locked
can some please help me find out who this unkown administrator is on my computer? RRS feed

  • Question

  • S-1-15-2-3502142457-1175083276-1468359876-1514580144-2717768582-2562788200-3268064651)

    it was located in this file

    \AppData\Local\Packages\Microsoft.CommsPhone_8wekyb3d8bbwe\Microsoft.CommsPhone_2.12.2002.0_x64__8wekyb3d8bbwe

    • Edited by dave133768 Wednesday, December 9, 2015 5:58 AM
    • Moved by Bill_Stewart Tuesday, January 12, 2016 9:15 PM This is not end-user support forum
    Wednesday, December 9, 2015 5:55 AM

All replies

  • Not possible.

    Perhaps you should ask your network admins for help.


    \_(ツ)_/

    Wednesday, December 9, 2015 5:59 AM
  • I will note that a SID all by itself is not of much use.

    How do you knowoit is an admin on your PC?  If it is in the admins group then it is likely an orphaned SID from the domain. 

    Again - ask you network admins for help with this. 

    Also this is a scripting forum; it is not an end user help desk.  If you need help with repairs you can post here: http://answers.microsoft.com


    \_(ツ)_/

    Wednesday, December 9, 2015 6:03 AM
  • I promise that is where I copied it from, but I have been looking for it for a while

    and iam on a personal computer at home running a hot spot, I can not find any where how to break it down

    • Edited by dave133768 Wednesday, December 9, 2015 6:05 AM
    Wednesday, December 9, 2015 6:03 AM
  • so does that mean I have a (RAT) on me

    Wednesday, December 9, 2015 6:07 AM
  • thank you I appreciate your time have a good night.
    Wednesday, December 9, 2015 6:21 AM
  • Sorry but you are posting in the wrong forum for this.


    \_(ツ)_/

    Wednesday, December 9, 2015 9:50 AM
  • It is possible to convert a SID into a distinguished name, but that does not look like a valid SID.

    A PowerShell script to convert a SID value into a sAMAccountName and a distinguishedName:

    $Value = "S-1-5-21-75386823-150241971-839251251-1143"
    $User = [ADSI]"LDAP://<SID=$Value>"
    "$Value (" + $User.sAMAccountName + ")"
    $User.distinguishedName
    
    But my example is a normal SID. Note that the RID in my example is 1143. The RID in your example is ridiculus, unless you have more than 3.2 billion objects in your domain, which is not possible. This is an invalid value.

    Richard Mueller - MVP Directory Services


    Wednesday, December 9, 2015 10:50 AM
  • The string has little t do with domains and SIDs as it is a part of the registration log for Microsoft COMMS.  It is not a value that is intended to be used outside of registering a comm channel to a Microsoft source.  It is likely a SID plus a GUID that is used to uniquely identify a transaction with the MS coms service.

    \_(ツ)_/

    Wednesday, December 9, 2015 6:21 PM
  • Note that the SID-like string is NOT and administrator on your machine.


    \_(ツ)_/

    Wednesday, December 9, 2015 6:25 PM
  • The Comms folder/files are from installing XBoxLive. Post in Xbox forum to get more info o what this is used for.

    "Microsoft.CommsPhone_2.12.2002.0" is Xbox live support software.


    \_(ツ)_/

    Wednesday, December 9, 2015 6:39 PM