Avatar of mikeydk
mikeydkFlag for Denmark asked on

Folder security issue - sid?

Hey

I have 2 shares on the same server (homedirs)

D:\HomeDIR$\TeacherUser1
D:\HomeDIRu$\StudentUser1

Today all the ACL on the folder under the share D:\HomeDIR$ has change to SID insted of the username.

Under the share D:\HomeDIRu$ all the ACL is normal - showing the username

Please see the attached picture. ADSI edit showing SID and the SID on the folder - whats wrong?

Mike
SID.JPG
Active DirectoryWindows Server 2008

Avatar of undefined
Last Comment
Sandesh Dubey

8/22/2022 - Mon
Will Szymkowski

This can happen usually 2 reasons i can think of.

1st - Someone has delete this AD account and the Share has this user added directly to the share without using a group. When you delete a user from AD you will get SID objects appearing under shares that this user once had access to.

2nd - If this particular server does not have the "net logon" server running, it will create SID's on the file shares as the net logon service is used to communicate with AD.
ASKER
mikeydk

When opening the user object it sats created 2010, so the Users have not been deleted.

The netlogon sevice is running

If I add the user again to the folder the user is added without any problems, but the sid stil remains on the folder.

please compair the User sid with the folder sid.. See attached picture.
piattnd

All of life is about relationships, and EE has made a viirtual community a real community. It lifts everyone's boat
William Peck
ASKER CERTIFIED SOLUTION
Sandesh Dubey

Log in or sign up to see answer
Become an EE member today7-DAY FREE TRIAL
Members can start a 7-Day Free trial then enjoy unlimited access to the platform
Sign up - Free for 7 days
or
Learn why we charge membership fees
We get it - no one likes a content blocker. Take one extra minute and find out why we block content.
See how we're fighting big data
Not exactly the question you had in mind?
Sign up for an EE membership and get your own personalized solution. With an EE membership, you can ask unlimited troubleshooting, research, or opinion questions.
ask a question