markhoward
Technical User
Hi all,
I'm documenting our group policy configuration at the moment and have found some accounts in the user rights section which are only displayed as SIDs.
My assumption is that these may be accounts that were specified in teh policy but have since been deleted (although I though AD would be clever enough to make the necessary adjustments), but to make sure I was wondering if anyone knew of a SID identification tool i.e. a command line tool which allows you to query an object when you only have its SID and that will then give you the 'friendly' name if one exists.
I'm sure there must be one on the resource kit or something.
Thanks..Mark..
I'm documenting our group policy configuration at the moment and have found some accounts in the user rights section which are only displayed as SIDs.
My assumption is that these may be accounts that were specified in teh policy but have since been deleted (although I though AD would be clever enough to make the necessary adjustments), but to make sure I was wondering if anyone knew of a SID identification tool i.e. a command line tool which allows you to query an object when you only have its SID and that will then give you the 'friendly' name if one exists.
I'm sure there must be one on the resource kit or something.
Thanks..Mark..