What relative identifier ends with 1003 & 1003_Classes

[Guest]

As the administrator of my computer my SID ends in 1003 with a domain
identifier of 21. I have a SID that looks like this;
S-1-5-21-2025429265-1606980848-106028429B-1003. What domain identifier is
"21" and relative identifier "1003"? I've checked with Microsoft TechNet -
Well-known security identifiers in Windows operating systems and it doesn't
show any well-known SIDs with 21 as the domain identifier or a relative
identifier of 1003. Can someone help me in finding this information out or
even a website. I thought since I am the administrator my relative
identifier should be 500. I would greatly appreciate it. Thanks alot.

 

[Wesley Vogel]

21 is not the domain, 2025429265-1606980848-106028429B is the domain.

Almost all users' SIDS start with S-1-5-21

500 is Administrator.
501 is Guest.
1003 is you.

This is you...
HKEY_USERS\S-1-5-21-2025429265-1606980848-106028429B-1003
HKEY_USERS\S-1-5-21-2025429265-1606980848-106028429B-1003_Classes

Any changes made in the HKEY_CURRENT_USER hive will also be made in the
corresponding keys in HKEY_USERS\Security ID (SID) of current user subkey.
And vice versa.

The HKEY_CURRENT_USER subtree contains the user profile for the user who is
currently logged on to the computer.

The information in HKEY_CURRENT_USER is built from the HKEY_USERS key during
the logon process. Therefore, all information found in the
HKEY_CURRENT_USER key is a copy of the subkey HKEY_USERS\username, where
username is the name of the active user (or Default).

The HKEY_CURRENT_USER subtree does not contain any data. It just stores a
pointer to the content of the HKEY_USERS\Security ID (SID) of current user
subkey. Therefore, the content of that subkey also appears in
HKEY_CURRENT_USER, and it can be viewed and changed in either location. The
HKEY_CURRENT_USER subtree just provides easier access to the data.

HKEY_CURRENT_USER Contains the user profile for the user who is currently
logged on interactively (as opposed to remotely), including environment
variables, desktop settings, network connections, printers, and program
preferences. This subtree is an alias of the HKEY_USERS subtree and points
to HKEY_USERS\security ID of current user.

The HKEY_USERS subtree contains all actively loaded user profiles.
HKEY_USERS has at least three keys:

* .DEFAULT

* A subkey named for the Security Identifier (SID) of the current local
user. This subkey contains the current user's profile. The data in
HKEY_USERS\SID also appears in HKEY_CURRENT_USER.

* A subkey named for the Security Identifier (SID) of the current local
user with the _Classes suffix. This subkey contains the current user's
Classes. The data in HKEY_USERS\SID\_Classes is also contained in
HKEY_CLASSES_ROOT.

Reference:
About the Windows Registry
http://www.microsoft.com/resources/...Serv/2003/all/deployguide/en-us/RegTopics.asp

Description of HKEY_CURRENT_USER Registry Subkeys
http://support.microsoft.com/kb/310595

Registry overview
http://www.microsoft.com/resources/...ard/proddocs/en-us/sag_ntregconcepts_yynh.asp

--
Hope this helps. Let us know.

Wes
MS-MVP Windows Shell/User

In