Device REACL Failed with "ERROR: Unable to process Local Computer Account Rights for <Sid value> System.ComponentModel.Win32Exception (0x80004005): LsaEnumerateAccountRights: The specified account does not exist"
The Device system cache on the local policy that relates to LSA is not resolvable.
Few General Method to verify( Output may be varies but it sis depending on the scenario) but running through the verification to confirm the consistency of the output by running to all the option below
Option 1 : Verify if the list of sid value in the logs are able to be resolved, running with Powershell
|
$sids = @( foreach ($sid in $sids) { SID = $sid DomainSID = $sidObj.AccountDomainSid.Value RID = $sid.Split('-')[-1] Resolved = $resolved } } |
Sample output for option 1
SID DomainSID RID Resolved
--- --------- --- --------
<SID 1> <Domain SID> <RID> <UNRESOLVED/RESOVLED>
<SID 2> <Domain SID> <RID> <UNRESOLVED/RESOVLED>
<SID 3> <Domain SID> <RID> <UNRESOLVED/RESOVLED>.
Option 2 : Verify the other value and details , via powershell
|
## Verify Domain SID is correctly resolved |
Possible Resolution 1
Reboot the server to clear Windows' possible corrupted cache. then followup with REACL.
Possible Resolution 2
If Resolution 1 does not resolve the issue, you may proceed with an initial manual clearing of the cache, as it could potentially be corrupted or stuck on the device.
Please note that this script was previously generated and has helped in a similar customer scenario. However, we strongly recommend reviewing it carefully and seeking further guidance from Microsoft before execution. Kindly proceed at your own discretion and risk.
|
## apply policy
##Clear Security Policy cache via secedit |
