Obsolete SIDs

[alfa2008]

After I installed a new domain and Exchange 2007 in it, for some reasons I had to uninstall Exchange 2007, and install it back. Old Exchange 2007 left 2 obsolete SIDs behind S-...-1111, and S-....-1113. These 2 SIDs are everywhere they have to be as Exchange SID Accounts (Groups) in Security Tab (example DNS, AD Site&Services..). I managed to remove most of them using ADSIEDIT, but I couldn't remove these 2 SIDs that are shown with admin acounts (Domain Admin, Enterprise Admin...), and few ordinary users in one of OU. Whenever I remove from this groups, after sometime they're back.

Any idea how can I remove these SIDs Accounts/Groups. I'm sure what they do represent, so there is not any danger of deleting them. I don't have any Domain Trust

 

[PScottC]

Modify the permissions on the AdminSDHolder object in the "System" container in AD Users and Computers. Within 1 hour of modifying this object, all of the admin accounts will have their ACLs synchronized.


PSC

Governments and corporations need people like you and me. We are samurai. The keyboard cowboys. And all those other people out there who have no idea what's going on are the cattle. Mooo! --Mr. The Plague, from the movie "Hackers

 

[alfa2008]

That's what I needed.
I was looking around in internet, and never found a solution.

Thanks a million.