X-Recipient: archive-cygwin AT delorie DOT com DomainKey-Signature: a=rsa-sha1; c=nofws; d=sourceware.org; h=list-id :list-unsubscribe:list-subscribe:list-archive:list-post :list-help:sender:from:to:subject:date:message-id:references :in-reply-to:content-type:content-transfer-encoding :mime-version; q=dns; s=default; b=YojmMrNzm7VSKeJkvWT1VJDQx135Z GOhEEVOUoep6BQAFpVGm91qxkrtLt1+hgiClEP26TPa5o23if0aNW2+peSOnzmkx J8DyEZGUTG1J5nplfKC3pmujQBhN8haCIvPToZUzz+gpmlNv85rXxAbPA7YITlr1 nhPNuaAhRyq+5M= DKIM-Signature: v=1; a=rsa-sha1; c=relaxed; d=sourceware.org; h=list-id :list-unsubscribe:list-subscribe:list-archive:list-post :list-help:sender:from:to:subject:date:message-id:references :in-reply-to:content-type:content-transfer-encoding :mime-version; s=default; bh=7v+FF4X0+gi+5jgssjd/k4J90GM=; b=ddd n9Z3PUdcsM+MgSyfeIi9GCPH8ToS0ht1AxL5bxpaId0XAHp7nRFGtt4qWu/FmrmF xcVa2pVeJ9VuHQQaTljDdk8+s1QYF59CYV2p7+fC2p8AbMZD4Esh6oDVPFtxqSy8 hKRfHaVGyQtrj094w4tVqN7wRMp2euvU+fXRvb+Q= Mailing-List: contact cygwin-help AT cygwin DOT com; run by ezmlm List-Id: List-Subscribe: List-Archive: List-Post: List-Help: , Sender: cygwin-owner AT cygwin DOT com Mail-Followup-To: cygwin AT cygwin DOT com Delivered-To: mailing list cygwin AT cygwin DOT com Authentication-Results: sourceware.org; auth=none X-Virus-Found: No X-Spam-SWARE-Status: No, score=-1.1 required=5.0 tests=AWL,BAYES_05,MIME_BASE64_BLANKS,RCVD_IN_DNSWL_NONE,SPF_HELO_PASS autolearn=ham version=3.3.2 X-HELO: na01-bn1-obe.outbound.protection.outlook.com From: "Habermann, David (D)" To: "cygwin AT cygwin DOT com" Subject: RE: occasional failure to look up Date: Tue, 25 Nov 2014 17:09:12 +0000 Message-ID: References: <20141118152211 DOT GZ3151 AT calimero DOT vinschen DOT de> <20141118155809 DOT GD3151 AT calimero DOT vinschen DOT de> <20141125151928 DOT GQ3810 AT calimero DOT vinschen DOT de> <20141125163833 DOT GA8118 AT calimero DOT vinschen DOT de> In-Reply-To: <20141125163833.GA8118@calimero.vinschen.de> Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 X-OrganizationHeadersPreserved: 046-CH1MMR1-003.046d.mgd.msft.net X-EOPAttributedMessage: 0 X-Forefront-Antispam-Report: CIP:65.52.44.158;CTRY:US;IPV:NLI;EFV:NLI;SFV:NSPM;SFS:(10009020)(6009001)(428002)(199003)(189002)(107886001)(107046002)(2351001)(81156004)(106466001)(105586002)(54356999)(76176999)(50466002)(50986999)(21056001)(95666004)(20776003)(55846006)(47776003)(23676002)(92566001)(97736003)(101416001)(64706001)(92726001)(2501002)(4396001)(86362001)(104016003)(46102003)(120916001)(31966008)(110136001)(99396003)(33656002)(44976005)(22756005)(2656002)(22746005)(87936001)(84676001)(62966003)(68736004)(69596002)(86146001)(6806004)(85806002)(77096003)(77156002)(450100001)(79686002);DIR:OUT;SFP:1101;SCL:1;SRVR:CY1PR0101MB0873;H:mail.bsnconnect.com;FPR:;SPF:None;MLV:sfv;PTR:InfoDomainNonexistent;A:1;MX:1;LANG:en; X-CrossPremisesHeadersPromoted: BL2FFO11FD033.protection.gbl X-CrossPremisesHeadersFiltered: BL2FFO11FD033.protection.gbl X-Microsoft-Antispam: UriScan:; X-Microsoft-Antispam: BCL:0;PCL:0;RULEID:;SRVR:CY1PR0101MB0873; X-Forefront-PRVS: 040655413E Received-SPF: None (protection.outlook.com: dow.com does not designate permitted sender hosts) Authentication-Results: spf=none (sender IP is 65.52.44.158) smtp.mailfrom=DAHabermann AT dow DOT com; X-OriginatorOrg: dow.com X-IsSubscribed: yes Content-Transfer-Encoding: 8bit X-MIME-Autoconverted: from base64 to 8bit by delorie.com id sAPH9Xx5032433 > Two things to keep in mind: > - It's not actually clear yet if it's a sidHistory entry or some SID > created by another mechanism. > Even if it's sidHistory, it may be *very* old. Did you work at the > company already back in NT4 times? That might explain the sidHistory > entry and the total lack of files still having this SID in its ACL. > As far as I know, Microsoft suggests to remove the sidHistory entries > as soon as they are not needed anymore. Yes, I guess I'll have to date myself now. I've worked here with the same user ID since 1975 (full time since 1980), so I span basically the entire non-mainframe computer era. So what you are suggesting is quite likely, and it would not be surprising for clean-up work to have been neglected. A quick look in our AD shows numerous things such as "Legacy local groups" and "Legacy Mailboxes". One concern I have here is that when I dig down into AD to "DC=dow,DC=com,OU=Dow Users,OU=Employees" and find what I believe is my current active record I find a record with "U074036" (capital 'U') whereas the record we saw as my "UID" earlier in this thread was with a lowercase 'u'. I found this by searching for sAMAccountName=u074036, and it is the only record found by this search.