unknown account


  1. Posts : 327
    Windows 7 Professional X64 Service Pack 1
       #1

    unknown account


    Started looking at some file properties, mainly excel, and noticed under the security tab, Group or users names, there is an unknown account showing up that starts with "s-1-5-21 48xxxxxxx - xxxxxxxxxx-...." I did not fill out all the numbers in case it means something?? Have any idea what this might mean. Hope it is normal. Looks like the "guy" has a red "?" on his back.
    Attached Thumbnails Attached Thumbnails unknown account-uk.jpg  
      My Computer


  2. Posts : 881
    Windows 7 Ultimate x64
       #2

    Its the SAM. (I believe that's what its called I'm a little out of it ATM).
    Its you see it like that because the name associated with it was probably removed from the computer.
      My Computer


  3. Posts : 2,470
    Windows 7 Home Premium
       #3

    @Parman,

    Had to think about it myself, and you probably mean SID = User's Security Identifier

    @meebers,

    To find out what SID belongs to a User name:

    Open a Command Prompt by pressing the Windows key and the R key at the same time.
    In the Run prompt, type: cmd

    Now, right-click the following command inside the quote box, and select Copy:
    wmic useraccount get name,sid
    Right-click by the blinking cursor of the Command Prompt, and select: Paste
    Press: Enter

    A list appears with each User account in Windows, listed by User name and followed by its SID.


    ~~~~
    To explain a little further...what is showing looks like red-circled 'x', which, like Parman said, the name associated with it was probably removed from the computer. The deleted account was granted access to the object you are checking.

    When the account is deleted the system does not remove the access control list entry.
    The red-circled 'x' appears because the system can no longer resolve the SID to an account name, since the account no longer exists.
      My Computer


  4. Posts : 24,479
    Windows 7 Ultimate X64 SP1
       #4

    Read this for some insight. What is this (Account Unknown) SID ?
      My Computer


  5. Posts : 881
    Windows 7 Ultimate x64
       #5

    I knew that would be wrong. thanks guys.
      My Computer


  6. Posts : 2,470
    Windows 7 Home Premium
       #6

    @Parman

    You have the explanation right!
      My Computer


  7. Posts : 327
    Windows 7 Professional X64 Service Pack 1
    Thread Starter
       #7

    Wow, that makes me feel better...I think. Checked mine, the Unknown was 1004 and as you can see in the attachment, 0, 7 and 9 are currently in use. That means that I did something with 1001, 1002, 1003, 1005, 1006 and 1008 previously, heavens knows what. (they sequence up by 1 from 1000)? I am going to keep reading the articles a little more before I attempt to remove the unknown. Tx...
    Attached Thumbnails Attached Thumbnails unknown account-sid1.jpg  
      My Computer


  8. Posts : 2,470
    Windows 7 Home Premium
       #8

    meebers,

    Those last 4 numbers, are called a Relative ID (RID):
    Security Identifier - Wikipedia, the free encyclopedia

    RID:
    Relative ID - Wikipedia, the free encyclopedia

    ...and on, and on...
      My Computer


 

  Related Discussions
Our Sites
Site Links
About Us
Windows 7 Forums is an independent web site and has not been authorized, sponsored, or otherwise approved by Microsoft Corporation. "Windows 7" and related materials are trademarks of Microsoft Corp.

© Designer Media Ltd
All times are GMT -5. The time now is 12:23.
Find Us