old IUSR account in active directory

[Guest]

There are two old user accounts:
1) IUSR_W2KSDNS (Built-in account for anonymous access to Internet
Information Services)
2) IWAM_W2KSDNS (Built-in account for anonymous access to Internet
Information Services out of process applications)

Currently, we don't have any system name "W2KSDNS".

So is it safe to delete these two accounts? How did these two accounts get
into active directory in the first place?

 

[Herb Martin]

There are two old user accounts:
1) IUSR_W2KSDNS (Built-in account for anonymous access to Internet
Information Services)
2) IWAM_W2KSDNS (Built-in account for anonymous access to Internet
Information Services out of process applications)

Currently, we don't have any system name "W2KSDNS".

Double check the IIS servers to make sure this was not
a CUSTOM name -- the automatic name would have been
created using the machine name, but a custom name could
have been anything.

So is it safe to delete these two accounts? How did these two accounts get
into active directory in the first place?

Someone with AD Administrative privilege (or properly
delegated privilege) created them, probably by doing an
IIS install/configuration.

 

[Joe Richards [MVP]]

Or they were running IIS on a DC...