Ok, so after reading that forum post, maybe I'm not interpreting what I got out of the tool correctly. All I got with psgetsid \\* was the "common" part of the SID, without the RID. I did a quick check of the domain SID, including the RID by psgetsid domain\computername$, and the RIDs of the two machines I checked are different, even though the rest of the SID is identical.
Joe Heaton Employment Training Panel -----Original Message----- From: Richard Stovall [mailto:[email protected]] Sent: Friday, June 05, 2009 12:08 PM To: NT System Admin Issues Subject: RE: NewSID What is the exact syntax you're using for psgetsid? It may not be showing you exactly what you want or need. http://forum.sysinternals.com/forum_posts.asp?TID=13518 -----Original Message----- From: Joe Heaton [mailto:[email protected]] Sent: Friday, June 05, 2009 1:58 PM To: NT System Admin Issues Subject: RE: NewSID Yes, yes they are in an AD domain. Joe Heaton Employment Training Panel -----Original Message----- From: Richard Stovall [mailto:[email protected]] Sent: Friday, June 05, 2009 10:51 AM To: NT System Admin Issues Subject: RE: NewSID Are these on an AD domain? Something is definitely wacky if they are. -----Original Message----- From: Joe Heaton [mailto:[email protected]] Sent: Friday, June 05, 2009 1:42 PM To: NT System Admin Issues Subject: RE: NewSID Ok, here's another aspect of this issue that just came to light. I have servers, which were all built from scratch, no imaging, that have duplicate SIDs. Any ideas how this could have happened? Joe Heaton Employment Training Panel -----Original Message----- From: Andy Ognenoff [mailto:[email protected]] Sent: Friday, June 05, 2009 10:36 AM To: NT System Admin Issues Subject: RE: NewSID I've only ever used it as part of the cloning process so I can't speak to the other scenarios. - Andy O. >-----Original Message----- >From: Joe Heaton [mailto:[email protected]] >Sent: Friday, June 05, 2009 12:32 PM >To: NT System Admin Issues >Subject: RE: NewSID > >I'm going to be implementing it as a part of the cloning process from here >on, but right now, I have around 60 machines in use that I need to run it >on. > >Does it need to be run under an admin login, or does it grant itself the >rights it needs? Will runas work well enough, or do I need to be logged >into the machine? > >Joe Heaton >Employment Training Panel ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ <http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/> ~ ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ <http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/> ~ ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ <http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/> ~ ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ <http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/> ~ ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ <http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/> ~ ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ <http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/> ~ ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ <http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/> ~
