• Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 1604
  • Last Modified:

SID on Exchange Mailbox

Is there any way to track when someone may have created an AD account then added it to an Exchange mailbox via Manage Full Access Permission to gain access to the mailbox then delete it?

Also, is there any way to find out what date this may have taken place?
0
iNetSystem
Asked:
iNetSystem
  • 3
  • 2
1 Solution
 
Manpreet SIngh KhatraSolutions Architect, Project LeadCommented:
Maybe an eventID ..... not anything else.

- Rancy
0
 
iNetSystemAuthor Commented:
There's no way to convert a SID to the SAM?
0
 
Manpreet SIngh KhatraSolutions Architect, Project LeadCommented:
There's no way to convert a SID to the SAM? -- Sorry didnt get you :(
0
Concerto's Cloud Advisory Services

Want to avoid the missteps to gaining all the benefits of the cloud? Learn more about the different assessment options from our Cloud Advisory team.

 
iNetSystemAuthor Commented:
I am trying to investigate who or what previous account would have had access to this users mailbox.  It looks like the SID has been retained on the mailbox because the account was deleted in AD.

I was wondering if there is any tool that can tell me what deleted account was associated with the remaining SID.
0
 
Manpreet SIngh KhatraSolutions Architect, Project LeadCommented:
0
 
suriyaehnopCommented:
Hi,

You may user powershell to do converting:

#This powershell must run in windows Powershell, do not run in Windows Powershell ISE
$objSID = New-Object System.Security.Pricipal.SecurityIdentifier `
("S-1-5-21-1951168010-271322553-1478062314-69071")
$objUser = $objSID.Translate( [System.Security.Principal.NTAccount])
$objUser.Value

Open in new window

0

Featured Post

Get your Disaster Recovery as a Service basics

Disaster Recovery as a Service is one go-to solution that revolutionizes DR planning. Implementing DRaaS could be an efficient process, easily accessible to non-DR experts. Learn about monitoring, testing, executing failovers and failbacks to ensure a "healthy" DR environment.

  • 3
  • 2
Tackle projects and never again get stuck behind a technical roadblock.
Join Now