Re: SID's not resolving to account names?

From: (parris_at_newsguy)
Date: 01/06/05 

Date: Thu, 6 Jan 2005 22:23:09 -0000

Has the default GPO on the DC's been changeed so that the following groups
are not configured to "Access this Computer from the Network" :

Administrators
Authenticated Users
Everyone

This may cause this issue and if so I suggest putting them back and starting
again.

SB

"Michael" <Michael@discussions.microsoft.com> wrote in message
news:4C95E08B-277C-4A92-A5EC-C8EDC307D4A2@microsoft.com...
> Hi BrookerW,
>
> the 3 things i know why there are only shown sids are:
>
> 1) your domain controller is not able to resolve the accounts
> 2) theres nothing to resolve (account deleted?)
> 3) no dc available
>
> if you have min. 2 dcs try opening the policy from another dc, perhaps it
> can resolve them.
>
> no second DC. oh oh :)
>
> are the dns entries of the dc's correct?
>
> Michael
>
>
>
>
> "BookerW" wrote:
>
>>
>> In our undergraduate lab (and maybe other places), my users are getting
>> an
>> unable to log in interactively message when they try to access the labs
>> using their kerberos accounts. I checked our policy for those machines,
>> and when I went inside of the policy, I noticed that the SID's for the
>> accounts were showing, as opposed to the actual account names.
>>
>>
>>
>> I suspect this may be "part" of the problem. Do you know why just the
>> SID's would show as opposed to the account names?
>>
>>
>>
>> Under "normal circumstances, their Kerberos accounts would show up in the
>> policy, and they would log in, and wallah, no problems, but I am thinking
>> that maybe since within the policy itself, since just the SID's are
>> showing,
>> maybe AD is having a problem recognizing the login accounts, thus when
>> the
>> policy is applied, it can not determine who these users are?
>>
>>
>>

Relevant Pages

  • RE: Group Policy: multiple password policies in the same domain?
    ... > it under access to the GPO. ... The conflict only happens when both policies ... results in having the policy denied. ... > user accounts it affects be able to read it and have "apply ...
    (Focus-Microsoft)
  • Re: Password Policy Basics
    ... but assumed the POLICY would be applied to ALL ... so lcoal machines might start enforcing that policy on ... No, the local accounts are not effected by the domain policy, except you link the policy also to the OU like Florian states. ... I was thinking of service accounts on the servers... ...
    (microsoft.public.windows.group_policy)
  • Re: Windows 2000 users accounts get locked out
    ... I have disabled my accounts lockout policy in my ... >account logon events enabled in Domain Security Policy ... and Domain Controller ...
    (microsoft.public.win2000.security)
  • Re: RSoP Lockout Account
    ... Account Policy, or more specifically any items within Computer ... *domain accounts* can ... account policies per domain, but again, I haven't seen that in writing yet. ... >>> I'm trying to aply a GPO to an OU that contains computers, ...
    (microsoft.public.win2000.group_policy)
  • Re: AD 2000, Blank passwords, and Group Policy
    ... I set up an account with password policy enforced and experienced the same as you ... The only thing I can suggest is to leave the accounts as they ... accounts to change password at next logon. ... I could set the policy to not enforce this until after all ...
    (microsoft.public.win2000.security)