Tek-Tips is the largest IT community on the Internet today!

Members share and learn making Tek-Tips Forums the best source of peer-reviewed technical information on the Internet!

  • Congratulations strongm on being selected by the Tek-Tips community for having the most helpful posts in the forums last week. Way to Go!

SIDs

Status
Not open for further replies.

markhoward

Technical User
Jul 29, 2003
46
GB
Hi all,

I'm documenting our group policy configuration at the moment and have found some accounts in the user rights section which are only displayed as SIDs.

My assumption is that these may be accounts that were specified in teh policy but have since been deleted (although I though AD would be clever enough to make the necessary adjustments), but to make sure I was wondering if anyone knew of a SID identification tool i.e. a command line tool which allows you to query an object when you only have its SID and that will then give you the 'friendly' name if one exists.

I'm sure there must be one on the resource kit or something.

Thanks..Mark..
 
THanks for that - it was really helpful in proving that some of hte accounts do not exist anymore.

But...

I've got three truncated entries that appear on quite a few of the policies and that seem to be generic yet I can't find out what they are -

"S-1-5-32-548" "S-1-5-32-550" "S-1-5-32-549"

Any ideas?

M
 
It's alright....got it!

BUILTIN\ACCOUNT OPERATORS S-1-5-32-548
BUILTIN\SERVER OPERATORS S-1-5-32-549
BUILTIN\PRINT OPERATORS S-1-5-32-550
 
Now...
does anyone know why those three groups appear as a SID in my Group Policy instead of as their user friendly names (All other members appear normally)

Thanking you..M
 
You can get this when they are from another domain which has been disassociated (i.e. an old domain)if you have two domains the transitive trust maybe not working.
 
Status
Not open for further replies.

Part and Inventory Search

Sponsor

Back
Top