View hidden users in the Registry in XP

In XP, there is a difference between the user account in the control panel, the user and group in the Computer Management, and the number of users in the KEY_LOCAL_MACHINESAMSAMDomainsaccountUsersNames in the registry. In the control panel, users and group users in computer management can see some hidden users, but for some accounts added through backdoors or Trojans, in general, you can only view data through the registry.
Open the Registry: Start-> Run-> regedit. msc

By default, we cannot see hidden users in the registry. The following are the steps and precautions for viewing hidden users and re-opening them after they are restored.
1. View hidden users.
By default. Hiding user views is hidden.

You can only view the Hidden directories and files in the SAM folder by giving administrator full control.

Disable the registry. Open the file again to see the hidden file.

The Hidden directory has been displayed in the SAM file.
Why do we need to use this method for viewing? There are 2 methods we are familiar with in XP. These are the user accounts in the control panel and the users in the group in the computer management.

 

From the above two figures, it is not difficult to see that there is another user in the Computer Management window, but not in the control panel. Similarly, in the registry, we can see more hidden users. Such users can only be viewed through the registry.

The arrow in the figure indicates a user account hidden in the registry but in the control panel, and the user and group users in the Computer Management Section are not displayed.
The method for hiding folder permissions is the same as that for adding permissions. However, when you re-display it again next time, you need to do one more step:

The next step is the same as the method for adding permissions for the first time. The preceding steps are used to view hidden users and restore hidden users before opening them again.

Note: Only administrator users are eligible to distribute and revoke permissions.