Unknown SID - How can I find out more info about when it was created etc..


having implemented 2008dc's in 2003 forest, have noticed unknown sid. i'm trying find out more sid
does know how can find out when account created/deleted ?
s-1-5-21-xxxxx....

can use adsiedit - know query lookup sid's ?

you can locate object running (adfind available joeware.net):
adfind -gc -f "(objectsid=s-1-5-21-xxxxx....)"
and use
repadmin /showmeta distinguished_name
to display metadata - including creation date , originating dc

hth
marcin


Windows Server  >  Directory Services



Comments

Popular posts from this blog

CRL Revocation always failed

Failed to query the results of bpa xpath

0x300000d errors in Microsoft Remote Desktop client