Server Fault is a question and answer site for system and network administrators. It's 100% free, no registration required.

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

When editing the NTFS permissions for some folders on my Windows 2003 Server w/ SP2, I see many accounts like

Account unknown(s-1-5-21-545330648-264140627-1714.....)

This server isn't a member of an Active Directory domain, just a standalone server.

How can I get rid of these orphaned accounts that are showing up?

share|improve this question

It's not the orphaned account you need to get rid of, it's the orphaned ACE's. You need to find out if the SID's that are listed are a user SID or one of the well known SID's. You can check it against this list:

Also, you can download a utility called SidToName to see if it can be resolved to a user account or to one of the well known SID's. If it doesn't resolve to one of the well known SID's then it's for a user account that doesn't exist anymore (or isn't resolvable) and should be safe to remove from the ACL.

share|improve this answer

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.