Solved Deleted user still able to login (Windows 8/Server 2012)

BanicaTom

New Member
Messages
2
Edit: I just logged in with a deleted user with the desktop computer disconnected from the server. Then I reconnected to the server and now! the deleted user is being rejected. Perhaps I had some sort of timing/latency issue with the server that has now resolved itself? I won't get another shot at this until next week, hopefully then I will be able to confirm success.

Regardless, if anyone has any insights into this issue, I would love to hear them. I considered myself an expert/power user in Thru Windows 95, but never came close to being a "network guy" or system admin. I have been forced into being the "network admin" of a small school the DR because no one here knows anything about Windows/computers.


I am trying to delete a few users from several Windows 8 desktops in a Windows Server 2012 network.

  • I have deleted the users on the Windows Server 2012 machine (in Active Directory)
  • I have deleted the users Control Panel in Windows 8 on the local machines (where they appear as users - on some of the computers, the users did not appear as users)
  • I have manually deleted the user directories (c:\users\...) which did all exist
  • I have traversed the registry deleting every occurrence of the user as well as every occurrence of the user sid (with the exception of under ...uninstalled apps... which threw the "you do not have access" error)

Yet after various reboots and whether I attempt with the desktop connected or not connected to the server, the user. still. logs. in. without any problem (although I do get the "Preparing Windows" on login.... however:
  • unlike "normal "Preparing Windows", it is very fast and it does not give the "move the mouse to the corner routine
  • it does not result in the default Windows Home Screen that I get when I truly do create a new account).
  • it does not recreate c:\users\account folder

One last thing that it just occurred to me to try is to remove the desktop from the network and see if that makes a different. But beyond that, I am stumped. Help!
 
Last edited:

My Computer

System One

  • OS
    Windows 8 64bit
Welcome to the forum. I used to work for Barclays bank and we identified this problem long ago in NT4 The user is logging in with a cached profile. You can stop this the problem being if the DC isnt reachable then no one can work with the cached they can continue to work until the dc comes back.

For a deleted user you should be able to delete their local cached profile to stop login
 

My Computer

System One

  • OS
    win 8 pro
Thanks Samuria! I was suspecting something along those lines (cached user profile) especially since the users typically use the desktops withou the server being powered up. But I didn't have quite the knowledge to figure out where it was being stored. And I was highly disappointed that deleting the user on the server and then rebooting/reconnecting to the server did not solve things a few days ago.

I was able to attempt a login on a 2nd computer before leaving the lab earlier and it too now rejects the deleted user. So seemingly my issue is resolved.

I see that your post mentions NT4. But your post got me going! Once I knew the term "cache profile", Google gave me these tidbits that may be helpful for someone else with the same issue:

  • c:\windows\csc for some older versions of Windows.
  • Windows 7/Server 2008 uses the registry: HKEY_LOCAL_MACHINE\SECURITY\CACHE
  • I am guessing it will be the same for my Windows 8/Server 2012 situation (though I cannot confirm that until next week, though I am positive that I had deleted the users in this very key earlier today without solving the problem!)

This thread was most helpful to me:
Delete Profiles - Logging on with cached credentials?
 

My Computer

System One

  • OS
    Windows 8 64bit
Back
Top