Windows 10: How can I remove persisting 'Acccount Unknown' SIDs in security permissions from all...

Hello,


I had an issue with my main user account a while ago where the NTUSER.DAT file got corrupted somehow. The recommended fix was to create an entirely new user account and transfer everything, then delete the original using the built-in settings options. However, this seems to have left a ton of traces, including in security permissions. They show up as 'Account UnknownS-1-etc'.


I'm hoping there's an effective way to remove all of these references without manually having to go through each and every file/folder/registry item. I had the idea that I could create a new account, change its SID to the currently broken one, then delete it again, but I'm not sure that would even work.


Any ideas?

:)

 

Restore Security Permissions

Hello Deepak,

Thank you for posting in Microsoft Community.

I understand that you have cancelled the security permissions while setting it to folders and you are trying to restore back. We will help you.

• Which folder are you trying to set the permissions?
• What are you referring to " files is affected "?

I suggest you to follow the below steps and check if it helps.

• Open the file explorer and select the destination folder
  for which you wanted to revert back the permission changes.
• Right click on the folder. Select the Previous versions
  tab.
• Select the previous version in the below list and click
  apply.
• Check if the issue persists.

Keep us posted to help you better.

 

Removed Unknown Account SID S-1-15-3-1024-1065365936-1281604716-3511738428... from Runtime Broker Security in Component Services on Windows 10

I was following
these instructions to fix event ID 10016 on Windows 10 (base not Professional) and when i opened Runtime Broker Security Permission in Component Services. I removed Unknown Account with
SID S-1-15-3-1024-1065365936-1281604716-3511738428-1654721687-432734479-3232135806-4053264122-3456934681 as I thought it was an erroneous entry. As it is not linked to any system group in windows I cannot add it back anyway I can think of.

My original event ID 10016 was the exact same as the one listed in the article except it had:

to the user NT AUTHORITY\Local Services SID (S-1-5-19)

I am running WIndows 10 Version 1709 (OS Build 16299.309

 

Account Unknown has full Security permissions on my own User - huh?

Hello glnz,

You will see "Account Unknown" for an account that is not currently available. This could be from an account you deleted that had permissions, or from an account on another computer that is not connected.

Either way, it's safe to remove any listed "Account Unknown" entries in permissions if you are sure it's for an account that will no longer need permissions for the item.