S-1-5-21 NT Account AlwaysFilter Domain S-1-5-21-x Partially AlwaysFilter formed SID Partially AlwaysFilter formed SID Invalid AlwaysFilter domain SID (too many RIDs) Identifies a AlwaysFilter X-Y-Z domain, not a principal Compounded NeverFilter<28> Authentication Claims Valid NeverFilter<29> Well-known ForestSpecific SID range R R<500 Administrator ForestSpecific* 500 Guest ForestSpecific* Krbtgt ForestSpecific* Domain ForestSpecific* Admins Domain Users ForestSpecific* Domain ForestSpecific* Guests Domain ForestSpecific* Computers Domain ForestSpecific* Controllers
S-1-5-21 NT Account Domain AlwaysFilter S-1-5-21-x Partially formed SID AlwaysFilter Partially formed SID AlwaysFilter Invalid domain SID (too many RIDs) AlwaysFilter Identifies a domain, not a principal AlwaysFilter Compounded Authentication NeverFilter<28> Claims Valid NeverFilter<29> R<500 Well-known SID range ForestSpecific Administrator ForestSpecific* Guest ForestSpecific* Krbtgt ForestSpecific* Domain Admins ForestSpecific* Domain Users ForestSpecific* Domain Guests ForestSpecific* Domain Computers ForestSpecific* Domain Controllers ForestSpecific* 500 R X-Y-Z
%5BMS-PAC%5D-170601.docx