Server Fault is a question and answer site for system and network administrators. It's 100% free, no registration required.

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

Are Security Identifiers in AD case-sensitive? How I can check this?

share|improve this question
up vote 13 down vote accepted

From the same link you've provided in your question:

The formal string syntax is given in section

Alright, let's follow that link and read that page (emphasis, mine):

The SID string format syntax, a format commonly used for a string representation of the SID type (as specified in section 2.4.2), is described by the following ABNF syntax, as specified in [RFC5234].

Sounds good, click another link... some more reading...


 ABNF strings are case insensitive and the character set for these
  strings is US-ASCII.
share|improve this answer
You just put my answer to shame :D nice deduction – Mathias R. Jessen Mar 5 '13 at 15:31

A Windows SID structure always begins with S-1 - an uppercase S, a dash, and a 1 - denoting the data type and revision (always 1).

So yes, the SID structure is case-sensitive; BUT SID consumers, like Windows itself for example, does not treat SID's with case-sensitivity

share|improve this answer

A SID is a variable length binary structure. The "standardized notation" for representing it as a string does seem to have a capital S but it really depends on what is parsing the string and whether it will care if the S is capital or not.

That ANBF format isn't 100% accurate: it specifies that sub-authorities can be represented as a 10 digit integer, but 99999 99999 (max value for 10 digits) is outside the range of a ULONG, which is a 32-bit integer. The actual maximum value is 2^32=4294967296.

share|improve this answer

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.