Tom's Guide | Tom's Hardware | Tom's Games
![]() |
![]() |
![]() |
Name: ace_omega
I was cleaning up my backups today and found a folder I could not delete because of a rights issue. I checked the security rights and the SID lost its link for the Administrator and set the owner to the next linkable SID in the list. I reset the owner to Administrator then readded the administrator SID and it fixed the problem.
My problem is how did this happen. Do I need to rebuild the AD tables and if so how? I have not Google this yet just thought I should ask here first. Thanks.

was the listed sid a bunch of numbers and letters usually starting with a S?
If so, that was of a deleted account. There is no automatic function in the system to then assign it to the next available sid/user account
"I reset the owner to Administrator then readded the administrator SID"
What do you mean you added the admin sid?

That's just it the Administrator was Missing from that folders security. Thus I did not have rights to delete the folder. I could not add the administrator and I found the reason why was that the owner was set to Ashley who was the first name in the list. It is kinda scary and I have heard stories of AD getting messed up and you have to do maintenance on it. I was just wondering if this is a sign of the AD getting ready to take a dump?
Also, I am using Name Spaces with DFS to 2 other servers and wonder if it is just a syncing problem.
P.S.
I checked all my other shared directories and they had the Administrator with the two unlinked SIDs starting with "(S-" above the administrator. I guess I had never given administrator rights to this directory when I created it and just did not notice until now. This directory has inheritance turned off because it is used by the scanner and has specific rights. Probably just a little paranoia.

I have run NDS [netware directory services] for years and then AD [active directory] since 2001. The only problem I have ever had with directory services in either platform is when wan links flake causing sync problems. Fix the links fixes the problem after perhaps a few tweaks.
S are deleted accounts. Sounds like some admin accounts got cleaned up which is never a bad idea when not needed. Just a maintenance thing.

![]() |
![]() |
![]() |
| Login or Register to Reply | |
| Login | Register |
| Ads by Google |