Werid USER???

[littlecramp]

Browse through the local security settings and happen to saw this.

From local polices -\ User Rights Assignment,

Under policy column.
Access this computer from this network,

Under local Setting
MISC, Administrators, Backup Operators, Power Users,
Users, Everyone,
*S-1-5-21-842925246-1801674531-72
5345543-1000


What the crap is this user?
->>> *S-1-5-21-842925246-1801674531-72
5345543-1000

[cszeto]

Could you maybe have a backup software package installed on this particular machine or something else that may be automated/scheduled?

[chopper]

Goto regedit.

Take a look at the HKEY_USERS

Under there you should find an exact match for the *S-121231-12312-31-2 number that you found. I always wipe that user out b/c it's in the log on as batch job area. But, surf your registry if you want to know exactly WTF that user is..