Find files where the owners are unresolveable SIDs

Details

Find files where the owner is an unresolved or orphaned SID. Just change the scan_target line to make the query work for your environment.

Code

 SELECT
    sd.identity_system,
    sd.scan_target,
    sd.fullpath,
    sd.size AS size,
    srs.byte_string(sd.size) AS size_string,
    sd.create_time,
    sd.modify_time,
    sd.access_time,
    sd.owner_display_name
FROM
    srs.current_fs_scandata_ad AS sd
WHERE
    (sd.scan_target = '\\ad.cctec.org\Shares\Home') AND
    (sd.owner_display_name LIKE ('S-%') Escape '#')

Author

rlagger

Post date

Thursday, November 1, 2018 - 11:02

Last modified

Friday, April 26, 2024 - 12:48

Properties

Supported Version

4.1

4.0

3.6

Report Category