Re: Local Security Policy Settings

From: Steven L Umbach (n9rou_at_nscomcast.net)
Date: 12/20/03 

Date: Sat, 20 Dec 2003 00:23:56 GMT

These are the "sids" numeric identifiers that the operating system uses to
keep track of users/groups. If the corresponding name is not displayed, then
either the user/group no longer exists or it is not being resolved for some
reason due to permissions or other problems. If this is a domain computer, I
would run netdiag on it looking for any failed tests that may help explain
why it is happening. The KB link below gives a possibilty as to why this can
happen if a domain computer does not have proper permissions in the Domain
Controller Security Policy. Keep in mind if you delete and then recreate
users or groups using the same exact name, a different sid is always
assigned to the new user/group. --- Steve

http://support.microsoft.com/default.aspx?scid=kb;en-us;262958
http://support.microsoft.com/default.aspx?scid=kb;en-us;321708

"Darlene" <dtrammell@wellborn.com> wrote in message
news:091e01c3c67b$bfe37da0$a001280a@phx.gbl...
> Under my local security policy on my Windows 2000 server.
> there are a check marks on things that I don't recognize.
> example.
> *S-1-5-21-746137067-152049171-725345543-1001
> Ther are several others, What are these?