asked on

Account unknown in permission at new folder

I have partition D:, there is folder named Pupils, which is shared and there are set permissions for read for all users and full control for administrator. This folder has 9 subfolders - 1.class, 2.class ...
For subfolders are set same permissions as for parent folder.

Now, if I (as administrator) create folder under 1.class and then have look to security tab, I see that Full Control is for Administrators and SYSTEM. There is also user named Account Unknown, which has different SID for each created folder. SID starts with S-1-5-5-0
Owner of this folder is Administrators
Permissions are not inherited from parent folders.

How can I delete unknown user for creating new folders?

ChandarS

I somewhat doubt that your replication is still working. Could it be that the ADUC console on the other server is actually connecting not to itself, but to the server on which you created the account?
Anyway, what you're experiencing here is a USN rollback.
You can not use ghosting of any kind to backup/restore a DC if there is more than one DC in the domain! DCs have to be backed using an AD aware backup software!
You'll have to demote the ghosted DC (in all likelihood forcefully), seize the roles to the second server if necessary, clean out the metadata in the AD, and then repromote the ghosted machine again.
Check here for details:
How to detect and recover from a USN rollback in Windows 2000 Server
http://support.microsoft.com/?kbid=885875

pospichalales

ASKER

I have only one domain with one server. Unknown user appears here only when I create folder from server's windows explorer. If I create it from my computer using VPN connection, user is not here.

ASKER CERTIFIED SOLUTION

dhruvarajp

membership

This solution is only available to members.

To access this solution, you must be a member of Experts Exchange.

Start Free Trial