Change user SID in windows 2000/2003

Clarifications

Once a user account has been deleted, all permissions and memberships associated with that user account are permanently deleted. Because the security ID (SID) for each account is unique, a new user account with the same name as a previously deleted user account does not automatically assume the permissions and memberships of the previously deleted account. To duplicate a deleted user account, all permissions and memberships must be manually recreated.

http://technet2.microsoft.com/windowsserver/en/library/6235e455-70d7-4c99-8253-73bb79bc61031033.mspx?mfr=true

The other alternative is to recreate the Users Account and copy an existing users profile into the New Account Profile folder.

Here is an example to create a Mandatory Profile. Don't change the extension to .man. Substitute the profile Directory.

To create a mandatory profile. Create a folder on the file server in your profile folder called ProfNT.Man

Create a standard user account on the file server. This is your template. You could call it Seed or Root. Point it to the ProfNT.Man folder for the profile.

Logon to a workstation as the new user and set it up as you want it for your users. When you are happy with what you want log off and then log back on to double check.

Log off and go to the file server.
1. On the server ,Start "regedt32".
2. From the "Window' menu choose "HKEY_USERS".
3. Next, select"Registry" from the menu and then "Load Hive".
4. Browse and select the ntuser.dat from the folder called ProfNT.Man.
5. Enter "auser" as the name for the key.
6. Highlight "auser" in the pane on the left.
7. From the "Security" menu choose"Permissions".
8. Give "Everyone" Full Control and tick "REplace Permissions on Existing Subkeys".
9. Click OK.
10. Once completed, ensure "auser" is highlighted and choose "Unload Hive" from the "REgistry Menu".

Close regedt32.
Navigate to the ProfNT.Man folder and rename ntuser.dat to ntuser.man

Direct your new users to the ProfNT.Man folder for their profiles.

I have tried to keep it as simple as i can. If you do not have a file sever Microsoft have a program to install on clients that will give you more control. Shared Computer Toolkit.