Unknown SID - How can I find out more info about when it was created etc..
having implemented 2008dc's in 2003 forest, have noticed unknown sid. i'm trying find out more sid
does know how can find out when account created/deleted ?
s-1-5-21-xxxxx....
can use adsiedit - know query lookup sid's ?
you can locate object running (adfind available joeware.net):
adfind -gc -f "(objectsid=s-1-5-21-xxxxx....)"
and use
repadmin /showmeta distinguished_name
to display metadata - including creation date , originating dc
hth
marcin
adfind -gc -f "(objectsid=s-1-5-21-xxxxx....)"
and use
repadmin /showmeta distinguished_name
to display metadata - including creation date , originating dc
hth
marcin
Windows Server > Directory Services
Comments
Post a Comment