Local security policy Settings

From: Ted Simmons (tedsimmons@qwest.net)
Date: 02/06/02 

Date: Wed, 6 Feb 2002 00:12:24 -0600 (CST)
From: Ted Simmons <tedsimmons@qwest.net>
To: focus-ms@securityfocus.com

Hi All I need some help/advice.

I was wondering if anyone knew what this was:
Under the local security Policy settings I was seeting up a user and I found these
entries - like they where users:

*S-1-5-21-1275210071-436374069-1708537768-1011
and
*S-1-5-21-1275210071-436374069-1708537768-1007
and
*S-1-5-21-1275210071-436374069-1708537768-1002
and
*S-1-5-21-1275210071-436374069-1708537768-1001
and
*S-1-5-21-1275210071-436374069-1708537768-1006
and
*S-1-5-21-1275210071-436374069-1708537768-1010

listed in with the users - but not on the local users of the system....
I turned off their permissions - and everything is still working as far as I can tell.
I found them under the following policies:
--access this computer from a network
--logon as batch job
--log on locally

--- is this some new fix to microsoft's stuff??? I have not seen it on any of my other
Windows 2000 machines - could it be a trojan?

please help

--------> Ted

============================================================
Ted Simmons
(303)995-9858 Cell
(303)914-8556 Home
ted@intradenver.net
=============================================================

 

Relevant Pages

  • RE: Local security policy Settings
    ... I've seen those sorts of entries when I have attached a hard drive sourced ... Under the local security Policy settings I was seeting up a user and I found ... I turned off their permissions - and everything is still working as far as I ...
    (Focus-Microsoft)
  • Re: Debugger not working in Vs.net 2003
    ... ASPNET user account) is not assigned the "Impersonate a client after ... after authentication" user right in the Local Security Policy settings. ...
    (microsoft.public.vsnet.debugging)
  • Re: Running a script on shutdown
    ... The Local Security Policy does not contain the mentioned ... The entries are in the Group Policy. ... (Startup/Shutdown) ... >> batch file at shutdown? ...
    (microsoft.public.win2000.general)
  • Re: Accessing Local Security Policy Programatically
    ... example the User Rights. ... I am NOT finding a way to access Local Security Policy settings ... The Local Security Policy setting which I'm trying to access is: ...
    (microsoft.public.windows.server.security)
  • RE: Local security policy Settings
    ... this happens when a trust have disappeared, is corrupted or when group or user have been deleted in an another container with which the box have an implicit trust. ... Under the local security Policy settings I was seeting up a user and I found these ...
    (Focus-Microsoft)
Loading