Questions tagged [sid]
58 questions
1
vote
0 answers
How do you configure sid name lookup over a network trust for historical sids
I have the following problem with sid to name lookups.
Domain A has been migrated to Domain B with sid history.
Users in Domain B have their primary Domain B sid and a historical sid from Domain A.
I have a 2 way transitive trust between Domain B…
unknownsidAdmin
- 11
- 1
1
vote
1 answer
Active Directory Security Identifier
What is meant by an "Identifier Authority" in the SID in Active Directory? In an object's SID in my domain controller denotes 5 which is an NT-Authority. So what actually meant by the Identifier Authority and what it points to?
sathya
- 11
- 1
1
vote
2 answers
Get SID for each member of a local group
On an Active Directory domain member running Windows 7 I have a local group. It has users and other groups as members:
How can I obtain the SID for each member of this local group? I'm aware of the Sysinternals utility PSGetSid but it doesn't seem…
I say Reinstate Monica
- 3,132
- 7
- 28
- 52
1
vote
3 answers
Domain Admins group not added to local administrators group
On a new AD, I have joined a local computer (W2008 Server R2) to the domain.
After the reboot, I could not log with the domain administrator account to the machine.
Using the local admin, the "Domain Admins" group is not shown in the…
Saariko
- 1,791
- 14
- 45
- 75
1
vote
1 answer
Automatically delete orphaned SIDs
Does someone know a tool that allows to delete orphaned SIDs on a fileserver without the need for any scripting?
Thomas Gomell
- 21
- 2
1
vote
2 answers
What does mean domain in SID: S-1-5-21domain-500
I found following page with documentation: http://support.microsoft.com/kb/243330. Now there is a mysterious domain string in SID. I understand that when I want to use this sid with this mysterious string I should replace it with a correct domain…
Darqer
- 299
- 1
- 3
- 10
1
vote
1 answer
Assign a specific machine SID to a new Windows system
Windows Setup assigns a unique machine SID to a Windows system at install time. The machine SID is not exposed over the network, and as such it usually does not matter what it is, but local users' security identifiers are based on the machine SID,…
Anton Tykhyy
- 231
- 2
- 8
1
vote
0 answers
How to save ACLs of a directory tree and then restore it on another server, as SID mapping is not guaranteed?
ICACLS can save ACL of a tree with the command below, where a_dir_root is the root of this tree:
icacls a_dir_root\ /save AclFile /T /C /Q
Of course, groups are identified as SIDs. I want to restore them on another server, which has the same group…
Amessihel
- 113
- 8
1
vote
1 answer
Why does wmic report another SID than whoami /user?
When I execute whoami /user on the command line, I get
User Name SID
===================== ==============================================
tq84\rene.nyffenegger S-1-5-21-1111111111-2222222222-3333333333-1224
However, If I execute wmic…
René Nyffenegger
- 135
- 2
- 7
0
votes
1 answer
Windows 10 broken after running newsid
I know newsid was retired by its creator Russinovik almost 10 year ago and so it is definitely a bad idea to run in on windows 10 machine. Anyway I received two new computers which probably were generated from the same image and they had identical…
Filippo
- 377
- 5
- 18
0
votes
1 answer
Sysprep didn't change the SID
I'm trying to join a 2012 R2 server to a domain controlled by another 2012 R2 server. The domain is a test domain, but it works. I joined a different server to this domain.
But I've been trying to create a VM image that could be cloned, and it…
Alan
- 1,003
- 2
- 20
- 36
0
votes
1 answer
SharePoint issues after account SID changed
I have a problem with SharePoint. Basically the SID of my Windows Account changed (not sure why, still investigating) and SharePoint simply doesn't know me anymore - I get access denied messages and the like.
Is there a supported way to change the…
Michael Stum
- 4,050
- 4
- 36
- 50
0
votes
1 answer
What type of SID ends with -0?
I have been parsing through the logs and found a random sid doing authentications against AD. It is as follows "s-1-5-21-xxxxx-xxxxx-xxxxx-0"; It cant be found in domain or forest. I want to know if there is speciality of "-0" at the end?
Darktux
- 827
- 5
- 21
- 36
0
votes
0 answers
Microsoft AD DS group membership verification when authorizing user
Can somebody point out to documentation or explain how verification works in AD DS when it is necessary to authorize user to perform some actions. As far as I remember user's SID or token should contain groups' SIDs added into it, but what I want to…
Mikhail
- 1,295
- 3
- 19
- 35
0
votes
1 answer
lsass.exe has different version on different Windows 7 x64 machines
On most of machines lsass.exe has version 6.1.7601.23002
On several machines lsass.exe has version 6.1.7601.18798
I suspect that this is a cause of errors "Unknown SID type S-1-18-1" after our…
mbergal
- 103
- 1