Comparing SIDs

Q: How can I compare the SID in the SouceDomain and the SIDHistory in the target domain to see if the migration medn well?

A: There are a couple of methods:

1) Use ldp.exe

   Start ldp.exe
   Choose Connection/Connect…
      (Type server or leave blank to connect to localhost)
   Choose Connection/Bind… to select user.
      (leave blank for current user)
   Choose View/Tree… to select base DN
      (leave blank for current domain)
   Browse to a user to see the attributes for that user

Do this in both domains and compare the ObjectSID attribute for the user in the Source domain with the SIDHistory attribute for the same user in the TargetDomain.

Note: Different versions of ldp.exe display SID differently

2) Use Adsiedit.msc

   Start Adsiedit.msc
   Browse to the user and view attributes

Do this in both domains and compare the ObjectSID attribute for the user in the Source domain with the SIDHistory attribute for the same user in the TargetDomain.

Comments

Leave a Reply