Re: Windows 2000 Quota Problem

From: Doug Baker (dbaker_at_wesleyan.spamkill.edu)
Date: 03/05/04


Date: Fri, 5 Mar 2004 08:29:12 -0500

On further research (in the last few minutes!) it might be just as easy to
use the /cleandeletedsidsfrom parameter. This will search for all deleted
sids and remove them.

Do a subinacl /help/full and see that paramater.. enjoy!
Doug

"Doug Baker" <dbaker@wesleyan.spamkill.edu> wrote in message
news:ukdC%23KrAEHA.2316@TK2MSFTNGP10.phx.gbl...
> Hello,
> I am having a similar problem, but I think I found a workaround. I have a
> few abandoned/orphaned entries on a Dell NAS that is part of Active
> Directory. There are about 7 items in the "Quota Entries" list with just a
> SID, the account information is unavailable. Likely due to deleted
accounts.
>
> It seems that a quota entry will exist (and continue to exist) as long as
> there's a SID attached to the security for the file/directory, or just the
> ownership.
>
> In my case I had attempted to delete a quota entry. This launches a search
> for all files that are owned by the particular account. The first run
found
> a bunch. I took ownership (i.e. the domain admin) of the files, figuring
it
> would be fine to delete. Not the case - I got the same situation as you,
> where it wouldn't delete the quota entry but showed an empty list.
>
> Apparently a quota entry is valid if there is an account or SID attached
to
> either a security element or ownership of the file. So far (I've just
> started going through this) I noticed that the item at fault was the
> ownership of a folder.
>
> So I used subinacl (the latest one
>
http://www.microsoft.com/downloads/details.aspx?FamilyID=e8ba3e56-d8fe-4a91-93cf-ed6985e3927b&displaylang=en
> or http://tinyurl.com/rvfq if that link didn't work) to search and replace
> the problematic ownership. First I just did a search:
>
> subinacl /subdirectories *.*
> /findsid=S-1-2-34-123456789-123456789-123456789-1234 > sid1.txt
> (obviously put in a valid sid when you run it)
>
> Maybe you're lucky and the file(s) or folder(s) are in one place, and you
> can replace the SID.
> subinacl /subdirectories "e:\problem folder"
> /findsid=S-1-2-34-123456789-123456789-123456789-1234 /owner=domain\admin
>
> You can add a /testmode to that to make sure it will work before doing any
> changes. And you might have to tweak the folder specifier (add a \*.* if
you
> have files to change as well as a parent folder) on a second run of
> subinacl.
>
> Whew, after all that I was able to delete the quota entry.
>
> good luck!
> Doug



Relevant Pages

  • Re: Explorer owners column shows SID instead of name
    ... Right click on the root folder of the drive and do the usual to get to the Security tab and the option to take ownership of the files and select to "Replace owner on subcontainers and objects". ... If you have several valid owners on files on the drive and if you only want to replace the owner on the specific SID use the SubInAcl tool, ... But I also see files and folders all over the machine for which the displayed user is somebody's SID instead of the friendly name. ...
    (microsoft.public.windowsxp.general)
  • ownership on mounted volumes
    ... username.txt finds the ownership of a user and pipes it ... the username on root directories as long as NO mounted ... and how if can figure out the ownership of a SID (not ...
    (microsoft.public.win2000.cmdprompt.admin)
  • Re: Windows 2000 Quota Problem
    ... few abandoned/orphaned entries on a Dell NAS that is part of Active ... the account information is unavailable. ... In my case I had attempted to delete a quota entry. ... I took ownership of the files, ...
    (microsoft.public.win2000.general)
  • Re: EFS Decryption Problem
    ... Was it only used to match up to the backed up userprofile, ... I thought the account's SID and password was involved in generating the ... a new account is created). ... instance of Windows would have a different SID even after restoring the ...
    (microsoft.public.windowsxp.security_admin)
  • Re: Update still failing with 80240020 and 8024000c
    ... There is still indication that the SID ... reporting because I think that ultimately it is going to be their accounts ... with the System account yesterday. ... In your case the System account would be ...
    (microsoft.public.windowsupdate)