Domain user accounts are jumbled like \S-1-5-21-1844237516-197979

  • Thread starter Thread starter Guest
  • Start date Start date
G

Guest

I have updated the Windows 2000 Pro OS with all the latest(11-23-04)
Windows critical updates and it has service pack 4.

Service pack 4 used to stop the account name
\S-1-5-21-1844237516-1979792683-682003330-12564

from happening. Why does this randomly happen? What further needs to
be installed to fix this?
 
Where do you see this, in ACL lists and such?? Those are the sids that the
operating system uses to manage users and groups. It could mean that the
computer can not find a domain controller or the computer account/secure
channel is bad. This is often caused by dns misconfiguration. Make sure your
domain computers point to ONLY domain controllers as their preferred dns
server and as shown via Ipconfig /all. If an ISP dns server is included in
the list you WILL have problems such as you have guaranteed on a random
basis. I would also run the netdiag support tool on that computer which will
run a battery of tests including finding and connecting to a domain
controller. --- Steve

http://support.microsoft.com/default.aspx?scid=kb;en-us;825036 -- dns best
practices.
 
Hey Steve Our network uses DHCP and yes I did all the ipconfig commands.
release all / renew


Steven L Umbach said:
Where do you see this, in ACL lists and such??
Click to expand...
I saw that in place of the USER NAMES......

Those are the sids that the
operating system uses to manage users and groups. It could mean that the
computer can not find a domain controller or the computer account/secure
channel is bad. This is often caused by dns misconfiguration. Make sure your
domain computers point to ONLY domain controllers as their preferred dns
server and as shown via Ipconfig /all.
Click to expand...
Preferred DNS is checked and being used.

If an ISP dns server is included in
the list you WILL have problems such as you have guaranteed on a random
basis. I would also run the netdiag support tool
Click to expand...
(INTERESTING I WILL USE THIS TOOL THEN.....
on that computer which will
 
If those are domain users then it is probably a problem with contacting
domain controller or "computer" account. Netdiag and dcdiag, for domain
controllers are great diagnostic tools and they can confirm proper
configuration or report a problem. That can also happen [the sids being
seen] if you have "local" user accounts or groups that have explicit
permissions to an ACL and the local user account or group has been
eleted. --- Steve
 
Well it should not be happening.

It sees the network just fine and prompts for my admin password to allow to
add a domain user then it works but then I hit the "APPLY" butten then it
changes into that code........... very very weird.... historically apply
SP4 fixed this for me.

Steven L Umbach said:
If those are domain users then it is probably a problem with contacting
domain controller or "computer" account. Netdiag and dcdiag, for domain
controllers are great diagnostic tools and they can confirm proper
configuration or report a problem. That can also happen [the sids being
seen] if you have "local" user accounts or groups that have explicit
permissions to an ACL and the local user account or group has been
eleted. --- Steve


TechGuyatwork said:
Hey Steve Our network uses DHCP and yes I did all the ipconfig commands.
release all / renew



I saw that in place of the USER NAMES......

Those are the sids that the
Preferred DNS is checked and being used.

If an ISP dns server is included in
(INTERESTING I WILL USE THIS TOOL THEN.....
on that computer which will
Click to expand...
Click to expand...
 
I'll try those 2 tips you gave me......... thanks

TechGuyatwork said:
Well it should not be happening.

It sees the network just fine and prompts for my admin password to allow to
add a domain user then it works but then I hit the "APPLY" butten then it
changes into that code........... very very weird.... historically apply
SP4 fixed this for me.

Steven L Umbach said:
If those are domain users then it is probably a problem with contacting
domain controller or "computer" account. Netdiag and dcdiag, for domain
controllers are great diagnostic tools and they can confirm proper
configuration or report a problem. That can also happen [the sids being
seen] if you have "local" user accounts or groups that have explicit
permissions to an ACL and the local user account or group has been
eleted. --- Steve


TechGuyatwork said:
Hey Steve Our network uses DHCP and yes I did all the ipconfig commands.
release all / renew


:

Where do you see this, in ACL lists and such??
I saw that in place of the USER NAMES......

Those are the sids that the
operating system uses to manage users and groups. It could mean that the
computer can not find a domain controller or the computer account/secure
channel is bad. This is often caused by dns misconfiguration. Make sure
your
domain computers point to ONLY domain controllers as their preferred dns
server and as shown via Ipconfig /all.
Preferred DNS is checked and being used.

If an ISP dns server is included in
the list you WILL have problems such as you have guaranteed on a random
basis. I would also run the netdiag support tool
(INTERESTING I WILL USE THIS TOOL THEN.....
on that computer which will
run a battery of tests including finding and connecting to a domain
controller. --- Steve

http://support.microsoft.com/default.aspx?scid=kb;en-us;825036 -- dns
best
practices.

message
I have updated the Windows 2000 Pro OS with all the latest(11-23-04)
Windows critical updates and it has service pack 4.

Service pack 4 used to stop the account name
\S-1-5-21-1844237516-1979792683-682003330-12564

from happening. Why does this randomly happen? What further needs
to
be installed to fix this?
Click to expand...
Click to expand...
Click to expand...
 
Back
Top