Hi All,
I have found some orphan SIDs of deleted account in system.
In Local security Policy --> Local policies -->User Rights Assignments -->Logon as a service --> properties.
*S-1-5-21-3011699552-3594421954-571989141-1001
*S-1-5-21-3011699552-3594421954-571989141-1002
Are these service specific SIDs or user account specific SIDs..
Are these SIDs threat to security ?