Re: sID shows in permissions instead of domain users

Tech-Archive recommends: Repair Windows Errors & Optimize Windows Performance

From: Ryan Hanisco (rhanisco_at_flagshipis.com)
Date: 12/15/04 

Date: Wed, 15 Dec 2004 17:29:22 -0600

Skeeter,

This can happen if the PDC emulator is not available or if the DNS cannot be
contacted to resolve the domain's SRV records for the LDAP services and GCs.

Check your connectivity and work from there. The good thing is that the
SIDs are there and working as intended -- the names just resolve for we mere
mortals. 

-- 
Ryan Hanisco
MCSE, MCDBA
Flagship Integration Services
"Skeeter" <lpuffer@xos.com> wrote in message
news:1102522965.183632.37390@f14g2000cwb.googlegroups.com...
> I am on a Windows 2000 AD domain, and my win 2k sp4 member
> server is displaying SIDS instead of user's names, when I
> check file/share permissions. These are NOT deleted
> accounts. The users are still able to access these
> folders/files, but I cannot see who has access by name,
> only by SID.
>
> I can add access for a user, see their name in the
> properties for a few minutes, then it turns into a SID. If
> I try to re-add them, it says "user already exists in
> group" or similar message saying that the user is there,
> just in SID format.
>
> I moved my domain from a NT 4.0 domain to AD, and a few
> weeks later, this problem started happening. Any
> suggestions?
>
> This does cause a problem if the member server in question is also home
> to your SQL server. If you try to add a domain user to a DB, it returns
> a 'user not found' error even after choosing it from a poulated list of
> domain users. I would love to find an solution to this problem.
> Thanks,
> Lawson
>

Relevant Pages

  • Re: sID shows in permissions instead of domain users
    ... > server is displaying SIDS instead of user's names, ... > properties for a few minutes, then it turns into a SID. ... > group" or similar message saying that the user is there, ... If you try to add a domain user to a DB, ...
    (microsoft.public.win2000.active_directory)
  • Re: resolving a sid to username
    ... the SID Win32 functions. ... It can take a SID and resolve it to an account ... I'm not entirely sure how it will behave with a local machine account ...
    (microsoft.public.dotnet.security)
  • Re: Matching SIDs with objects
    ... If you connect to the event log of a machine in a different domain that has ... decode the SID when sending the event info back, ... sidtoname lets you specify which machine to use to resolve the sid. ... >> Microsoft MVP Scripting and WMI, ...
    (microsoft.public.win2000.security)
  • Re: SIDS - defualt domain polikcy
    ... resolve the sid of the domain itself.... ... You can get it by looking at the objectsid attribute of the Domain NC head object... ... Note that there are a bunch of SIDs that are valid that will not include the domain SID, these are called well known SIDs and are for groups such as Power Users, Administrators, etc. ... Joe Richards Microsoft MVP Windows Server Directory Services ...
    (microsoft.public.win2000.active_directory)
  • Re: Windows 2000 file server permission
    ... resolve it to a name, probably because he does not exist anymore or that he ... so it displays the SID instead of user name. ... I see a strange ID with question mark next to it ...
    (microsoft.public.win2000.security)