sids on gpos

Viewing 1 post (of 1 total)
  • Author

  • jame.johnson

    Sorry to repost about a topic I have seen elsewhere on the forums, I just really want to clarify something before I go ahead.
    In my default domain controller policy I have a large number of SIDs which I don’t believe belong to my current domain. Problem is that I have inherited this domain setup and therefore am not 100% sure if these policies were created new when the domain was created or whether they were imported (which would possibly explain the large number of un-resolved names). Can I safely remove these SIDs or am I likely to seriously screw something up?
    Many thanks.

Viewing 1 post (of 1 total)

You must be logged in to reply to this topic.

Don't leave your business open to attack! Come learn how to protect your AD in this FREE masterclass!REGISTER NOW - Thursday, December 2, 2021 @ 1 pm ET

Active Directory (AD) is leveraged by over 90% of enterprises worldwide as the authentication and authorization hub of their IT infrastructure—but its inherent complexity leaves it prone to misconfigurations that can allow attackers to slip into your network and wreak havoc. 

Join this session with Microsoft MVP and MCT Sander Berkouwer, who will explore:

  • Whether you should upgrade your domain controllers to Windows Server
    2019 and beyond
  • Achieving mission impossible: updating DCs within 48 hours
  • How to disable legacy protocols and outdated compatibility options in
    Active Directory

Sponsored by: