View Single Post
Old 27th June 2012, 12:26   #10
Afrow UK
Moderator
 
Afrow UK's Avatar
 
Join Date: Nov 2002
Location: Surrey, England
Posts: 8,434
Quote:
Originally Posted by donose.mihai View Post
2. It is a valid identifier S-1-5-21 - According to Microsoft is the Domain Admin - http://support.microsoft.com/kb/243330
No, the domain administrator's SID is S-1-5-21domain-512 where domain is taken from the domain or machine SID. Similarly the local administrator's SID is S-1-5-21domain-500. S-1-5-21 on its own means nothing (try it in the active directory object browser).

Stu
Afrow UK is offline   Reply With Quote