Wierd Account in Windows XP/2k/2003

[daft1337]

Hi,

When navigating within the windows reistry, in three hives: HKLM,HKCU, HK_Users permissions, there is this account called: "RESTRICTED". It exists there by default, like even after a clean install, so assume it is part of the OS? This account has read permission to all three hives and is present on XP, both home & pro, 2k, 2003, and i dunno about Vista.

You cannot remove this account, i have tried, and if you reboot, it shows up. I find this to be a very wierd quality, considering one could remove the SYSTEM account (although that won't be wise and probably mess up your machine).

But could anyone tell me what this account is?

I have searched MSDN and google many times and have come up with no results.

 

[linney]

Description of Group Policy Restricted Groups

http://support.microsoft.com/?kbid=279301

XP's "Restricted" Security Group

http://www.windowsbbs.com/showthread.php?s=&threadid=15658

Updates to Restricted Groups ("Member of") behavior of user-defined local groups

http://support.microsoft.com/kb/810076

http://www.google.com/search?q=permissions+for+restricted+xp+registry&rls=com.microsoft

I don't know whether any of the above help you or not. I can tell you the same Group "Restricted" is alive and well in Vista.