3 Best Ways –Fix Account Unknown S-1-5-21 issue on Windows 11?

What is S-1-5-21? It is part of a Security Identifier (SID) in the Windows operating system. SIDs are unique identifiers representing user accounts,groups,and other security principals in Windows. They are essential for managing permissions and access control. SIDs are often seen in the Windows Registry or File System,mapping user profiles. You might be puzzled or worried when you see Account Unknown with an associated S-1-5-21 SID in folder permissions,group policies,or the registry. Here in this article,we will make an in-depth analysis of this identifier and fix this issue on Windows 11. Check out:How to Hide Unhide Drives or Volumes in Windows 11?

Why do you see Account Unknown S-1-5-21-SID in your Windows 11?

The appearance of “Account Unknown S-1-5-21-SID”in Windows 11 is typically linked to orphaned or unresolved user account references. The following are the reasons.

1. Deleted User Accounts
2. System Migrations or Restorations
3. Domain Account Changes (in Enterprise Environments)
4. Software Installations or Uninstallations
5. Misconfigured User Profiles

When I Encounter “Account Unknown S-1-5-21 SID”,Should I be worried?

“Account Unknown S-1-5-21”in Windows is not a cause for immediate alarm,however,it depends on the context. For example,if you have recently deleted a user account,or you are viewing old backup or migrated data,or if you encounter this identifier in non-critical locations(usually a sign of outdated or redundant entries),then it may be harmless and not a security issue.

However,if you encounter this identifier in Group Policies,Administrative shares,System Settings,or Registry keys,especially in cases where you did not delete any users,it raises security concerns. This situation requires investigation,cleanup of orphaned entries,and ensuring the system’s security to prevent potential breaches.

Understanding S-1-5-21 SID

Let’s break down this identifier.

• S –Indicates it is an SID.
• 1 –The version of the SID Format.
• 5 –Denotes a predefined identifier authority,specifically the NT Authority.
• 21 –Represents a unique machine or a domain identifier.

Method 1:How to Fix “Account Unknown S-1-5-21”SID on Windows 11?

Before getting into the fix,it is highly recommended to determine why this SID is appearing. It may be just a leftover reference if a user account is deleted,in Domain Environments,the account may have been removed or disconnected from the domain,a backup restoration might have left old permissions linked to a non-existent account,or a software might have added service accounts or special user accounts during installation. Here are the steps to fix this.

• Right-click on the File or Folder that shows the Account Unknown S-1-5-21 SID. In my case,it is a folder E Disk.

• Click on Properties. It will open the File or Folder Properties.
• Now,navigate to the Security tab.

• Click Advanced to open the advanced security settings.

• You can find the Change Permissions button. Click on that.

• Look for the “Account Unknown S-1-5-21”entry in the Permissions list. Select it and then click Remove.

• Now,the account will be removed. Finally,click Apply.

• Windows will update the security information,kindly be patient.

• Once it completes the process,that is it. You can close the window.
• Reopen the same folder Properties again. Now,you can find that the Account Unknown S-1-5-21 has been removed.

Video walkthrough for fixing Account Unknown SID Issue

Method 2:Remove Account Unknown S-1-5-21 using Command Prompt

There is an alternate approach available using the Command Prompt that can be just as efficient,especially for advanced users or when dealing with system-wide issues. This method provides a way to reset permissions or remove the “Account Unknown”entry from specific files or folders effectively.

• Go to the Start menu and search for Command Prompt. Right-click on the Command Prompt,and click on Run as Administrator.

• On the CMD,enter the following command and execute it. icacls "C:\Path\To\Folder" /reset

Note:Here,replace the Path to Folder with the actual folder path where the orphaned SID appears.

Method 3:Delete Account Unknown S-1-5-21 Profile using Regedit

In this method,we will use the Windows registry Editor to remove the S-1-5-21 SID from your Windows 11 PC. Here are the steps.

• We will the Run command to open Registry Editor. Use the shortcut Win Key + R to open the Run command.
• On the Run,enter the following command regedit and click OK.

• User Account Control will prompt for your confirmation,click Yes.
• Now,Registry Editor will open. Navigate to the following location where all the Profiles list can be found. HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\ProfileList

• Look for the folder (Registry key) that is named S-1-5-21………
• Right-click on the folder and then click Delete.

• Windows will prompt for your confirmation. Click Yes to confirm the deletion. Kindly make sure to delete only the S-1-5-21…Registry Folder.

• That is it. Account Unknown SID will now be removed via the Registry Editor.

Information on the Go!

The S-1-5-13 SID is associated with a special security identifier in Windows that typically represents a restricted user group called “Enterprise Domain Controllers”. This group is specifically used in environments with Active Directory (AD),typically on domain controllers.

Frequently Asked Questions

Take away

In most cases,encountering “Account Unknown S-1-5-21” or similar SIDs on Windows 11 is not a cause for alarm. If the S-1-5-21 SID appears in critical areas like Group Policies,administrative shares,or the Windows Registry,it may indicate a need for cleanup and further investigation to prevent potential threats. Regular maintenance,such as periodic checks for orphaned SIDs,will help ensure that your system remains secure and runs efficiently. Happy Computing! Peace out!

Have Queries?

If you have queries,kindly let us know in the comment section.