SIDs in Active Directory GPO

view story

http://serverfault.com – I am looking into some weird issues with active directory and group policy. This domain has been upgraded from windows NT and has had a few different administrators over the years. I am looking through the Default Domain group policy and Default Domain Controller group policy. In the security areas, using the log on locally area as an example, it shows SIDes that begin with asterisks and are quite long they look sort of like the following *S-1-5-21-787626... Normally, when I see something like this I would think that the User account was no longer there and this was never cleaned up. Am I wr (HowTos)