I can’t figure this one out, and it’s vague enough that I can’t determine the appropriate search terms to research it. Apologies if this is frequently asked!
On many servers on our domain, when I check the membership in the Administrators group, I often see what appears to be duplicate entries—one a domain login or group, and the other the same item followed by the SID. Example:
OURDOMAIN\WebLogin OURDOMAIN\WebLogin (S-1-5-21-2000478354-guid-etc-etc)
They don’t appear to impact performance or security, but they are confusing. What does this mean? How do they come about? Most importantly, is it safe to delete the redundant-looking one?