Sign in with
Sign up | Sign in
Your question

Resolving Sid to User Name when Examining DACL

Last response: in Windows 2000/NT
Share
Anonymous
a b 8 Security
June 22, 2005 6:23:45 PM

Archived from groups: microsoft.public.win2000.security (More info?)

I'm checking to make sure certain people have permissions on certain folders
on my server.

When I right click the folder /properties /Security, I get the standard list
of SIDS that normally resolve to a name quickly.
The Sids seem to take forever to resolve to name.

Does anyone know why this would happen? What actually does the resolution?

Thanks in Advance,

Mr. Lee
Anonymous
a b 8 Security
June 23, 2005 3:17:08 PM

Archived from groups: microsoft.public.win2000.security (More info?)

So, if you wait long enough they do get translated into friendly
display names, it is just slow, that is the situation?

If the slow ones are domain principals then check that all
DNS support for the domain is fine. This would be case
where names of that domain lag and then eventually the
problem goes away for them (for that boot anyway).


--
Roger Abell
Microsoft MVP (Windows Security)

"Mr. Lee" <Nospam@email.net> wrote in message
news:o IxwKe1dFHA.2520@TK2MSFTNGP09.phx.gbl...
> I'm checking to make sure certain people have permissions on certain
folders
> on my server.
>
> When I right click the folder /properties /Security, I get the standard
list
> of SIDS that normally resolve to a name quickly.
> The Sids seem to take forever to resolve to name.
>
> Does anyone know why this would happen? What actually does the resolution?
>
> Thanks in Advance,
>
> Mr. Lee
>
>
Anonymous
a b 8 Security
June 24, 2005 12:17:56 AM

Archived from groups: microsoft.public.win2000.security (More info?)

The common ones come up fine,
it's the individuals that take forever. (I.E.: Owner /Person not from
inherited rights)

each user has a folder that they own "The Users/UserName"
Each individual (i.e. JDoe) user is the one that has the problem.
Enterprise Admins, Domain Admins, etc. are all fine.

This would be a function of DNS?

"Roger Abell" <mvpNOSpam@asu.edu> wrote in message
news:o bF94%23BeFHA.3028@TK2MSFTNGP09.phx.gbl...
> So, if you wait long enough they do get translated into friendly
> display names, it is just slow, that is the situation?
>
> If the slow ones are domain principals then check that all
> DNS support for the domain is fine. This would be case
> where names of that domain lag and then eventually the
> problem goes away for them (for that boot anyway).
>
>
> --
> Roger Abell
> Microsoft MVP (Windows Security)
>
> "Mr. Lee" <Nospam@email.net> wrote in message
> news:o IxwKe1dFHA.2520@TK2MSFTNGP09.phx.gbl...
>> I'm checking to make sure certain people have permissions on certain
> folders
>> on my server.
>>
>> When I right click the folder /properties /Security, I get the standard
> list
>> of SIDS that normally resolve to a name quickly.
>> The Sids seem to take forever to resolve to name.
>>
>> Does anyone know why this would happen? What actually does the
>> resolution?
>>
>> Thanks in Advance,
>>
>> Mr. Lee
>>
>>
>
>
!