DQL: Finding paths with orphaned SIDs in file system permissions
Over the time, there are instances when permissions are assigned to unknown SIDs on file systems. These unknown or unresolved SIDs belong to deleted security groups or users and sit on the file-system unnecessarily. While most administrators want permissions to be up-to-date and ACLs cleaned on regular intervals, inadequate visibility in ACL permissions can make their job cumbersome and boring. Data Insight can come to rescue here. Administrators can utilise attached DQL template to find paths and permission details where permissions are explicitly assigned to unknown SIDs associated with users and groups. They can then utilize the report to analyse these paths and take actions to clean-up permissions and maintain file system hygeine.