Questions tagged [sid]

The tag has no usage guidance.

Filter by
Sorted by
Tagged with
0 votes
1 answer
14 views

Windows users can create files in world-writable Qumulo NFS share but Linux users cant

I have a Windows domain and a domain joined Windows client and a domain joined SSSD Linux client The Qumulo storage array is serving a share I'm looking at here and contains mostly world writable ...
user avatar
0 votes
0 answers
15 views

Is the WinRMRemoteWMIUsers_ (one underscore) group different from WinRMRemoteWMIUsers__ (two underscores)?

I was looking a the SIDs in my domain and came across a group with the name WinRMRemoteWMIUsers__ (two underscores) with a RID of 1000 under the domain SID. I'd been under the impression that SIDs ...
user avatar
  • 187
0 votes
0 answers
22 views

How to change IIS Pool Process Integrity Level

I can not locate where can I change the Integrity Level of an account that's run a Pool on IIS On this capture you can see that One pool is run with High Integrity and the other with Medium. The high ...
user avatar
  • 174
2 votes
2 answers
941 views

Office 365 Exchange Public Folder lost SID assignment to security group folder permissions

We installed a new Exchange 2016 server and migrated all the mailboxes from the Exchange 2010 server to it. Then we migrated all the mailboxes and public folders from MSEX2016 to Office 365, and we ...
user avatar
-1 votes
1 answer
103 views

Duplicated local account SIDs after Windows 10 upgrade

I have a Windows 10 VM recently upgraded to 20H2. Prior to upgrade I had cloned and sysprepped it to create a test system, and mimicked the upgrade process on there first. After a successful upgrade ...
user avatar
1 vote
1 answer
238 views

Assign a specific machine SID to a new Windows system

Windows Setup assigns a unique machine SID to a Windows system at install time. The machine SID is not exposed over the network, and as such it usually does not matter what it is, but local users' ...
user avatar
1 vote
0 answers
102 views

How to save ACLs of a directory tree and then restore it on another server, as SID mapping is not guaranteed?

ICACLS can save ACL of a tree with the command below, where a_dir_root is the root of this tree: icacls a_dir_root\ /save AclFile /T /C /Q Of course, groups are identified as SIDs. I want to restore ...
user avatar
  • 113
1 vote
1 answer
554 views

AD best practise delete or just disable?

As an IT company that delivers IT systems, servers and everything for our customers. I'm trying to find the best practice when it comes to Active Directory and users leaving the company. We have ...
user avatar
1 vote
1 answer
322 views

Why does wmic report another SID than whoami /user?

When I execute whoami /user on the command line, I get User Name SID ===================== ============================================== tq84\rene.nyffenegger S-1-5-21-1111111111-...
user avatar
1 vote
1 answer
1k views

Group SID's slow to resolve on Server 2016 (workgroup server, not on a domain)

Anytime I go to the security tab on this new Server 2016 machine it takes over 20 seconds for the custom group SID's to resolve to their local names. Usernames, however, resolve almost instantly, as ...
user avatar
  • 113
0 votes
1 answer
5k views

Windows 10 broken after running newsid

I know newsid was retired by its creator Russinovik almost 10 year ago and so it is definitely a bad idea to run in on windows 10 machine. Anyway I received two new computers which probably were ...
user avatar
  • 353
0 votes
1 answer
4k views

Sysprep didn't change the SID

I'm trying to join a 2012 R2 server to a domain controlled by another 2012 R2 server. The domain is a test domain, but it works. I joined a different server to this domain. But I've been trying to ...
user avatar
  • 973
1 vote
0 answers
76 views

How do you configure sid name lookup over a network trust for historical sids

I have the following problem with sid to name lookups. Domain A has been migrated to Domain B with sid history. Users in Domain B have their primary Domain B sid and a historical sid from Domain A. ...
user avatar
8 votes
4 answers
10k views

Get SID by its objectSid using ldapsearch

I have the objectSid attribute as returned by the ldapsearch command, how can I generate SID from it in human readable format? ldapsearch command: ldapsearch -LLL -H ldap://dc.example.com:389 -b dc=...
user avatar
1 vote
1 answer
86 views

Active Directory Security Identifier

What is meant by an "Identifier Authority" in the SID in Active Directory? In an object's SID in my domain controller denotes 5 which is an NT-Authority. So what actually meant by the Identifier ...
user avatar
  • 11
0 votes
1 answer
2k views

Get SID for each member of a local group

On an Active Directory domain member running Windows 7 I have a local group. It has users and other groups as members: How can I obtain the SID for each member of this local group? I'm aware of the ...
user avatar
5 votes
1 answer
4k views

What does an alias group means in SID context?

