1
Vote

checkdsacls does not resolve SIDs when executed from member.

description

It appears checkdsacls will not resolve domain accounts when executed from member.
The permutation that repros is using dsquery ou | checkdsacls /splitdn
I have not tried other permutations yet.
The SIDs resolve fine if checkdsacls is executed on the DC.

comments