Forum Home
Press F1
 
Thread ID: 140601 2015-11-10 20:09:00 Win 10 Ghost account WayneMiddy (14028) Press F1
Post ID Timestamp Content User
1411171 2015-11-10 20:09:00 Have a Win 10 machine that creates it own local account named dhinnsjrm even after i delete it in user account manager it reappears at the next reboot.
How do i remove it ?
TIA
WayneMiddy (14028)
1411172 2015-11-11 04:42:00 Is W10 Home or Pro version ? The Home doesn't have some of the in-depth settings that Pro has, so any instructions will differ. wainuitech (129)
1411173 2015-11-11 06:03:00 Win 10 Pro 64 bit WayneMiddy (14028)
1411174 2015-11-11 07:53:00 Sweet, have a look and see if this makes any difference. Shouldn't cause any start problems unless somehow its tied its self to the main account.
Might pay to make a restore point first.

Two ways to open --
Click the Start Button, hold down the shift key, and Right click "File Explorer" - click Manage.
6810

or Right click This PC ( on desktop) Manage:

May take a few seconds to open, select Local Users and Groups/ user folder. ( this option is not available in the home edition)

Look to see if the "Ghost" account is there, if it is delete it.

Also if it is there see what its rights are - Eg: Right click the name/Properties/Member Of Tab

Reboot see if it returns.
wainuitech (129)
1411175 2015-11-11 08:11:00 No not there all i have is
Administrator
Default Account
Guest
HomeGroupUser$
OEM
Thanks for your help wainuitech
WayneMiddy (14028)
1411176 2015-11-11 08:19:00 Just an update, the ghost account is back under Members tag just shows Users
I have deleted the account which i done before and it keeps showing up after a number of reboots.
WayneMiddy (14028)
1411177 2015-11-11 08:27:00 Under the Computer Management screen it has the name dhinnsjrm with no description under properties User cannot change the password is ticked as well Password never expires. I have tried ticking the box Account is disabled but that doesn't make any difference
Cheers Wayne
WayneMiddy (14028)
1411178 2015-11-11 09:23:00 Sounds a little like a random name (dhinnsjrm)

Couple of history questions.

With the User OEM ?

Is this a name brand PC, eg HP, Dell

or one that has been built by someone

( the User OEM) Thoughts are a bit like one that someone had created a image / Sysprepped and dropped on a new build.

Has this account suddenly appeared, and if so what has been installed, updated, removed etc then it appeared.
wainuitech (129)
1411179 2015-11-11 09:36:00 The OEM has the owners name in the description column this is a PB Tech build and came with Win 7 pro, owner upgraded to 10 since then the random account has appeared. WayneMiddy (14028)
1411180 2015-11-11 19:49:00 :thumbs: Good info

PBTech will have used a sysprepped Image to load Windows 7, Hence more than likely the name OEM, this "May or May not" have also been the cause.

Since it has only appeared after a upgrade to W10 this "may" have been whats happened as W10 needs access to everything OR it could also be Malware, an infection of some kind.

OK this is a complete guess, so could be totally wrong. When Windows 10 installed, there may have been some sort of security settings in sysprepped W7 that it didn't like, so it creates a new random User, and every time its removed it will put it back again.

That Thought comes from doing some looking and found a similar post on another forum, have a read, sounds similar and the cause:
mystery-user-account-created-boot.html (www.sevenforums.com)

Have a look at something please ( BUT DONT delete any keys, I dont know if this will cause all sorts of trouble so I would have to test it first on a PC that would matter if it screwed it - Image backups are good to have :) )

Open regedit - Navigate to HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\ProfileList

In the profile list you'll see all the profiles on the computer - See if the user profile you want to remove is there- select a profile and the name will be on the right - but dont delete it ( yet)
wainuitech (129)
1 2