Local Security Policy

[Guest]

When I open My Win XP sp2 LOcal security Policy/User rights assignments I
find a list of items and their assignments. Within these assignments are what
looks like cookies or registry entries like this example
(S-1-5-21-299502267-1078081533-725345543-1006). What Im wondering is, Is this
example and the others I have legitmate entries or are they left over from
the viruses I removed recently. I feel that only the system accounts and my
user accounts should be listed but I find several of these types also listed.
Any help would be appreciated
Tim H.

 

[WTC]

When I open My Win XP sp2 LOcal security Policy/User rights assignments I
find a list of items and their assignments. Within these assignments are
what
looks like cookies or registry entries like this example
(S-1-5-21-299502267-1078081533-725345543-1006). What Im wondering is, Is
this
example and the others I have legitmate entries or are they left over from
the viruses I removed recently. I feel that only the system accounts and
my
user accounts should be listed but I find several of these types also
listed.

The following article will explain what you are referring to and this
article will still apply for XP. You are seeing a SID (security identifier)
for a account which has been deleted.

The SID of a user account that was deleted appears in the Local Security
Policy snap-in after you use the LsaRemoveAccountRights function to remove
user rights in Windows 2000
http://support.microsoft.com/?kbid=316827