Windows 10: Mysterious account SID in Windows 10

Account Unknown(S-1-15-3-1024-1065365936-1281604716-3511738428-1654721687-432734479-3232135806-4053264122-3456934681)

So when is MS gonna deal with this issue? Remove them if I don't need them?

Unknown accounts ?

https://social.technet.microsoft.com...in10itprosetup

:)

 

Why does my computer account (computername$) keep adding an unknown user to the local administrators group?

A few Windows 10 computers in my domain have a recurring EventID 4732, which is the Windows event that is logged when an account is added to the local admin group on a computer.

The event is always the same. The computername$ account has added a MemberSid to the Administrators account. When I try to query the MemberSid on the computer the event was logged from, nothing comes back. I am querying using this command (which usually
works for any Sid):

wmic useraccount where sid="INSERTSIDHERE" get name

What could be causing this event? Also, is there another way I can find out what account that Sid is for?

 

Event log writes error related to application-specific permissions on Windows 10 computer

This is the first place in the thread which hints at why people would be seeing this. FWIW I don't see it in either 14393.693 or 15046.

I like
Tripredacus explanation

<quote>

There is no clear consensus, but it appears that you are seeing leftover permissions for an account that was created temporarily, and then removed. The account does not exist but permission remnants remain. It is unclear where the actual problem
lies until it can be determined what is creating this account and what is removing it.

</quote>