Windows 10: how to resolve the issue "Unknown account S-1-5" which is taking permissions of several...

how to, in windows 10 Enterprise; resolve the issue "Unknown account S-1-5" which is found under the security tab of files properties, never made by the user, taking permissions of several registry files, getting back even if confirming Remove, duplicating and disabling network firewalls?


issue started with event id 10016, then after day; generates issue of "event id 69, 2, 8198, 33, 16, 21, 27, 36 7022, 7011, 7009, 4199, 1002



Note:


> tried system restore, DISM tasks


> MS Members tried:

restore previous version of windows

:)

 

Unknown account removal


In a 'permissions' dialog an attempt to remove an UNKNOWN ACCOUNT prompts that inheritance first must be disabled. Two options are offered...

1) Convert inherited permissions to explicit permissions on this object
2) Remove all inherited permissions from the object

Which should be chosen, and will other accounts be affected? Or, would it be prudent to ignore the unknown account?

This is an "Sxxx" account and does not appear in the USERS account list, nor with other normal registry accounts.

 

Account Unknown has full Security permissions on my own User - huh?


Account Unknown(S-1-5-21-1345748419-2493160549-2943627078-1000)
has full permissions in the "Advanced Security Settings" for my own user account on my Win 10 Pro 64-bit PC.
What is it? Is this normal?

If I go to C:\Users\ , it lists four users:
[Myself]
Default
Default.migrated
Public.

If I right-click on [Myself] and hit Properties, then go to the security tab, it lists four "Group or user names:" with certain Permissions:
SYSTEM with full permissions - all items checked
Account Unknown(S-1-5-21-1345748419-2493160549-2943627078-1000) with the same full permissions - all items checked
[Myself] with the same full permissions - all items checked
Administrators with the same full permissions - all items checked

What is the Account Unknown(S-1-5-21-1345748419-2493160549-2943627078-1000), and how did it get there?

Two clues:
1) My PC is dual-booting Win 7 Pro 64-bit and this Win 10 Pro 64-bit. I'm in the Win 10
2) 15 minutes ago (and before checking this), I turned on Public file sharing so other PCs on my home network could see any documents I put in those Public folders or maybe vice versa. I do NOT have "Homegroup" turned on.

But wha' happening here?

 

Account Unknown has full Security permissions on my own User - huh?


Hello glnz,

You will see "Account Unknown" for an account that is not currently available. This could be from an account you deleted that had permissions, or from an account on another computer that is not connected.

Either way, it's safe to remove any listed "Account Unknown" entries in permissions if you are sure it's for an account that will no longer need permissions for the item.