General discussion

  • Creator
    Topic
  • #2190051

    GUID of the User account

    Locked

    by k4k ·

    In win2k if i check NTFS permissions on certain files & folders . i see a GUID of user account instead of the User account name . i believe these are the deleted accounts. how do i find the account name of the GUID.

    Where do we see this mapping of GUID to user account name.

    Thanks in advance

All Comments

  • Author
    Replies
    • #3070062

      Reply To: GUID of the User account

      by allthegoodnamesweregone ·

      In reply to GUID of the User account

      you are correct in thinking it is the SID a deleted account.

      with that said, i don’t believe it’s possible to know the account associated with the SID easily. i think the only way you would be able to do it is to rebuilt a standalone DC from a backup from when the account was still active and run a tool like psgetsid from sysinternals which will find the account associated with the SID. that is, of course, assuming it is a domain account. if it’s local and you don’t have a backup, good luck.

    • #3069944

      Reply To: GUID of the User account

      by w2ktechman ·

      In reply to GUID of the User account

      These aer probably the deleted accounts. These are actually accounts that are unavailable. Local accounts should not show up here anymore, if the local accounts were deleted or removed. Domain accounts will only show up when connected to the domain, but if the domain accounts are gone, or otherwise unavailable then there is not much to be done here, except to remove them from the list.

Viewing 1 reply thread