Reading https://www.samba.org/samba/docs/man/Samba-HOWTO-Collection/groupmapping.html, I found out that there exists an alias for groups. But what does this alias mean? Does it means that it is ...
user avatar
3 votes
2 answers
8k views

Change SQL Server user SID

I have SQL Server 2012 and I am using domain users (from Active Directory). By mistake users were deleted from AD, created new with identical logins and passwords (but with different SIDs), deleted ...
user avatar
0 votes
1 answer
183 views

What type of SID ends with -0?

I have been parsing through the logs and found a random sid doing authentications against AD. It is as follows "s-1-5-21-xxxxx-xxxxx-xxxxx-0"; It cant be found in domain or forest. I want to know if ...
user avatar
  • 827
-1 votes
1 answer
1k views

Does duplicate machine SID cause problems with Remote Desktop?

I am currently working on a Windows 8.1 image for Dell Venue Pro 11 and have been having some issues with generalizing the image with SysPrep. I am not planning on placing the tablets in a domain, ...
user avatar
0 votes
0 answers
64 views

Microsoft AD DS group membership verification when authorizing user

Can somebody point out to documentation or explain how verification works in AD DS when it is necessary to authorize user to perform some actions. As far as I remember user's SID or token should ...
user avatar
  • 1,275
3 votes
2 answers
140 views

Automatically download, but do not install, upgrades

Running debian stable, I know I can use unattended-upgrades to automatically download and install upgrades. However, running debian unstable, I would be extremely reluctant to automatically install ...
user avatar
  • 226
0 votes
1 answer
553 views

lsass.exe has different version on different Windows 7 x64 machines

On most of machines lsass.exe has version 6.1.7601.23002 On several machines lsass.exe has version 6.1.7601.18798 I suspect that this is a cause of errors ...
user avatar
  • 103
2 votes
1 answer
115 views

Merging SIDs between Forests?

Currently, I have two forests, domain A and domain B with an external, two-way, non-transitive trust. Users in Domain A also have an account in Domain B (not all users in Domain B have an account in ...
user avatar
  • 21
0 votes
1 answer
7k views

Fix unknown sid security groups

I have the following situation: my security groups of the active directory I'm belonging to are not shown anymore in a "friendly name", but I have just the SID. When I run whoami /groups I see a list ...
user avatar
  • 103
4 votes
0 answers
5k views

LSA SID cache keeps old entry for renamed domain user - why?

I have a question about LSA SID cache on a domain member server. Recently I run into the issue when some users after their name was changed in AD has difficulties accessing application I support, and ...
user avatar
  • 1,275
4 votes
1 answer
6k views

SID in AD - SID from psgetsid?

Wondering if anyone can shed some light on some SID confusion. Currently having an issue with some policy applying to a few machines that were all based off the same image. One of our admins, ran ...
user avatar
0 votes
2 answers
5k views

SID's role in joining domains and AD authentication?

Thanks to recent answers to my questions, I was able to use sysprep to create a Windows 7 system image ready for deployment in our organisation. I learned that the process of using sysprep creates a ...
user avatar
  • 835
4 votes
4 answers
8k views

Is a new SID applied when sysprep-ping a Windows image or when deploying?

My organisation currently has Windows XP (yes, I know official support for it ceases in less than 24 hours) and Windows 7 system images made with Symantec Ghost 11 that we routinely deploy to machines....
user avatar
  • 835
10 votes
1 answer
853 views

Can I "merge" two groups using SID history?

I have two AD groups which were erroneously created while there should instead have been only one group; they contain the exact same users. However, these groups have been assigned various permissions ...
user avatar
  • 68.3k
3 votes
1 answer
403 views

Converting physical Win2008 Machine into Hyper-V virtual machine on same box. Change SID?

We only have one hardware box. We converted our C drive into a VHD. We want to run install Hyper-V on our server to then load the new VHD as a virtual machine. We will be updating the physical box ...
user avatar
  • 995
0 votes
1 answer
4k views

I Deleted my own SID from the Registry

Just I deleted my own SID from the registry (HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\ProfileList) in windows 2008 R2 server then I logged off. Now tried to log in but getting ...
user avatar
1 vote
3 answers
7k views

Domain Admins group not added to local administrators group

On a new AD, I have joined a local computer (W2008 Server R2) to the domain. After the reboot, I could not log with the domain administrator account to the machine. Using the local admin, the "...
user avatar
  • 1,791
3 votes
3 answers
52k views

