Re: Unknown SID
From: Arek Iskra [MVP] (arek_nospam_at_arekiskra.com)
Date: 08/03/04
- Next message: sancho: "hardening xp pro"
- Previous message: MOTE: "Re: Quick Question!"
- In reply to: Ben: "Unknown SID"
- Next in thread: Steven L Umbach: "Re: Unknown SID"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
Date: Tue, 3 Aug 2004 21:44:51 +0800
Probably you are right - these are leftovers after deleted user accounts.
Tools like SIDwalker or AccessEnum should help you to investigate:
SIDwalker:
http://www.microsoft.com/resources/documentation/WindowsServ/2003/all/techref/en-us/sidwalker.asp
AccessEnum:
http://www.sysinternals.com/ntw2k/source/accessenum.shtml
-- Arek Iskra Microsoft MVP for Windows Server - Management "Ben" <bjblackmore@nospam.hotmail.com> wrote in message news:ezUxWjUeEHA.712@TK2MSFTNGP09.phx.gbl... > Hi, > > I've been looking through our disk quota on the server, and found that there > are 2 users with over 1gb of data. However the quota entries are just SIDs, > it maybe that someone has deleted the users, before sorting their files out. > Is there anyway to determine which user it used to be, or what files belong > to that sid? > > -- > Ben > > IT Professional, MCP 70-210 > "On my way to becoming fully certifiable!" > >
- Next message: sancho: "hardening xp pro"
- Previous message: MOTE: "Re: Quick Question!"
- In reply to: Ben: "Unknown SID"
- Next in thread: Steven L Umbach: "Re: Unknown SID"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]