Can I resolve the AD group name base on SID if it has been deleted?


I'm seeing only the SID number in the folder security permissions. I believe it is because the group has been deleted from the AD. Can I still find out the name of the group that was deleted based on the SID alone?

Who is Participating?
KenMcFConnect With a Mentor Commented:
You can use PsGetSid from the sysinternals suite
If the object is still tombstoned you can get the name. One way would be to use ADFind from

an example would be

adfind -showdel -f objectsid=S-1-5-21-1140794203-5324537521-3023241126-134678 name
DecarnAuthor Commented:
Is there any other way without a third party tool? Preferably Microsoft tools.
DecarnAuthor Commented:
Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.

All Courses

From novice to tech pro — start learning today.