Domain Migration Administrator left unresolved SIDs on the Domain Controllers user rights. (NETIQKB21343)

fact
Domain Migration Administrator 7.x

symptom
Domain Migration Administrator left unresolved SIDs on the Domain Controllers user rights.

cause
This indicates accounts were migrated with the option, 'Update User Rights' selected. The target accounts are then deleted.

fix
Since these are deleted accounts, they can be removed from the user rights.

Formerly known as NETIQKB21343