Comparing SIDs

Q: How can I compare the SID in the SouceDomain and the SIDHistory in the target domain to see if the migration medn well?

A: There are a couple of methods:

1) Use ldp.exe

   Start ldp.exe
   Choose Connection/Connect…
      (Type server or leave blank to connect to localhost)
   Choose Connection/Bind… to select user.
      (leave blank for current user)
   Choose View/Tree… to select base DN
      (leave blank for current domain)
   Browse to a user to see the attributes for that user

Do this in both domains and compare the ObjectSID attribute for the user in the Source domain with the SIDHistory attribute for the same user in the TargetDomain.

Note: Different versions of ldp.exe display SID differently

2) Use Adsiedit.msc

   Start Adsiedit.msc
   Browse to the user and view attributes

Do this in both domains and compare the ObjectSID attribute for the user in the Source domain with the SIDHistory attribute for the same user in the TargetDomain.

Comments

Leave a Reply

To respond on your own website, enter the URL of your response which should contain a link to this post's permalink URL. Your response will then appear (possibly after moderation) on this page. Want to update or remove your response? Update or delete your post and re-enter your post's URL again. (Find out more about Webmentions.)