Yes, any SID that starts with "S-1-15-3" is normal.
two Unknown Accounts
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(128, 8%, 22%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EA%3C/text%3E%3C/svg%3E)
Anonymous
Windows for home | Windows 11 | Accounts, profiles, and login
Locked Question. This question was migrated from the Microsoft Support Community. You can vote on whether it's helpful, but you can't add comments or replies or follow the question.
3 answers
Sort by: Most helpful
-
Anonymous
2024-10-05T12:04:39+00:00 Hello Ramesh,
Thanks for you answer.
Are two capability SIDs normal?
-
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(86.4, 71%, 18%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3ERS%3C/text%3E%3C/svg%3E)
Ramesh Srinivasan 81,805 Reputation points Independent Advisor2024-10-05T11:53:22+00:00 Hi Torben, This is Ramesh.
They're capability SIDs, which are built-in to Windows. They should not be deleted.
The capability SIDs start with the string "S-1-15-3", and the following Microsoft article has more information on this.
Some SIDs do not resolve into friendly names - Windows Server | Microsoft Learn:
https://learn.microsoft.com/en-us/troubleshoot/...
<excerpt from that article>
DO NOT DELETE capability SIDS from either the Registry or file system permissions. Removing a capability SID from file system permissions or registry permissions may cause a feature or application to function incorrectly. After you remove a capability SID, you cannot use the UI to add it back.
</excerpt>