-
Title
What is the purpose of the AD Objects “strg00000xxxx”? -
Description
What is the purpose of the AD Objects such as “strg0000000000” and “strg0000000001”?
Note: These entries may also appear in the Windows Event logs for Password Manager as
Event 4738, Microsoft Windows security auditing:
A user account was changed.
Subject:
Security ID: S-1-X-XX-XXXXXXXXX-XXXXXXXX-XXXXXXXXX-XXXXX
Account Name: Password Manager Account
Account Domain: Domain Name
Logon ID: 0x00XXX0X00
Target Account:
Security ID: S-1-X-XX-XXXXXXXXX-XXXXXXXX-XXXXXXXXX-XXXXX
Account Name: Random Generated Account Name
Account Domain: Domain Name
Changed Attributes:
SAM Account Name: -
Display Name: -
User Principal Name: -
Home Directory: -
Home Drive: -
Script Path: -
Profile Path: -
User Workstations: -
Password Last Set: -
Account Expires: -
Primary Group ID: -
AllowedToDelegateTo: -
Old UAC Value: -
New UAC Value: -
User Account Control: -
User Parameters: -
SID History: -
Logon Hours: -
Additional Information:
Privileges: - -
Cause
This is by design. These security auditing entries that are generated can be ignored as Password Manager is only updating the comment attribute. -
Resolution
These Active Directory objects are found in the following Container in Active Directory:
| Users | PMReplication |
The purpose of these objects is to facilitate Replication between different instances of Password Manager in a Password Manager realm.
The size of the objects should remain static as long as the amount of data contained in the shared.storage file remains static. If there is extra data added to shared.storage, customized emails for example, then the number and size of these objects will increase.
For more information please see: Password Manager Administration Guide .