Solved

SID appearing not user / group name in security window

Posted on 2004-10-01
2
1,073 Views
Last Modified: 2010-08-05
My domain consists of 3 Windows 2000 domain controllers, 1 NT 4.0 member server acting as an Exchange 5.5 server and 10 other Windows 2000 member servers.  The domain was recently upgraded from an NT 4.0 domain.  Even though I am not running any NT BDC's I am still running in Mixed mode.  Will be making the change soon.  Just wanted to make sure everything is running fine w/ the 2000 domain.

Only minor Issue I am seeing relates to file / folder permissions at the server level.  Once and a while if I look at the properties of a file or folder, and goto the security tab, I may see 1 or 2 SID's (along with Domain users and domain groups)  Are these SIDs that are not being removed when accounts are removed from the domain?  (Employee quits / get fired, his account is removed)  My thought is that the SID is associated with the folder or file, but when it looks to active directory to resolve the sid to an account / group name, it cannot be found.  Am I correct?  Has anyone seen this before.

Thanks
0
Comment
Question by:chadd25
2 Comments
 
LVL 2

Expert Comment

by:dev8
ID: 12203661
0
 
LVL 84

Accepted Solution

by:
oBdA earned 125 total points
ID: 12204378
Those are ACEs from accounts that have been deleted or can otherwise not be resolved to their name (for example an account from a former trusted domain).
Sid2Name won't help you anything, because this does nothing else than what the OS tries.
On another note, when you say "along with Domain users", you've probably set your permissions incorrectly. Unless for home drives, don't assign permissions to user accounts; this will end up in a mess. The way according to MS's gospel is AGLP: *A*ccounts go into *G*lobal groups. Global groups go into *L*ocal groups (on the server that hosts the share). *P*ermissions are assigned to the local groups. On W2k AD running in native mode, you can use domain local groups instead of "real" local groups.
0

Featured Post

Free Tool: Postgres Monitoring System

A PHP and Perl based system to collect and display usage statistics from PostgreSQL databases.

One of a set of tools we are providing to everyone as a way of saying thank you for being a part of the community.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Suggested Solutions

NTFS file system has been developed by Microsoft that is widely used by Windows NT operating system and its advanced versions. It is the mostly used over FAT file system as it provides superior features like reliability, security, storage, efficienc…
This article describes how to reset your Windows 10 password when you've forgotten it.
Established in 1997, Technology Architects has become one of the most reputable technology solutions companies in the country. TA have been providing businesses with cost effective state-of-the-art solutions and unparalleled service that is designed…
Finds all prime numbers in a range requested and places them in a public primes() array. I've demostrated a template size of 30 (2 * 3 * 5) but larger templates can be built such 210  (2 * 3 * 5 * 7) or 2310  (2 * 3 * 5 * 7 * 11). The larger templa…

830 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question