RE: [ActiveDir] Resolving SIDs
Justin, The only thing that I can think of is Sidtoname.exe. I dont think that you are looking for this however. Can you expand a little bit more on building user information based on SID? -Adeel -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] Behalf Of Clay, Justin (ITS) Sent: Monday, March 06, 2006 9:31 AM To: ActiveDir@mail.activedir.org Subject: [ActiveDir] Resolving SIDs I thought I remember seeing something recently about how to build some user information from a SID. Is this possible or am I dreaming? I don't mean resolving the SID against AD, I actually mean taking a lone SID and building some user information based on just the SID. Thanks, Justin Clay ITS Enterprise Services Metropolitan Government of Nashville and Davidson County Howard School Building Phone: (615) 880-2573 ITS ENTERPRISE SERVICES EMAIL NOTICE The information contained in this email and any attachments is confidential and may be subject to copyright or other intellectual property protection. If you are not the intended recipient, you are not authorized to use or disclose this information, and we request that you notify us by reply mail or telephone and delete the original message from your mail system. attachment: winmail.dat
RE: [ActiveDir] Resolving SIDs
Adeel, I was thinking that I read that without the account database, you could actually gain some information from the SID, using a formula of some type. I dont know if thats actually possible or not. I might have made it up in a dream. Thanks for the info on sidtoname.exe, that might not help here, but I can see it being useful in the future. Thanks, Justin From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Adeel Ansari Sent: Monday, March 06, 2006 2:04 PM To: ActiveDir@mail.activedir.org Subject: RE: [ActiveDir] Resolving SIDs Justin, The only thing that I can think of is Sidtoname.exe. I dont think that you are looking for this however. Can you expand a little bit more on building user information based on SID? -Adeel -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]On Behalf Of Clay, Justin (ITS) Sent: Monday, March 06, 2006 9:31 AM To: ActiveDir@mail.activedir.org Subject: [ActiveDir] Resolving SIDs I thought I remember seeing something recently about how to build some user information from a SID. Is this possible or am I dreaming? I dont mean resolving the SID against AD, I actually mean taking a lone SID and building some user information based on just the SID. Thanks, Justin Clay ITS Enterprise Services Metropolitan Government of Nashville and Davidson County Howard School Building Phone: (615) 880-2573 ITS ENTERPRISE SERVICES EMAIL NOTICE The information contained in this email and any attachments is confidential and may be subject to copyright or other intellectual property protection. If you are not the intended recipient, you are not authorized to use or disclose this information, and we request that you notify us by reply mail or telephone and delete the original message from your mail system. ITS ENTERPRISE SERVICES EMAIL NOTICE The information contained in this email and any attachments is confidential and may be subject to copyright or other intellectual property protection. If you are not the intended recipient, you are not authorized to use or disclose this information, and we request that you notify us by reply mail or telephone and delete the original message from your mail system.
RE: [ActiveDir] Resolving SIDs
The SID is only a number which isissued on each DC to new security principles by first comes first serves, so if you create two users on the same DC you propably have two following SIDs. There's nothing encrypted or magic into the SID, so there are no more informations you can get just out of the SID without resolving it to the domain. Gruesse - Sincerely, Ulf B. Simon-Weidner MVP-Book "Windows XP - Die Expertentipps": http://tinyurl.com/44zcz Weblog: http://msmvps.org/UlfBSimonWeidner Website: http://www.windowsserverfaq.org Profile:http://mvp.support.microsoft.com/profile=""> From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Clay, Justin (ITS)Sent: Monday, March 06, 2006 9:26 PMTo: ActiveDir@mail.activedir.orgSubject: RE: [ActiveDir] Resolving SIDs Adeel, I was thinking that I read that without the account database, you could actually gain some information from the SID, using a formula of some type. I dont know if thats actually possible or not. I might have made it up in a dream. Thanks for the info on sidtoname.exe, that might not help here, but I can see it being useful in the future. Thanks, Justin From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Adeel AnsariSent: Monday, March 06, 2006 2:04 PMTo: ActiveDir@mail.activedir.orgSubject: RE: [ActiveDir] Resolving SIDs Justin, The only thing that I can think of is Sidtoname.exe. I dont think that you are looking for this however. Can you expand a little bit more on building user information based on SID? -Adeel -Original Message-From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]On Behalf Of Clay, Justin (ITS)Sent: Monday, March 06, 2006 9:31 AMTo: ActiveDir@mail.activedir.orgSubject: [ActiveDir] Resolving SIDs I thought I remember seeing something recently about how to build some user information from a SID. Is this possible or am I dreaming? I dont mean resolving the SID against AD, I actually mean taking a lone SID and building some user information based on just the SID. Thanks, Justin ClayITS Enterprise Services Metropolitan Government of Nashville and Davidson County Howard School Building Phone: (615) 880-2573 ITS ENTERPRISE SERVICES EMAIL NOTICEThe information contained in this email and any attachments is confidential and may be subject to copyright or other intellectual property protection. If you are not the intended recipient, you are not authorized to use or disclose this information, and we request that you notify us by reply mail or telephone and delete the original message from your mail system. ITS ENTERPRISE SERVICES EMAIL NOTICEThe information contained in this email and any attachments is confidential and may be subject to copyright or other intellectual property protection. If you are not the intended recipient, you are not authorized to use or disclose this information, and we request that you notify us by reply mail or telephone and delete the original message from your mail system.
