Solved Something fishy in a file Properties block?

June 30, 2016 at 10:04:16
Specs: Windows 10, 4GB

From my (Lenovo) pc desktop, when I right-click an icon--a pdf doc I have saved on my desktop, for example, and then click on the tab that says "Security" -- one of the listed accounts is tagged "Unknown Acct." And then a long code number is given--for example: S-1-5-21-2454569468-1313136757-3521785204-1000 // which is the code I'm seeing, except I altered 7 digits.....WHO AND/OR WHAT DOES THIS REFER TO EXACTLY? I thought I could include a screenshot in this space but it looks like, no I cannot.

See More: Something fishy in a file Properties block?

Report •

#1
June 30, 2016 at 10:42:22
That refers to a user that is not in your local accounts database - probably a deleted user. These numbers are how all users are really stored in Windows. The name that you see is just a shorthand version.

Report •

#2
June 30, 2016 at 10:45:49
✔ Best Answer
It's an SID, which is the "real" name for a user account.
S-1-5-21-2454569468-1313136757-3521785204-1000
^ ^ ^ ^---------------------------------^ ^
| | | |                                   |
+-+-+-+-> An SID                          |
  +-+-+-> SID v1                          |
    +-+-> WinNT based                     |
      +-> System/Domain ID                |
          The account # on that system <--+

If you're wondering what your SID is, you can open a Command Prompt, and type:

wmic useraccount get SID,Caption

If your PC is/was part of a domain, it probably refers to an AD account. If the system/domain ID part matches, it's probably a local account that was deleted at some point.

How To Ask Questions The Smart Way


Report •
Related Solutions


Ask Question