SID remains in ACL 1

[francisdela]

Hi all

i've came across a problem on a win2000 server with active directory where if i delete a user from having access to a resource such as mapped folders on the server when i go back in to the security tab the name has disapeared but the SID is still there. Is there any way to solve this problem without re-doing the whole Active Directory.

Any ideas would be much appreciated

 

[igortsin]

http://www.dynawell.com/reskit/microsoft/win2000/sidwalk.zip

This set of programs helps system administrators manage access-control policies on Windows 2000 and Windows NT systems. Access control is implemented by access-control lists (ACLs).

 

[trusted]

I had a client who had he same problem occur. We fixed it by moving the Infrastructure master role and the global catalog to seperate machines.

The infrastructure master parses the global catalog for changes and if they reside on the same machine it seems to have problem keeping the GC clean.

 

[francisdela]

Thanks for the replies, i can't move the infrastructure role as there is only one dc, its a network with around 30 Pcs with a trust relationship with another network.

Any other ideas?