New
#11
Hello Loque, :)
That is a list of SIDs for accounts on your computer.
Please provide more details about your issue.
Account Unknown has full Security permissions on my own User - huh?
-
-
New #12
Howdy!
Here are the details:
I had some issues with my windows 10: Unable to access boot device and trying to fix that issue i thought that it's a case of malware going on my PC and started looking through solutions and files when i have noticed that in my security tab under desktop items i have plenty of Users with full or special access named: S1-5-21- etc.
I have tried removing the users on whats my desktop but:
1) I can't remove the users on some items.
2) Don't really want to go through all files and folders and do this manually.
3) I have found out that by just copying an item from desktop, even a photo, to another location on the drive except C: when checking on the security tab those users are gone.
I have attached some photos showing this. One of it is for avira DNS where i have extra permission entries than the usual.
I have also added a photo with the reg key for admins.
My general concern is that there is a hacker account with permission on my desktop items so it can steal my passwords and accounts!
Software Details :
- I have avira PRO bought and running and scanned for viruses and rootkit scan. All clean!
- I have adware running and scanned for malware, found some Pup. Optional. Legacy as showing in one of the 5 photos.
- Drivers up to date for video card.
- OS Version: Windows 10 64bit N. Yes the legal version.
- CCleaner lates free version, running on a weekly basis.
- Spybot search and destroy running again regularly.
Hardware details:
- 120 Intel ssd drive windows dedicated only.
- Intel i7 4790k OC to 4.4
- Asus Mobo z97 Chipset
- Gtx 10 80 ti MSI GPU
- 16 Gb DDR 3 memory 2400 Mhz
- Additional 1 TB SSD for games
- 2 SSHD for contenct creation
- 1 TB HDD For data.
Photos:
Hope this helps!
-
New #13
loque,
An "unknown" in permissions is usually from an account that had accessed it, but the account is no longer available for whatever reason (ex: deleted account, accessed from another computer).
You can use Option Two in the tutorial below to get more specific details about the accounts on your computer to see if anything stands out in the report.
View User Account Details in Windows 10 User Accounts Tutorials
-
New #14
Sorry for posting in the old thread, but I couldn't find a more relevant thread elsewhere. I also observe a lot of "Account Unknown" users having permissions on very crucial files. Lets say that I do not access those files from network and neither have I ever created any other accounts on my PC. Does it means that someone else did it? And that those files are now compromised?
-
New #15
It might merely be that the Unknown user was a temporary account used by the computer maker in setting up the system. In which case there would be no compromise at all.
Since we're in this thread, if you look back at the original post you'll see the full SID for the account that was worrying glnz.
That SID is actually for an account called defaultuser0 that Dell use during pre-sales setting up.
Sometimes Dell setup fails to delete it so you can still see that account name listed later on in response to the command net user.
Sometimes Dell even leave a second account, defaultuser1, sitting there as well.
All the best,
Denis
-
New #16
Normally I would not post to an old topic myself, but I feel this was not fully answered but this topic does show up quickly in Google searches so thought I would provide more accurate details for those that search in the future.
Some SIDs do not resolve into friendly names
https://learn.microsoft.com/en-us/tr...friendly-names
Security identifiers
https://learn.microsoft.com/en-us/wi...ty-identifiers
User Rights Assignment
https://learn.microsoft.com/en-us/wi...hts-assignment
-
New #17
Theres quite a few directories in Windows which have unknown account access.
Pi**es me off.
If you want to know where they are just ask
Quote
Related Discussions
