Old accounts

[Guest]

Some of my policies have SID's instead of account names. Is there an easy way to clean these up? Obviousely accounts were removed incorrectly and I was wondering if there was a tool or a way to see what accounts were not used anymore and can be deleted

Thanks
Brian

 

[Guest]

I don't know about any tools, but you can do the following

1) Open Registry Editor and navigate to
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion \ProfileList

2) Under the ProfileList key, you will see the SIDs. By selecting each one individually, you can look at the value entry and see what user name is associated with that particular SID. (ProfileImagePath = ...../USERNAME

As a result you will be able match usernames with SIDs and delete unnecessary ones...