Windows 10: AccountUnknown S-1-5-21—1000, has security permissions of installed programs on newly reset...

Discus and support AccountUnknown S-1-5-21—1000, has security permissions of installed programs on newly reset... in AntiVirus, Firewalls and System Security to solve the problem; Suspected malware on my pc so reset it. After doing so, this AccountUnknownS-1-5-21-xxx-xxx-1000 appeared under permissions for anything that I... Discussion in 'AntiVirus, Firewalls and System Security' started by Lellugi, Jun 29, 2022.

  1. LELLUGI
    Lellugi Win User

    AccountUnknown S-1-5-21—1000, has security permissions of installed programs on newly reset...


    Suspected malware on my pc so reset it. After doing so, this AccountUnknownS-1-5-21-xxx-xxx-1000 appeared under permissions for anything that I downloaded Chrome etc. Seeing this, and with Microsoft live chat advice, I did a fresh reinstallation of windows, and still this unknown account appeared! I know that the general suggestion is that this is a deleted account, and that the SID ending in 1000 means it was the first account created on my device, but the only account created on this fresh installation is my own local account. I was suggested to remove this account from the ProfileList i

    :)
     
    Lellugi, Jun 29, 2022
    #1
  2. PA BEAR - MS MVP
    PA Bear - MS MVP Win User

    S-1-5-21-119163587-1573839180-90999006-1001

    I give up, what is it - and what's a "security ownership panel?"

    ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

    FYI...

    Well-known security identifiers in Windows operating systems:

    Security identifiers (Windows 10) - Windows security | Microsoft Docs

    Unknown User in security settings s-1-5-21 ... 1001

    Unknown User in security settings s-1-5-21 ... 1001 - Can someone please review? - Virus, Trojan, Spyware, and Malware Removal Help

    Account Unknown (S-1-5-21-130066488-785734366-1129733132-1000)??

    https://www.tenforums.com/user-acco...21-130066488-785734366-1129733132-1000-a.html

    How to understand the anatomy of security identifiers

    How to understand the anatomy of security identifiers
     
    PA Bear - MS MVP, Jun 29, 2022
    #2
  3. KITTYROARA
    kittyroara Win User
    Should I be concerned about "SqmUpload_S-1-5-21-2585291226-2271656789-3205841708-1000"???

    Update:

    I assume from
    this article     that my -1000 is harmless, though I'm not 100% sure. I have limited skill in PowerShell but I tried to find out what I could, which is little. I don't know if it helps but this is what I found:

    PS C:\> Get-ItemProperty C:\Windows\system32\tasks\WPD\SqmUpload_S-1-5-21-2585291226-2271656789-3205841708-1000 Directory: C:\Windows\system32\tasks\WPD

    Mode LastWriteTime Length Name

    ---- ------------- ------ ----

    -a--- 18-Jul-2015 10:44 AM 4482 SqmUpload_S-1-5-21-2585291226-2271656789-3205841708-1000

    ************************

    PS C:\> Get-AuthenticodeSignature C:\Windows\system32\tasks\WPD\SqmUpload_S-1-5-21-2585291226-2271656789-3205841708-1000

    Directory: C:\Windows\system32\tasks\WPD

    SignerCertificate Status Path

    ----------------- ------ ----

    UnknownError SqmUpload_S-1-5-21-2585291226-22716...

    ************************

    PS C:\> Get-Acl C:\Windows\system32\tasks\WPD\SqmUpload_S-1-5-21-2585291226-2271656789-3205841708-1000

    Directory: C:\Windows\system32\tasks\WPD

    Path Owner Access

    ---- ----- ------

    SqmUpload_S-1-5-21-2585291226-227165... Aurora-PC\Aurora NT AUTHORITY\SYSTEM Allow FullContr...

    **************************

    My hunch is that this was a file/process created for something that has since been deleted and the file is now redundant/useless.
     
    kittyroara, Jun 29, 2022
    #3
  4. KEITHKTAM
    keithktam Win User

    AccountUnknown S-1-5-21—1000, has security permissions of installed programs on newly reset...

    Account Unknown (S-1-5-21-130066488-785734366-1129733132-1000)??

