Re: Problem to get SID with 2003 server.

From: Dave Christiansen [MS] (davidchr_at_online.microsoft.com)
Date: 09/05/03


Date: Fri, 5 Sep 2003 10:44:21 -0700


Are you looking at the token user SID, or just other SIDs in the token?

You mention that this is a domain account. Is it possible that the account
has sid-history set on it? Also, what does LookupAccountSid return for the
other SIDs?

-- 
This message is provided "AS IS" with no warranties, and confers no rights.
This message originates in the State of Washington (USA), where unsolicited
commercial email is legally actionable (see
http://www.wa.gov/ago/junkemail).
Harvesting of this address for purposes of bulk email (including "spam") is
prohibited unless by my expressed prior request.  I retaliate viciously
against spammers and spam sites.
"Dmitriy" <dmitriys@fundrunner.com> wrote in message
news:1f4501c37303$a8698690$a401280a@phx.gbl...
> Can anybody explain why I get different SID for the same
> account from the process token and from the domain
> controller with the Windows 2003 server. Plus, it doesn't
> match to real account SID from registry. Difference is
> just in one level (number 5) of subauthority value.
> For example:
> S-1-2-3-123456-987654-111222-1112
> S-1-2-3-123456--543210-111222-1112
> S-1-2-3-123456-918273-111222-1112
>
>
> Regards,
> Dmitriy.


Relevant Pages

  • Re: EFS Decryption Problem
    ... Was it only used to match up to the backed up userprofile, ... I thought the account's SID and password was involved in generating the ... a new account is created). ... instance of Windows would have a different SID even after restoring the ...
    (microsoft.public.windowsxp.security_admin)
  • Re: Update still failing with 80240020 and 8024000c
    ... There is still indication that the SID ... reporting because I think that ultimately it is going to be their accounts ... with the System account yesterday. ... In your case the System account would be ...
    (microsoft.public.windowsupdate)
  • RE: Error 15401 using sp_grantlogin (not addressed by current KB articles)
    ... argument to get_sid, it returns a sid. ... The sysxlogins.name column stores the NT account ... One way to get SQL Server to agree with the renamed NT ... check "Script all objects", on the Formatting tab UNcheck "Generate the ...
    (microsoft.public.sqlserver.security)
  • Re: is there a simple to get "userid" in a windows domain?
    ... suspect a minor change to the way I access ntSecurityDescriptor would give ... Is it possible to get a User SID from ... >> than the account names when referring to the account. ... >> Eric Fitzgerald ...
    (microsoft.public.security)
  • Re: Cannot obtain account SID using C#/WMI
    ... >>> user mapping is for the default SYSTEM account. ... >>> Is this SID available through WMI? ... This includes loading the user profile, ... you need to make sure that hives are unloaded when done with them! ...
    (microsoft.public.dotnet.languages.csharp)