Yes, those are all SIDs that were created for AGPM. However, 3000049 is a user that was not related to the GPO that was created/changed. and 3000050 doesn't exist and the wbinfo commands fail with: failed to call wbcLookupSid: WBC_ERR_DOMAIN_NOT_FOUND Could not lookup sid On 05/04/2021 15:24, Jake Black wrote:> Yes, that script prints the same output on both DCs > >Perhaps I also should have said, are they all Well Known SID's ? If unsure, please list them. Rowland
On 05/04/2021 15:50, Jake Black via samba wrote:> Yes, those are all SIDs that were created for AGPM.OK, I will try again, are they all Well Known SIDs that you will find here: https://docs.microsoft.com/en-us/openspecs/windows_protocols/ms-dtyp/81d92bba-d22b-4a8c-908a-554ab29148ab If not, can you point me at the documentation you sed to set up AGPM. Rowland