Hku S 1 5 21 Malware

• Remove From My Forums

what is this or who is this Southward-i-v-21-1960408961-1604221776-682003330-1003

• Question

• his is in my user grouping what is it

Answers

• How-do-you-do,

  Information technology is the SID of an orphaned object in Active Directory. It tin can be a User Object or Grouping Object that near probable been deleted.

  Have a read about SID and GUID.
  http://technet.microsoft.com/en-united states/library/cc961625.aspx

  Well-Known SID
  http://technet.microsoft.com/en-usa/library/cc962001

  ---

  Remember to Vote as helpful for others and accept the the proposed Answer if information technology is relevant to build KB in this Forum. [MCITP] | [MCITP:EA] | [MCITP:VA] | [MCITP:EMA] | [MCITP:SPA] | [MCSE] | [MCSE:Thou+] | [MCSA] | [MCSA:M+] | [ITILv3] | [CCNA] | [IPSWITCH:WhatsUpGold]

  • Proposed equally answer by Friday, July 27, 2012 v:45 AM
  • Marked as answer by Miya Yao Thursday, August two, 2012 8:50 AM

• what you are seeing is calleda Security Identifier (commonly abbreviated SID) idue south a unique, immutable identifier of a user, user group, or other security chief. A security principal has a single SID for life, and all backdrop of the master, including its name, are associated with the SID. This design allows a principal to be renamed (for example, from "John" to "Jane", without affecting the security attributes of objects that refer to the primary.

  Note: You should actually see the proper noun of the user or group but in your case you are actually seeing the SID which is as well called equally orphaned SID Reasons for orphaned SID include (at least): deleted object, lost trust or domain, reckoner
  has left
  domain, and cannot observe a DC for owning domain (although sometimes
  the names are cached from trusted domains)

  ---

  http://www.arabitpro.com

  
  

  • Edited by Syed Khairuddin Saturday, July 28, 2012 6:26 PM
  • Marked as respond by Miya Yao Thursday, Baronial 2, 2012 8:51 AM

• Also,

  Y'all tin employSidToName - command line tool to resolve SIDs to friendly display names.
  

  http://www.joeware.cyberspace/freetools/tools/sidtoname/index.htm

  OR

  PsGetSid v1.44 By Mark Russinovich

  PsGetsid allows y'all to interpret SIDs to their display proper name and vice versa. It works on builtin accounts, domain accounts, and local accounts.

  Download PsTools

  ---

  I do not represent the organisation I work for, all the opinions expressed here are my own.

  This posting is provided "Equally IS" with no warranties or guarantees and confers no rights.

  - .... .- -. -.- ... --..-- ... .- -. - --- ... ....

  • Marked as answer by Miya Yao Thursday, August 2, 2012 8:50 AM

• Howdy,

  This is Security Identifier of a user or group in active directory. The user/group might take deleted/removed from the active active directory.

  http://msdn.microsoft.com/en-united states/library/windows/desktop/aa379571(v=vs.85).aspx

  ---

  Regards,
  Rafic

  If yous found this post helpful, please give information technology a "Helpful" vote.
  If information technology answered your question, retrieve to marking it as an "Reply".
  This posting is provided "Equally IS" with no warranties and confers no rights! Always exam Whatever suggestion in a test surroundings before implementing!

  • Marked as respond past Miya Yao Thursday, August 2, 2012 8:51 AM

Source: https://social.technet.microsoft.com/forums/windowsserver/en-US/97986a1a-95c4-4474-9874-db1c57d5fdff/what-is-this-or-who-is-this-s1521196040896116042217766820033301003

Posted by: thompsoncleggen.blogspot.com

Share this post