Solved

How to verify SID history?

Posted on 2012-03-12
2
949 Views
Last Modified: 2012-06-27
Hi,


I have a user who is migrated to different domain with his SID history. The same user can't acces to old server which is still on old domain but another user can.
How can I verify a user SID history and make sure he still has the old SID link to his AD account?

For Exemple: Windows 2003 and AD 2003

UserX.domain1.com
UserY.domain1.com

Server1.doamin1.com


Both users are migrated to domain2.com so: UserX.domain2.com et UserY.domain2.com

UserY.domain2.com can still access to Server1.doamin1.com but not UserX.domain2.com


How can't I verify the SID history of old account is still linked to UserX.domain2.com?
0
Comment
Question by:SAM2009
2 Comments
 
LVL 6

Accepted Solution

by:
dave_it earned 500 total points
ID: 37715184
Using a program like LDP or ADSIEdit, look at the sIDHistory attribute on the user for any SIDs.  From there, if you know the format of the SID for the old directory, you should be able to quickly determine if a SID from that old domain is attached to the user account in question.
0
 
LVL 1

Author Closing Comment

by:SAM2009
ID: 37723341
Thank you!
0

Featured Post

Windows Server 2016: All you need to know

Learn about Hyper-V features that increase functionality and usability of Microsoft Windows Server 2016. Also, throughout this eBook, you’ll find some basic PowerShell examples that will help you leverage the scripts in your environments!

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Suggested Solutions

On July 14th 2015, Windows Server 2003 will become End of Support, leaving hundreds of thousands of servers around the world that still run this 12 year old operating system vulnerable and potentially out of compliance in many organisations around t…
In this article, I am going to show you how to simulate a multi-site Lab environment on a single Hyper-V host. I use this method successfully in my own lab to simulate three fully routed global AD Sites on a Windows 10 Hyper-V host.
This tutorial will walk an individual through the process of transferring the five major, necessary Active Directory Roles, commonly referred to as the FSMO roles to another domain controller. Log onto the new domain controller with a user account t…
This Micro Tutorial hows how you can integrate  Mac OSX to a Windows Active Directory Domain. Apple has made it easy to allow users to bind their macs to a windows domain with relative ease. The following video show how to bind OSX Mavericks to …

863 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

26 Experts available now in Live!

Get 1:1 Help Now