In my Local Security Settings, Local Policies, User Rights Assignment, some
policies have a security setting with a long, numerical account starting with
an * (e.g., *1-1029-309039etc...). Why is this there, and will I mess up my
settings by trying to remove it?

Thanks,
jewels

"jewels" <jewels@discussions.microsoft.com> wrote in message
news:ADC5474F-B234-4C74-B85E-DC2785F36612@microsoft.com...
> In my Local Security Settings, Local Policies, User Rights Assignment,
> some
> policies have a security setting with a long, numerical account starting
> with
> an * (e.g., *1-1029-309039etc...). Why is this there, and will I mess up
> my
> settings by trying to remove it?


When you double-click on a policy to show its own properties window, is the
asterisk still there? I'm wondering if it isn't simply truncating a long
group or username. Normally these policies assign privileges based on a
group, not a particular account. So I'm wondering if you have groups or
accounts that were defined under a different instance of Windows whose SIDs
are unknown under your current instance of Windows.

--
__________________________________________________
Post replies to the newsgroup - Share with others.
E-mail: Remove "NIX" and append "#VC811" to Subject.
__________________________________________________

Yes, the asterisk is still there. This computer is brand new and has not
been attached to the Internet. I did put another hard drive in as a slave
temporarily to copy some files, etc. that I needed, and then removed the old
drive. I hate it when these unexplained items show up. Do you think I can
safely try to delete the "user" from the security settings?

Thanks,
Jewels

"Vanguard" wrote:

> "jewels" <jewels@discussions.microsoft.com> wrote in message
> news:ADC5474F-B234-4C74-B85E-DC2785F36612@microsoft.com...
> > In my Local Security Settings, Local Policies, User Rights Assignment,
> > some
> > policies have a security setting with a long, numerical account starting
> > with
> > an * (e.g., *1-1029-309039etc...). Why is this there, and will I mess up
> > my
> > settings by trying to remove it?
>
>
> When you double-click on a policy to show its own properties window, is the
> asterisk still there? I'm wondering if it isn't simply truncating a long
> group or username. Normally these policies assign privileges based on a
> group, not a particular account. So I'm wondering if you have groups or
> accounts that were defined under a different instance of Windows whose SIDs
> are unknown under your current instance of Windows.
>
> --
> __________________________________________________
> Post replies to the newsgroup - Share with others.
> E-mail: Remove "NIX" and append "#VC811" to Subject.
> __________________________________________________
>
>

"jewels" <jewels@discussions.microsoft.com> wrote in message
news:72D937C2-1B79-4BC8-86B5-B772BF7CE64D@microsoft.com...
> Yes, the asterisk is still there. This computer is brand new and has not
> been attached to the Internet. I did put another hard drive in as a slave
> temporarily to copy some files, etc. that I needed, and then removed the
> old
> drive. I hate it when these unexplained items show up. Do you think I
> can
> safely try to delete the "user" from the security settings?
>
> "Vanguard" wrote:
>
>> "jewels" <jewels@discussions.microsoft.com> wrote in message
>> news:ADC5474F-B234-4C74-B85E-DC2785F36612@microsoft.com...
>> > In my Local Security Settings, Local Policies, User Rights Assignment,
>> > some
>> > policies have a security setting with a long, numerical account
>> > starting
>> > with
>> > an * (e.g., *1-1029-309039etc...). Why is this there, and will I mess
>> > up
>> > my
>> > settings by trying to remove it?
>>
>>
>> When you double-click on a policy to show its own properties window, is
>> the
>> asterisk still there? I'm wondering if it isn't simply truncating a long
>> group or username. Normally these policies assign privileges based on a
>> group, not a particular account. So I'm wondering if you have groups or
>> accounts that were defined under a different instance of Windows whose
>> SIDs
>> are unknown under your current instance of Windows.


I wouldn't until after searching the registry on the numeric portion of the
string to see what other dependencies there were (assuming they aren't
listed in hashed registry key or data items).

--
__________________________________________________
Post replies to the newsgroup - Share with others.
E-mail: Remove "NIX" and append "#VC811" to Subject.
__________________________________________________

What is the user right and what other user/groups are listed for that user
right? What is the full number/SID? --- Steve


"jewels" <jewels@discussions.microsoft.com> wrote in message
news:ADC5474F-B234-4C74-B85E-DC2785F36612@microsoft.com...
> In my Local Security Settings, Local Policies, User Rights Assignment,
> some
> policies have a security setting with a long, numerical account starting
> with
> an * (e.g., *1-1029-309039etc...). Why is this there, and will I mess up
> my
> settings by trying to remove it?
>
> Thanks,
> jewels