May be he exploited the dynamic objects feature in Windows 2003 RTM? http://blogs.dirteam.com/blogs/tomek/archive/2006/06/23/1175.aspx
M@
On 8/14/06,
Han Valk <[EMAIL PROTECTED]> wrote:
Hi,
A smart co-worker deleted the BUILTIN\Incoming Forest Trust Builders group.
Is it possible to recreate this group with the same well known SID?
Authoritative restore is out of the question, deletetion is too long ago.
Han Valk.
List info : http://www.activedir.org/List.aspx
List FAQ : http://www.activedir.org/ListFAQ.aspx
List archive: http://www.activedir.org/ml/threads.aspx