what does the "o" mean on the output of the dumpsec?

[Guest]

Good morning, I ran a dumpsec report for one of our fileservers. On a few of the directories there was this "?unknown" account that has "o" in the rights section as shown below. I know that when dumpsec reports ?unknown its usually a orphaned SID that it cannot resolve, but I cannot find out where this particular one is because it is not coming up listed in the security permissions. This folder is not a specific share either it is inherently shared by its parent.

thanks for your help


\\infohunt\Intranet$\rpts\,TELEPHONICS\INFO , RWXD RWXD
\\infohunt\Intranet$\rpts\,TELEPHONICS\Administrat or, all all
\\infohunt\Intranet$\rpts\,TELEPHONICS\ASPNET , all all
\\infohunt\Intranet$\rpts\,TELEPHONICS\CARPICO , RWXD RWXD
\\infohunt\Intranet$\rpts\,TELEPHONICS\Domain Admins, all all
\\infohunt\Intranet$\rpts\,Everyone , R X R X
\\infohunt\Intranet$\rpts\,SYSTEM , all all
\\infohunt\Intranet$\rpts\,TELEPHONICS\SYSTEMS , RWXD RWXD
\\infohunt\Intranet$\rpts\,?unknown , o

[cmccullough]

Re: what does the "o" mean on the output of the dumpsec?

I'm not sure where that comes from, but the ?unknown is a deleted account that hasn't been removed from the ACL. You should be able to edit the security on that directory and Windows should remove it (if not, Hyena should.)

You might also want to look at our Exporter Pro utility that comes with Hyena for this reporting.