geekseeker
07-10-2005, 03:15 AM
I have a similar issue - see posting "Mystery Administrator." I have learned
a little but not enough to solve my problem or yours. What I have learned is
that your mystery administrator - the one with the long string of letters and
numbers - is probably related to a feature called "Protected Storage System
Provider" This feature is used to store certain kinds of privileged
information such as passwords entered into web browser form fields or used to
connect to an Internet service provider. I have no idea how to decipher what
causes this to show up as an administrator or what the consequences of
attempting to delete it. Hope some one does :(
"Alan" wrote:
> Gordon wrote:
> > Alan wrote:
> > || Gordon wrote:
> > ||| Alan wrote:
> > |||||
> > ||||| Would you know of any reason why MBSA (Microsoft Baseline
> > ||||| Security Analyzer) would be reporting more than two administrator
> > ||||| accounts? I can only find two accounts in safe mode.
> > |||
> > ||| I can't. What does it say the accounts are? (Mine only lists two -
> > ||| administrator and my own account)
> > |||
> > || Sorry for the delay in responding but I couldn't get access to
> > || the machine.
> > ||
> > || MBSA reports that there are 3 administrators called
> > || Administrator, the User and
> > || S-1-5-21-2163411867-891307005-2424629274-1003.
> > || MBSA advises one to review the list of members in local
> > || administrators & the domain admin groups to correct this.
> > || Suffice, to say, that is Greek to me.
> > ||
> > || MBSA is the only place that one can find 3 administrators.
> > ||
> > || Any ideas?
> >
> > Got it!
> > Have a look here:
> > http://makeashorterlink.com/?G4D2214FA
> >
> > (Full link:
> > http://groups.google.co.uk/groups?q=Strange+Administrator+account++group:microsoft.public.windowsxp.*&start=260&hl=en&lr=&selm=%23Xs2mb9uBHA.1608%40tkmsftngp04&rnum=261)
> >
> Getsid.exe is a Win XP Professional exec. Thanks anyhow. I'll
> post a separate query.
>
a little but not enough to solve my problem or yours. What I have learned is
that your mystery administrator - the one with the long string of letters and
numbers - is probably related to a feature called "Protected Storage System
Provider" This feature is used to store certain kinds of privileged
information such as passwords entered into web browser form fields or used to
connect to an Internet service provider. I have no idea how to decipher what
causes this to show up as an administrator or what the consequences of
attempting to delete it. Hope some one does :(
"Alan" wrote:
> Gordon wrote:
> > Alan wrote:
> > || Gordon wrote:
> > ||| Alan wrote:
> > |||||
> > ||||| Would you know of any reason why MBSA (Microsoft Baseline
> > ||||| Security Analyzer) would be reporting more than two administrator
> > ||||| accounts? I can only find two accounts in safe mode.
> > |||
> > ||| I can't. What does it say the accounts are? (Mine only lists two -
> > ||| administrator and my own account)
> > |||
> > || Sorry for the delay in responding but I couldn't get access to
> > || the machine.
> > ||
> > || MBSA reports that there are 3 administrators called
> > || Administrator, the User and
> > || S-1-5-21-2163411867-891307005-2424629274-1003.
> > || MBSA advises one to review the list of members in local
> > || administrators & the domain admin groups to correct this.
> > || Suffice, to say, that is Greek to me.
> > ||
> > || MBSA is the only place that one can find 3 administrators.
> > ||
> > || Any ideas?
> >
> > Got it!
> > Have a look here:
> > http://makeashorterlink.com/?G4D2214FA
> >
> > (Full link:
> > http://groups.google.co.uk/groups?q=Strange+Administrator+account++group:microsoft.public.windowsxp.*&start=260&hl=en&lr=&selm=%23Xs2mb9uBHA.1608%40tkmsftngp04&rnum=261)
> >
> Getsid.exe is a Win XP Professional exec. Thanks anyhow. I'll
> post a separate query.
>