Hell All , I want to delete the two accounts from delegation control of exchange organisation. they are S-1-5-21-97720808-987594067-1368392876-1759 ---> Full exchange admin(customized) S-1-5-21-97720808-987594067-1368392876-3084 ---> Full exchange admin(customized) other than this there three exchagne accounts with proper user names. Can I delete this accounts , was curious as i cant see any use with this username . Is it safe to delete? its is exchange server 2003. Thanks in advance.

Probably. But I can't say for sure. Did you once have a trusted domain that is no longer trusted? These accounts may have come from those domains and now tha the trust is broken you can't resolve the SIDs. Before I'd give a green light, I'd want to try to figure out where they came from.Ed Crowley MVP "There are seldom good technological solutions to behavioral problems."

thank you anyways , sorted.

Hi, In fact , Exchange 2003 delegation is same as grant file permission in AD. You can add a account and grant him permission at anytime . S-1-5-21-97720808-987594067-1368392876-1759 · S-1-5-21-97720808-987594067-1368392876-3084 · It always means the account has been deleted. It is the old account’s SID.Please remember to click Mark as Answer on the post that helps you, and to click Unmark as Answer if a marked post does not actually answer your question. This can be beneficial to other community members reading the thread.

Agree it means it can't resolve the SID to account. Typically the account is deleted or you did a migration and SID ACL was brought over but the account did not get migrated over.James Chong MCITP | EA | EMA; MCSE | M+, S+ Security+, Project+, ITIL msexchangetips.blogspot.com