Server Fault is a question and answer site for system and network administrators. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

While trying to get users by ObjectSid, I discover that some person-Object does not have this Attribute. I'm wondering if this is a common case or an error in our directory.
The reason because I want this to know is that I'm writing a program to query LDAP by SID.

share|improve this question
up vote 1 down vote accepted

Within AD's schema, the Person class does not define an Object-SID attribute. The User class does define Object-SID and it is mandatory.

It may be worth noting that neither Top (from which Person is sub-classed) or Organizational-Person (from which User is sub-classed) define Object-SID. Object-SID is defined on the User class via its Auxiliary Class, Security Principal.

share|improve this answer
Thank you very much @jscott, that is I wanted to know! – mtm Aug 18 '11 at 6:34

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.