Account Unknown(S-1-15-3-65536-1888954469-739942743-1668119174-2468466756-4239452838-1296943325-355587736-700089176)

Anonymous
2022-10-31T10:36:40+00:00

So recently I updated Windows 11 to its latest 22H2 Version. I noticed that in the properties section of my C Drive, also in the security tab there is a user named "Account Unknown(S-1-15-3-65536-1888954469-739942743-1668119174-2468466756-4239452838-1296943325-355587736-700089176)

Now, my question is, is this user is associated with current version of windows? Because if I want to delete it, warning dialog occurs. And if this is any other problem, then how can I solve this?

Windows for home | Windows 11 | Windows update

Locked Question. This question was migrated from the Microsoft Support Community. You can vote on whether it's helpful, but you can't add comments or replies or follow the question.

0 comments No comments

74 answers

Sort by: Most helpful
  1. Anonymous
    2022-11-15T17:56:12+00:00

    After I updated to windows 11 22H2, This user account S-1-15-3-65536-1888954469-739942743-1668119174-2468466756-4239452838-1296943325-355587736-700089176 appeared and since then I cannot rename any of my folders locally as well as in OneDrive. At times I can delete this account to deny permission but still I am not able to rename any folders. It was perfectly fine with earlier version of windows. my same domain credentials work perfectly fine with 20H2 version of windows 10. I have also try local admin accounts. I have

    1. Reset the PC
    2. Ran chkdsk, sfsc, dism
    3. Changed ownership of the C: drive
    4. Ran registry cleaner
    5. Checked for updates
    6. Ran disk cleanup
    7. Updated LocalAccountTokenFilterPolicy in registry
    8. Deleted everything inside Software Distribution folder and temporary folder

    I can rename the folder with command line and admin credentials. The error code while trying to rename a folder is 0x80004005

    Any Solution is Welcome.

    Was this answer helpful?

    20+ people found this answer helpful.
    0 comments No comments
  2. DaveM121 932.6K Reputation points Independent Advisor
    2022-10-31T11:48:20+00:00

    Hi Imran, glad to help!

    Was this answer helpful?

    20+ people found this answer helpful.
    0 comments No comments
  3. Anonymous
    2024-04-13T19:26:05+00:00

    Hi Imran,

    I am Dave, I will help you with this.

    Windows creates hidden security accounts in the background of the operating system, they all begin with S-1-15-XXXX, all Windows systems have those accounts, they are used for administrative tasks like Windows Security, installing updates, file management...etc. those accounts are normal and rest assured you have nothing to worry about, you should never try to remove those hidden accounts.

    You cannot be serious? Are you joking!?!

    So you are tellimg me, Microsoft has created "back doors" into my OS for the purposes of modifying the OS without my knowledge? ( actually I already know that, but it does not make it secure, or correct practice.)

    Have you ever heard about Operating system security, OS security hardening methods, and secure account management baseline and best practices ?

    Have you ever applied security using Indetification and Authorization Control and Access Controls?

    If the system says a user account is "unknown", it is a security vulnerability waiting for exploitation by a hacker.

    Any account created externally without the owners knowledge is called AN EXPLOIT!

    Read and apply the Microsoft OS Security baseline best practices PLEASE!!

    https://learn.microsoft.com/en-us/windows/security/operating-system-security/device-management/windows-security-configuration-framework/windows-security-baselines

    Would you mind supplying me your bank account access information, I'm unknown to you and it is normal for you to give access your financial secure data to unknown entities. Sure, "nothing to worry about" ...

    User Accounts should be named specifically for their purpose - Admin permissions are created for that explicit purpose, and ADMIN's Jobs is user account management,

    You might want to READ and PRACTICE this NIST Guide to General Server Security: https://nvlpubs.nist.gov/nistpubs/legacy/sp/nistspecialpublication800-123.pdf

    Was this answer helpful?

    10+ people found this answer helpful.
    0 comments No comments
  4. Anonymous
    2023-06-15T14:37:47+00:00

    You know, it might be a good idea to consider using a more appropriate name like "Microsoft Secure Account." I mean, it does seem a bit strange that the icon itself has a question mark. Without any clear explanation, it could easily be mistaken for a suspicious account. It's always better to provide some clarity and avoid any unnecessary doubts or concerns, don't you think?

    Was this answer helpful?

    10+ people found this answer helpful.
    0 comments No comments
  5. Anonymous
    2022-11-16T12:02:06+00:00

    I have the same issue... post Windows 11 update mentioned in your submission toasted my admin permissions as well. Need resolution to this issue asap!

    Was this answer helpful?

    10+ people found this answer helpful.
    0 comments No comments