Computer account appears as user in ACL

  • Thread starter Thread starter Brent Mills
  • Start date Start date
B

Brent Mills

We have been having the strange problem of a computer account appearing as a
user account. The really weird part is that it only shows up like this on
the group policy acl. I'm not sure what's different about this acl but for
some reason it always wants to pull it as a user even though it shows it as
a computer in the object browser. I've gone through every property in adsi
edit trying to find some difference between it and a normal computer account
but I can't seem to find any. Suggestions?
 
Weird. Technically every computer account as an
associated user-LIKE account that ends in "$", e.g.,
machine and machine$

Groups, Users, and Computers are all technically "security
principals." Meaning you can grant and deny them privileges
with permissions and rights.

In Win2000 a Computer is a "1st class object", which means
you can actually use the computer account as a "security
principal", unlike NT where the computer account is pretty
much just between the machine and it's DCs.

Also note, a name can appear in one OU as a User and the
same name in another as a Computer (or even another user).

You might check SIDs or object-IDs to make sure you are
looking at ONE THING.

Also consider this may be someone trying to hide a "hacker"
account as a machine....
 
Back
Top