incorrect sid displayed on a file share

[maxxr]

I also posted this under xp which if I am wrong I do apologise

Okay, This is the situation. I have a guy that creates software images using Ghost. I am in A win2003 ad running in 2000 mode. All the clients xp pro and servers 2003 in this case latest and greatest sp's. My Image guy creates and image then once he get it to the way he wants it he copied his Domain account profile to the default user profile on the clients machine. No problem you would think. But then I have a user on an imaged machine that shows up as John the image guy connected to the files in this case an xls file. When in fact the person connected to the file is Keith the user who is actually looged on to the machine.
I have also tried to copy the local admin to the default user profile and then I get the local admin is connected to the file share when the user Keith is logged on. I am stumped any help would be greatly appreciated.

Maxxr

 

[porkchopexpress]

Does your image guy run sysprep on the PC's before deploying them?

 

[maxxr]

Forgive my ignorance. but no

 

[porkchopexpress]

It's not always an issue in a domain environment but it can undermine Windows security. The SID is how Windows id's a username, they are supposed to be unique so if two identical SID's are encountered Windows cannot distinguish any difference.

Have a look at this link

http://www.windowsitpro.com/Article/ArticleID/14919/14919.html

 

[maxxr]

Hello again,

This is waht the image guy wrote back after i showed him your respones.

I do run sysprep which strips the workstation’s SID but what we are dealing with are user account SIDS and the fact that when I copy my user profile to the default user profile it gets my SID therefore everyone on the workstation gets my user account SID. As you witnessed the other day it can be a local user or a domain user profile that gets copied both having the same affect, replaced SID on the default user profile.

J

 

[porkchopexpress]

Is he using control panel to copy the profile?

Double-click System.
On the User Profiles tab, click the user profile that you just created, and then click Copy To.
In the Copy To dialog box, under Copy profile to, click Browse, click the \Documents and Settings\Default User folder, and then click OK.

I'm under the impression that doing this rather than copying the folder manually should remove the user SID.

 

[maxxr]

I have seen him do it that way. Thru the control panel.
select the user and then copy to.

 

[kmills]

We use the same process you are describing, except the computer does not join the domain before running sysprep. The computer is set up with a "bogus" account that is then disabled after the profile is copied as the default profile.

 

[porkchopexpress]

Very odd i've not seen this problem before.

I copy my default profile to the Netlogon share on the server that way it is copied over and merged at first logon but i've never had this problem. It might be worth trying this way instead of copying it to the local default user folder.

Look at the bottom of the link below under Configuring a Default Profile.

http://www.microsoft.com/technet/pr...Kit/b41402c2-c982-4bfb-891e-91b47f211e18.mspx