I would expect that some names from cross-domain trusts could show up as unresolved SIDs but one needs to be really careful because there may be a transient reason why they don't resolve and should not be deleted. I prefer to have a human make the decision.
_________________________
Give a man a fish and he will be back for more. Slap him with a fish and he will go away forever.
