RE: Unknown Account

From: diasmith [MSFT] (diasmith_at_microsoft.com)
Date: 10/30/03 

Date: Thu, 30 Oct 2003 20:50:30 GMT

Hello,

Yes, you can use the sid2name utility:

Microsoft Technical Support has a command-line tool available that will
resolve a fully qualified SID to a user account against a local or remote
user account database. Sid2name.exe was recently built to resolve SID
references in Security Audit Logs.

SID2NAME is a utility program to look up the user account name associated
with a Windows NT, or higher, security identifier (SID). The command takes
one argument, the SID, and performs a lookup in the Windows NT account
database. An optional command argument can specify on which Windows NT
computer to perform the lookup for computer-specific (local) accounts.

The generic form of the command is:

        sid2name <sid> [\\ComputerName] | [ComputerName]
        

Example:

To find out what user account name is associated with the SID
S-1-5-21-456721184-3344012123-1234567890-1234, type the following line at
the command prompt:

        sid2name S-1-5-21-456721184-3344012123-1234567890-1234

The information that is returned will be similar to the following

           DOMAIN\fred, is a user.
                                        

where DOMAIN is the domain name, or computer name, for the user account.
SID2NAME also identifies SIDs for security principals that are groups.

Additional Examples:

- When this line is typed at the command prompt sid2name
S-1-5-21-2092848103-1120294241-1737835142-1001
                
   you may see DOMAINNAME\randy, is a user.
                                                                

- When this line is typed at the command prompt sid2name
S-1-5-21-2092848103-1120294241-1737835142-1001 randy2
                
   you may see DOMAINNAME\randy, is a user.
                                                                

- When this line is typed at the command prompt sid2name
S-1-5-21-2092848103-1120294241-1737835142-1001 \\randy2
                
   you may see DOMAINNAME\randy, is a user.

PS. I have attached the file to this email.

Thank You.

Diana.
                                                                
diasmith@online.microsoft.com

This posting is provided "AS IS" with no warranties, and confers no rights.

Relevant Pages

  • RE: sid
    ... resolve a fully qualified SID to a user account against a local or remote ... Sid2name.exe was recently built to resolve SID ... An optional command argument can specify on which Windows NT ... - When this line is typed at the command prompt ...
    (microsoft.public.win2000.security)
  • Re: modifying path
    ... Most folks set their paths in a file called .bashrc (you will need to ... The MANPATH is where the MAN command looks for man pages. ... >i usually install or administer stuff from my user account on behalf of ... i queried my path for both root and my user account. ...
    (linux.redhat)
  • Re: Admin Printer Setup?
    ... I seem to be doing something wrong with the syntax. ... >user account to the local Administrators group (while ... open a command prompt and use this command: ... >> to connect to a network printer. ...
    (microsoft.public.win2000.printing)
  • Re: Win XP Pro Cleanup options
    ... > | when I logon under My User Account Name, I still can only see the ... > As for only being able to see the Temporary Internet Files (and not ... > into your own account then use the command prompt and the ... If your TIF folder has a large number of files your command ...
    (microsoft.public.windowsxp.general)
  • Re: creat user from command prompt
    ... >> prompt, but I need to know if I can enter the program name that will ... > Will display the options required to create a user account from the command ... > Mike Brannigan ...
    (microsoft.public.windowsxp.newusers)