Find deleted username from SID in Windows Active Directory

I have a need to find a username that was deleted from the AD using only the SID. I understand that Windows AD leaves being a Tombstone file that might contain this information. Can someone give me ...
user avatar
  • 323
4 votes
1 answer
3k views

SIDs in Active Directory GPO

I am looking into some weird issues with active directory and group policy. This domain has been upgraded from windows NT and has had a few different administrators over the years. I am looking ...
user avatar
0 votes
1 answer
2k views

One established server reports "Invalid SID" for a new Samba user

We have two linux samba servers authenticating against LDAP that have been working fine for some time. Recently I added a new user to LDAP. He can log in fine to one server, but the other reports an "...
user avatar
  • 996
7 votes
2 answers
8k views

Where can I get the default /etc/hosts file for Debian Sid?

I've somehow deleted /etc/hosts on my testing system, which is Debian Sid. Now I want to install the default /etc/hosts. I tried dpkg -S /etc/hosts to find out which package contains /etc/hosts, but ...
user avatar
2 votes
2 answers
35k views

How do I get the Active Directory user ID?

Firstly, I don't even know whether the "user ID" is the correct term here. The context is that I'm using VisualSVN Server to manage / administer access rights on my SVN repositories with Windows ...
user avatar
  • 192
2 votes
2 answers
2k views

Sysprep on an already deployed system?

I've done some digging on the site and around, and I haven't seen anything that quite addresses my problem. I have recently deployed a WSUS 3.0 SP2 hierarchy to a new data center and a pair of ...
user avatar
6 votes
1 answer
6k views

Active directory with duplicate machine SIDs

I have a number of machines running Win2k3 and 2k8R2 that I would like to join to a domain. All the machines have been imaged from the same image, without using sysprep or anything similar. This ...
user avatar
  • 5,562
1 vote
1 answer
2k views

Automatically delete orphaned SIDs

Does someone know a tool that allows to delete orphaned SIDs on a fileserver without the need for any scripting?
user avatar
-6 votes
1 answer
221 views

Migrate profiles from x86 to x64 Vista? [closed]

I want to move my Vista install from x86 to x64, but retain the user profiles with all the files and so. Microsoft does not seem to provide an upgrade option In the XP days, recreate the user ...
user avatar
  • 118
0 votes
2 answers
3k views

Why doesn't shared config on IIS 7.5 replicate app pool identity SIDs?

We have an IIS 7.5 server farm set up using shared config. The config files were exported to a network share accessible to both machines. We know the shared config is working because everything is ...
user avatar
0 votes
1 answer
2k views

Remove security permissions from AD objects for old SID´s

I have the following problem. Recently we have migrated from Notes/Domino to Exchange 2010. We had some problems with the first installation. In case of that we decided to reinstall Exchange. Stupid ...
user avatar
  • 109
4 votes
4 answers
75k views

How to get (AD) LDAP person entry by SID?

Given the SID of a user or a group, how can I find a LDAP object that belongs to it? LDAP Server ist Active Directory (Windows Server 2008). A LDAP query String would be useful.
user avatar
  • 57
1 vote
2 answers
2k views

What does mean domain in SID: S-1-5-21domain-500

I found following page with documentation: http://support.microsoft.com/kb/243330. Now there is a mysterious domain string in SID. I understand that when I want to use this sid with this mysterious ...
user avatar
  • 299
4 votes
3 answers
3k views

SID changed on exchange, trust is broken between AD and exchange

I V2V a Hyper-V guest in production running Exchange 2007 to ESXi 4.1 last night. Today I discovered that while the exchange works, I am not able to add new organizations and mailboxes to it. Been ...
user avatar
  • 4,330
0 votes
1 answer
3k views

What is host/computer SID in Windows AD? and what is needed to identify the elements of network with it? [closed]

SID as http://en.wikipedia.org/wiki/Security_Identifier 1) Help me to clarify the concept of computer SID on hypothetical situation: suppose, I want to secure a network cable (for ex., from a ...
user avatar
0 votes
2 answers
354 views

Debian unstable box has old version of a package, refuses to update, breaking an install

I need to install python-twisted, so... $ sudo aptitude install python-twisted [[...]] The following packages have unmet dependencies: python-twisted-mail: Depends: python-twisted-core (>= 10.1) ...
user avatar
  • 101
2 votes
1 answer
353 views

postfix Mail filters not running behind a controlled enviornment

I have deployed a postfix(2.6.6) server for email receiving. On this I have configured SenderID + SPF milter, by referring to http://www.postfix.org/MILTER_README.html The command that I used is as ...
user avatar