Bug 1439775

Summary: [Sysprep] For desktop windows new user 'user' is not set properly
Product: [oVirt] ovirt-engine Reporter: Israel Pinto <ipinto>
Component: BLL.VirtAssignee: Michal Skrivanek <michal.skrivanek>
Status: CLOSED DUPLICATE QA Contact: meital avital <mavital>
Severity: medium Docs Contact:
Priority: unspecified    
Version: 4.1.1.6CC: bugs, ipinto, tjelinek
Target Milestone: ---Flags: ipinto: planning_ack?
ipinto: devel_ack?
ipinto: testing_ack?
Target Release: ---   
Hardware: Unspecified   
OS: Unspecified   
Whiteboard:
Fixed In Version: Doc Type: If docs needed, set a value
Doc Text:
Story Points: ---
Clone Of: Environment:
Last Closed: 2017-04-25 10:10:36 UTC Type: Bug
Regression: --- Mount Type: ---
Documentation: --- CRM:
Verified Versions: Category: ---
oVirt Team: Virt RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: --- Target Upstream Version:
Embargoed:
Attachments:
Description Flags
VM xml for each case
none
engine
none
engine.log_2 none

Description Israel Pinto 2017-04-06 13:55:37 UTC
Created attachment 1269402 [details]
VM xml for each case

Description of problem:
Using sysprep create none server windows(windows 10 64B/ windows 7 64B) 
In both new user name 'user' is created and administrator is disabled.
This user is create as administrator, there are some problem with this user:
1. It don't inherent administrator password and it has no password,
you can login without password.
2. If I update the administrator password: User 'user' gets the new password
3. if I update the Alternate Credentials with user name 'user' the password not set (also for exists user it not update)
4. The option of Alternate Credentials is only in Run Once
 
I am not sure what is the right behavior here.
I enable Administrator user and then seal the VM, I expect to get the password  and override it.

Note:
In server windows like windows 2012 administrator user don't removed

Version-Release number of selected component (if applicable):
4.1.1.7-0.1.el7

How reproducible:
all the time

Comment 1 Israel Pinto 2017-04-06 13:59:05 UTC
Created attachment 1269405 [details]
engine

Comment 2 Israel Pinto 2017-04-06 13:59:33 UTC
Created attachment 1269406 [details]
engine.log_2

Comment 3 Michal Skrivanek 2017-04-07 07:14:29 UTC
(In reply to Israel Pinto from comment #0)
> Created attachment 1269402 [details]
> VM xml for each case
> 
> Description of problem:
> Using sysprep create none server windows(windows 10 64B/ windows 7 64B) 

what do you mean by "none"?

> In both new user name 'user' is created and administrator is disabled.

yes, a "user" user is always created as a local account for desktop editions. I don't recall why, I'm not sure anyone does.

> This user is create as administrator, there are some problem with this user:
> 1. It don't inherent administrator password and it has no password,
> you can login without password.
> 2. If I update the administrator password: User 'user' gets the new password

yes. is that a problem?

> 3. if I update the Alternate Credentials with user name 'user' the password
> not set (also for exists user it not update)
> 4. The option of Alternate Credentials is only in Run Once
> I am not sure what is the right behavior here.
> I enable Administrator user and then seal the VM, I expect to get the
> password  and override it.

alternate credentials are for joining AD, not related to user accounts. It shall be documented better by bug 1439738


> Note:
> In server windows like windows 2012 administrator user don't removed
> 
> Version-Release number of selected component (if applicable):
> 4.1.1.7-0.1.el7
> 
> How reproducible:
> all the time

Comment 4 Israel Pinto 2017-04-13 07:14:50 UTC
(In reply to Michal Skrivanek from comment #3)
> (In reply to Israel Pinto from comment #0)
> > Created attachment 1269402 [details]
> > VM xml for each case
> > 
> > Description of problem:
> > Using sysprep create none server windows(windows 10 64B/ windows 7 64B) 
> 
> what do you mean by "none"?
Windows which is not server windows. 
Windows server like 2012 the administrator user is enabled and all the sysprep
configuration is done on this user.
I windows which is not server like win 10 or Windows 7 we create new user.

> 
> > In both new user name 'user' is created and administrator is disabled.
> 
> yes, a "user" user is always created as a local account for desktop
> editions. I don't recall why, I'm not sure anyone does.
> 
> > This user is create as administrator, there are some problem with this user:
> > 1. It don't inherent administrator password and it has no password,
> > you can login without password.
> > 2. If I update the administrator password: User 'user' gets the new password
> 
> yes. is that a problem?
The problem is it not clear since the admin user is disable although it was active.
The behavior is not clear.
> 
> > 3. if I update the Alternate Credentials with user name 'user' the password
> > not set (also for exists user it not update)
> > 4. The option of Alternate Credentials is only in Run Once
> > I am not sure what is the right behavior here.
> > I enable Administrator user and then seal the VM, I expect to get the
> > password  and override it.
> 
> alternate credentials are for joining AD, not related to user accounts. It
> shall be documented better by bug 1439738
> 
> 
> > Note:
> > In server windows like windows 2012 administrator user don't removed
> > 
> > Version-Release number of selected component (if applicable):
> > 4.1.1.7-0.1.el7
> > 
> > How reproducible:
> > all the time

Comment 5 Michal Skrivanek 2017-04-25 06:11:56 UTC
(In reply to Israel Pinto from comment #4)
> > > In both new user name 'user' is created and administrator is disabled.
> > 
> > yes, a "user" user is always created as a local account for desktop
> > editions. I don't recall why, I'm not sure anyone does.
> > 
> > > This user is create as administrator, there are some problem with this user:
> > > 1. It don't inherent administrator password and it has no password,
> > > you can login without password.
> > > 2. If I update the administrator password: User 'user' gets the new password
> > 
> > yes. is that a problem?
> The problem is it not clear since the admin user is disable although it was
> active.
> The behavior is not clear.

Ok. Anything else other than improving documentation (bug 1439738)?

Comment 6 Israel Pinto 2017-04-25 06:23:59 UTC
No, for now.

Comment 7 Tomas Jelinek 2017-04-25 10:10:36 UTC
(In reply to Israel Pinto from comment #6)
> No, for now.

ok, we already have a bug tracking the need for documentation: 1125853
Marking this as duplicate.

*** This bug has been marked as a duplicate of bug 1125853 ***