Want to protect your cyber security and still get fast solutions? Ask a secure question today.Go Premium

x
  • Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 387
  • Last Modified:

Computer sids

I have a problem, I have been asked to look and imaging as the company I'm working for as issues with there many W7 master images..

I have noticed that some PCs are reporting duplicat sids  

If I run PSgetsid on 3 PCs I get these returns..

SID for \\PC1:
S-1-5-21-1305255674-1099027245-2674484874

SID for \\PC2:
S-1-5-21-1305255674-1099027245-2674484874

SID for \\PC3:
S-1-5-21-4098788176-3130592841-3952154111

This would seem to say I have a duplicate on PC 1and PC2

However If I run NTDSutl, on the DC I get no duplicates

and is I run ADfind  

I get


PC1
S-1-5-21-2208487660-598541723-662457061-14148
PC2
S-1-5-21-2208487660-598541723-662457061-14157
PC3
S-1-5-21-2208487660-598541723-662457061-12099

So the DC looks good

So my questing is what am I missing?

The reason I'm looking at this as we are getting some pcs drop off the domain and there are big question around the current images and WSUS


Thanks in advance
0
Nytram
Asked:
Nytram
  • 2
  • 2
1 Solution
 
TazDevil1674Commented:
If you clone XP/W7 machines, you end up with duplicate SIDs, when they joing a Domain they are given a unique Domain SID.

If they are cloned after joining a Domain, they will get a new Domain SID if you leaft and rejoin the Domain.

The only thing that doesnt automatically update is the WSUS Unique ID which can be done by deleting a reg key and WSUS will issue a new one...

Hope this helps
0
 
NytramAuthor Commented:
The 3 PCs

SID for \\PC1:
S-1-5-21-1305255674-1099027245-2674484874

SID for \\PC2:
S-1-5-21-1305255674-1099027245-2674484874

SID for \\PC3:
S-1-5-21-4098788176-3130592841-3952154111

Are on the domain the local sid is different to the one in AD, is this correct?

Martyn
0
 
TazDevil1674Commented:
0
 
Donald StewartNetwork AdministratorCommented:
Also look over

Resolving the duplicate SUSClientID issue, or “Why don’t all my clients show up in the WSUS console?”

http://blogs.technet.com/b/sus/archive/2009/05/05/resolving-the-duplicate-susclientid-issue-or-why-don-t-all-my-clients-show-up-in-the-wsus-console.aspx
0
 
NytramAuthor Commented:
As this Organisation is Migrating domains they are going to take the approach of Refreshing the image as there are many issues with the existing one... its will slow down the Migration but the org will be in a better place afterwards..
0

Featured Post

Receive 1:1 tech help

Solve your biggest tech problems alongside global tech experts with 1:1 help.

  • 2
  • 2
Tackle projects and never again get stuck behind a technical roadblock.
Join Now