DNS Security Properties

[techie08]

Hi

 

Ive just gone into the properties of the DNS server, clicked on the security tab and found a couple of unknown accounts. Is it fine just to remove these entries and the group for our decommissioned exchange server?

 

 

Thanks

Edited April 15, 2015 by techie08

[tmcd35]

Should be fine to delete them. They are accounts for old user who have been deleted from AD. Most likely old technicians or network manager accounts. Also, no harm in just leaving them...

[mjs_mjs]

Before removing them - set them to deny, see if anything breaks. If it does you know those accounts are required and what for. If you happy leaving them there in deny mode, should you ever need you can re allow them.

 

IIRC usually this happens when an account is removed from AD or the local SAM, but the Access Control List (ACL) still retains the security ID (token) for that account.