How to remove automatically generated entries from the Access Control List

Answer

1. Stop all GFI MailEssentials services
2. Browse to the following file in the GFI MailEssentials installation directory:
   • ...GFI\MailEssentials\Emailsecurity\Data\usermanagement.xml 
   • ...\GFI\MailEssentials\Attendant\data\usermanagement.xml (MailEssentials 2014 R2 and later)
3. Backup the xml file before doing any editing. Locate the following tag in the file:
   • <User> 
4. Remove the User group entry of any account you do not want to have access. The SID listed is the Windows Security Identifier. If you are not familiar of which accounts these SID's pertain to, you can visit this link for more general information: http://support.microsoft.com/kb/243330
5. Re-start the GFI MailEssentials Services and check the Access Control List