Active Directoy GPO

Posted by Phillip R. on Server Fault See other posts from Server Fault or by Phillip R.
Published on 2012-08-30T20:55:00Z Indexed on 2012/08/30 21:40 UTC
Read the original article Hit count: 138

I am looking into some weird issues with active directory and group policy. This domain has been upgraded from windows NT and has a few different administrators over the years. I am looking through the Default Domain group policy and Default Domain Controller group policy. In the security areas and I will use the log on locally area as an example, it shows SIDes that begin with asterisks and are quite long they look sort of like the following

*S-1-5-21-787626...

Normally, when I see something like this I would think that the User account was no longer there and this was never cleaned up. Am I wrong in my assumption? Thanks in advance

© Server Fault or respective owner

Related posts about Windows

Related posts about windows-server-2008