Despite keeping very close track of our users, some departments are very bad at letting us know when one of their users has left the County. The process is that they get deleted from AD, but because nobody passes it on to me, I don't know to remove them from LF. The problem is that I'm often left with these AD remnants (in a format like this: S-1-5-21-4125025994-3592063669-4112362508-1341) that only show up under the groups, and there's no easy way I can tell who they belonged to. Only once did I see a dead account like this under Windows Accounts, and I guess it was recent enough that I could correlate it to a VERY recently removed user by exporting the user list from the Directory Server. After a fairly short period of time, tho, they are gone from there too. I suspect they might be incompletely removed accounts, as my seat counts are otherwise accurate, although I don't know how that could occur.
I don't so much care about WHO they are, but they still show up under the groups domain, and I don't see any way to remove them.
TIA
Elaine Pack - Web Analyst
County of Albemarle, VA