how remove "Account Unknown" file/folder permissions?

桐源张 5

Recently, I reinstalled the operating system(win10) and found that some folders had an Account Unknown(S-1-5-21...) in the security settings, which I guessed was the account left over from the previous operating system.

I tried to use the icacls command to remove this unknown account permission in bulk, but it prompted that 0 files were successfully processed.

I want to know how remove this unknown account permission using the icacls or some other command?

捕获3

1 answer

MotoX80 35,311 Reputation points

2023-05-26T18:35:01.79+00:00

You should be able to just click on the Edit button, select the account, and then click on the Remove button in explorer. The "(OI)(CI)" in the icacls output indicates that that entry will be inherited by all files and subfolders. You should only need to remove it in this one spot.

You should be aware that Windows has "capability SID's" that do not translate to a friendly name.

https://learn.microsoft.com/en-us/troubleshoot/windows-server/windows-security/sids-not-resolve-into-friendly-names

I recommend that you do not touch the permissions on either of the Program Files folders, the ProgramData folder and any folder under c:\Windows.
Please sign in to rate this answer.
KEN ROGERS 0 Reputation points

2024-01-27T05:10:10.6833333+00:00

There is not an edit button option

MotoX80 35,311 Reputation points

2024-01-28T16:04:31.45+00:00

There is not an edit button option

Right click on the folder, select properties, select the security tab.

Harry V. Quackenboss 5 Reputation points

2025-01-31T14:32:53.3366667+00:00

I don't think MOtoX60 answered the original question, which was to do this in bulk, fixing all folders. I have, I think, the same problem. I have a D: drive where OneDrive and other data files are located. I did a fresh install on C:, wiping the partition. Probably as a result of having tried to fix permissions previously, there are unknown account entries in the ACLs. OneDrive can't sync them. There are 1700+ that OneDrive reports. I want to start with D: and remove every ACL entry for the account that is now unknown. How do i do that?

MotoX80 35,311 Reputation points

2025-01-31T18:31:29.1366667+00:00

I don't think MOtoX60 answered the original question,

Please note my comment: The "(OI)(CI)" in the icacls output indicates that that entry will be inherited by all files and subfolders. You should only need to remove it in this one spot.

The OP never replied if that solved his problem or not.

If there are multiple dead SIDs on your D: drive, then the easiest solution is set the permissions on the root to what you want, then push those permissions down to all subfolders and files.

You would do that through the Advanced button and selecting this option.
Sign in to comment

Use comments to ask for clarification, additional information, or improvements to the question.

Share via

how remove "Account Unknown" file/folder permissions?

1 answer

Your answer