecked:
My system has been running for three years without the LocalService and
NetworkService accounts. They are NOT NEEDED on single-user systems, and
in fact they negatively impact performance on such systems!

Isn't S-1-5-18 the normally-hidden Administrator account, the one you
can only access in safe mode?

mhc

Lawrence J. Gardner wrote:
Yes, please remove those accounts and destroy your system. Here is the
break-down:

.DEFAULT - the default user account used when creating a new user account

S-1-5-18 - the backup systemprofile account, also used when creating a
new user account file/folder structure (e.g.,
%systemroot%\system32\config\systemprofile)

S-1-5-19 - LocalService account used in Services when creating processes
at startup (e.g., %SystemDrive%\Documents and Settings\LocalService)
S-1-5-19-Classes - Classes associated with LocalService account

S-1-5-20 - NetworkService account used in Services when creating network
processes (e.g., %SystemDrive%\Documents and Settings\NetworkService)
S-1-5-20-Classes - Classes associated with NetworkService account

S-1-5-21-1004336348-117609710-839522115-1004 - currently loaded User
account - linked to HKEY_CURRENT_USER - more than likely you.
S-1-5-21-1004336348-117609710-839522115-1004-Classes - Classes associated
with above account.

Check out the following key for explanation of accounts:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows
NT\CurrentVersion\ProfileList

.

Relevant Pages

  • Re: Administrator Name and Password
    ... Although you did not set up a user account, you are in fact using one every ... boot the computer into Safe Mode. ... you will see the normally hidden Administrator account. ... Ctrl-Alt-Del twice to get the classic Windows logon box. ...
    (microsoft.public.windowsxp.general)
  • Re: CANT LOG BACK INTO WINDOWS
    ... above but select Safe Mode. ... The user account called Administrator should be ... > tried changing my keyboard and mouse,hoping it might be the keyboard that ...
    (microsoft.public.windowsxp.accessibility)
  • Re: I got a virus help
    ... Most Windows users will tell you that this is akin to the "Administrator" account on your PC, but that is not exactly the case. ... Microsoft has attempted to emulate this technique many times, but always fails miserably in its implementation. ... But wait, you say, doesn't Mac OS have that same problem? ... So if you happen to exploit one of them, you can only do what that small, very restricted user account can do... ...
    (rec.music.makers.guitar.acoustic)
  • Re: How do I
    ... There is no reason in Vista to ever run as administrator on a regular basis, ... You absolutely do not want to have only one user account. ... operating system structure. ...
    (microsoft.public.windows.vista.general)
  • Re: How do I
    ... There is no reason in Vista to ever run as administrator on a regular basis, ... You absolutely do not want to have only one user account. ... operating system structure. ...
    (microsoft.public.windows.vista.general)