Still celebrating National IT Professionals Day with 3 months of free Premium Membership. Use Code ITDAY17

x
?
Solved

How to verify SID history?

Posted on 2012-03-12
2
Medium Priority
?
992 Views
Last Modified: 2012-06-27
Hi,


I have a user who is migrated to different domain with his SID history. The same user can't acces to old server which is still on old domain but another user can.
How can I verify a user SID history and make sure he still has the old SID link to his AD account?

For Exemple: Windows 2003 and AD 2003

UserX.domain1.com
UserY.domain1.com

Server1.doamin1.com


Both users are migrated to domain2.com so: UserX.domain2.com et UserY.domain2.com

UserY.domain2.com can still access to Server1.doamin1.com but not UserX.domain2.com


How can't I verify the SID history of old account is still linked to UserX.domain2.com?
0
Comment
Question by:SAM2009
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
2 Comments
 
LVL 6

Accepted Solution

by:
dave_it earned 2000 total points
ID: 37715184
Using a program like LDP or ADSIEdit, look at the sIDHistory attribute on the user for any SIDs.  From there, if you know the format of the SID for the old directory, you should be able to quickly determine if a SID from that old domain is attached to the user account in question.
0
 
LVL 1

Author Closing Comment

by:SAM2009
ID: 37723341
Thank you!
0

Featured Post

Get your Conversational Ransomware Defense e‑book

This e-book gives you an insight into the ransomware threat and reviews the fundamentals of top-notch ransomware preparedness and recovery. To help you protect yourself and your organization. The initial infection may be inevitable, so the best protection is to be fully prepared.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Let's recap what we learned from yesterday's Skyport Systems webinar.
Wouldn't it be nice if objects in Active Directory automatically moved into the correct Organizational Units? This is what AutoAD aims to do and as a plus, it automatically creates Sites, Subnets, and Organizational Units.
Are you ready to implement Active Directory best practices without reading 300+ pages? You're in luck. In this webinar hosted by Skyport Systems, you gain insight into Microsoft's latest comprehensive guide, with tips on the best and easiest way…
There are cases when e.g. an IT administrator wants to have full access and view into selected mailboxes on Exchange server, directly from his own email account in Outlook or Outlook Web Access. This proves useful when for example administrator want…

715 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question