Recreating deleted accounts does not restore permissions

Recreating an account that was previously deleted does not restore the permissions that were formerly assigned to that account.

This is because all accounts are identified by means of a unique identifier that is separate from the account name. When an account is deleted, the account's access rights are deleted, but the account's unique identifier is not deleted. This means that a new account with the identical name does not automatically have access to the same resources that the old one did because it has a new unique identifier.

As part of recreating the account, recreate the security settings of the account either by adding the account to a group that already has security settings defined for it, or by creating permissions for the account when securing a resource.

Using the name of a deleted account as the name of a new account is permitted only if the security policy

Keep record of deleted accounts

is disabled.