    Hi, recently whenever i have checked the security tab of my files, I see the above thing: Account Unknown (S-1-5-21-130066488-785734366-1129733132-1000), should i worry about this?? a hacker or something?? how can i delete this, it has "special permission". Also there is another account similar to this under INTERACTIVE, whats going on?? Hope someone can help. Thank you.
    Keith
     
    keithktam, Jun 29, 2022
    #4
Thema:

AccountUnknown S-1-5-21—1000, has security permissions of installed programs on newly reset...

Loading...

  1. AccountUnknown S-1-5-21—1000, has security permissions of installed programs on newly reset... - Similar Threads - AccountUnknown 21—1000 has

  2. who or what is s-1-5-21-626145467-462785073-2204929410-1000?

    in Windows 10 Gaming
    who or what is s-1-5-21-626145467-462785073-2204929410-1000?: Why is this number appearing on my files? https://answers.microsoft.com/en-us/windows/forum/all/who-or-what-is-s-1-5-21-626145467-462785073/c3ab55a7-e58e-40e9-b8a2-3e4154190401

  3. who or what is s-1-5-21-626145467-462785073-2204929410-1000?

    in Windows 10 Software and Apps
    who or what is s-1-5-21-626145467-462785073-2204929410-1000?: Why is this number appearing on my files? https://answers.microsoft.com/en-us/windows/forum/all/who-or-what-is-s-1-5-21-626145467-462785073/c3ab55a7-e58e-40e9-b8a2-3e4154190401

  4. Permission from s-1-5-21 ?

    in Windows 10 Gaming
    Permission from s-1-5-21 ?: It shows I need permission from s-1-5-21 to delete a file or folder in an external drive. I went to security and changed ownership to my microsoft account. Then it says need permission from desktop/user . Changed to users ; now need permission from desktop/users .Changed to...

  5. Permission from s-1-5-21 ?

    in Windows 10 Software and Apps
    Permission from s-1-5-21 ?: It shows I need permission from s-1-5-21 to delete a file or folder in an external drive. I went to security and changed ownership to my microsoft account. Then it says need permission from desktop/user . Changed to users ; now need permission from desktop/users .Changed to...

  6. PERMISSION FROM S-1-5-21-210475555-2911152858-2912198334-1002

    in Windows 10 Gaming
    PERMISSION FROM S-1-5-21-210475555-2911152858-2912198334-1002: I created a new account because I wanted to change user folder name on my pc. Did all the necessary stuff but mistakenly deleted the new local account that I created and set as administrator. Now I want to clear the new account folder from my pc but to no avail. Any help?...

  7. PERMISSION FROM S-1-5-21-210475555-2911152858-2912198334-1002

    in Windows 10 Software and Apps
    PERMISSION FROM S-1-5-21-210475555-2911152858-2912198334-1002: I created a new account because I wanted to change user folder name on my pc. Did all the necessary stuff but mistakenly deleted the new local account that I created and set as administrator. Now I want to clear the new account folder from my pc but to no avail. Any help?...

  8. Windows 10 Clean Install still applying old account unknown S-1-5-21-********** permissions...

    in Windows 10 Updates and Activation
    Windows 10 Clean Install still applying old account unknown S-1-5-21-********** permissions...: Any help would be appreciated with this. I have also mailed a letter to Microsoft Corporate offices in WA attn: Complaint Department. Really do not know what else to do. Ignoring the Account Unknown is not a valid solution in my case, and does not solve the actual problem,...

  9. Account Unknown s-1-5-21. Cannot delete because it has inherited permissions from parent.

    in Windows 10 Customization
    Account Unknown s-1-5-21. Cannot delete because it has inherited permissions from parent.: I just deleted one of my old unused accounts and when I go to properities of an app, it shows that there is a unknown user. Does that delete have anything to do with this? Please help...

  10. Account Unknown (S-1-5-21-130066488-785734366-1129733132-1000)??

    in User Accounts and Family Safety
    Account Unknown (S-1-5-21-130066488-785734366-1129733132-1000)??: Hi, recently whenever i have checked the security tab of my files, I see the above thing: Account Unknown (S-1-5-21-130066488-785734366-1129733132-1000), should i worry about this?? a hacker or something?? how can i delete this, it has "special permission". Also there is...