Re: Remove multiple SID's?

From: Joe Richards [MVP] (humorexpress_at_hotmail.com)
Date: 08/24/05


Date: Tue, 23 Aug 2005 20:27:30 -0400

Take a look at subinacl.exe

http://www.microsoft.com/downloads/details.aspx?FamilyId=E8BA3E56-D8FE-4A91-93CF-ED6985E3927B&displaylang=en

--
Joe Richards Microsoft MVP Windows Server Directory Services
www.joeware.net
Joe Davis wrote:
> I have a network that is riddled with Shares that have SID's which point to 
> non-existing accounts on their ACL's. Does anyone have a script that will 
> remove these or does anyone know of a tool that will do it for me?
> 
> I am not particular about how it is done, as long as the solution is secure 
> and doesn't kill AD.


Relevant Pages

  • Re: Laptop Users in AD
    ... When they are on the network and the DCs are responding it will ... >>Joe Richards Microsoft MVP Windows Server Directory Services ...
    (microsoft.public.windows.server.active_directory)
  • Re: Old computer accounts
    ... > Check out oldcmp on the free Windows tools pages of www.joeware.net ... > Joe Richards Microsoft MVP Windows Server Directory Services ... >> to the network in a certain amount of time. ...
    (microsoft.public.windows.server.active_directory)
  • Re: Win 2K3 server: NETWORK account seems to grant everyone access to UNC share
    ... and FPSE apparently won't work without the network account ... >>Joe Richards Microsoft MVP Windows Server Directory Services ...
    (microsoft.public.windows.server.active_directory)
  • Re: Win 2K3 Serv: NETWORK built in account on UNC share grants EVERYONE permissions
    ... Thanks Roger. ... I did get the network part right, didn't know the answer on how to ... Joe Richards Microsoft MVP Windows Server Directory Services ...
    (microsoft.public.windows.server.security)
  • Re: AD Replication errors
    ... to rebuilding dc2. ... AA-DS1 is a DC on the network. ... > Joe Richards Microsoft MVP Windows Server Directory Services ... >> Attempting to force replication via AD replication monitor is still ...
    (microsoft.public.win2000.active_directory)