What suffix does the built-in Administrator account's SID usually have?

Study for the SANS560 GIAC Penetration Tester (GPEN) Test. Study with flashcards and multiple choice questions, each question has hints and explanations. Get ready for your exam!

Multiple Choice

What suffix does the built-in Administrator account's SID usually have?

Explanation:
SIDs identify accounts by a unique numeric tail called the RID. The built-in Administrator account uses a fixed RID of 500, so its SID ends with 500. In a domain, you’ll see something like S-1-5-21-<DomainSID>-500, preserving that same RID. This tail distinguishes Administrator from other built-in accounts (for example, Guest uses 501).

SIDs identify accounts by a unique numeric tail called the RID. The built-in Administrator account uses a fixed RID of 500, so its SID ends with 500. In a domain, you’ll see something like S-1-5-21--500, preserving that same RID. This tail distinguishes Administrator from other built-in accounts (for example, Guest uses 501).

More Multiple Choice Questions
Subscribe

Get the latest from Passetra

You can unsubscribe at any time. Read our privacy policy