Active Directory Question regarding SID's

When coping a user in AD to a different Organisation Unit will this change the users SID number?
RiscsotmAsked:
Who is Participating?

[Product update] Infrastructure Analysis Tool is now available with Business Accounts.Learn More

x
I wear a lot of hats...

"The solutions and answers provided on Experts Exchange have been extremely helpful to me over the last few years. I wear a lot of hats - Developer, Database Administrator, Help Desk, etc., so I know a lot of things but not a lot about one thing. Experts Exchange gives me answers from people who do know a lot about one thing, in a easy to use platform." -Todd S.

helpfinderIT ConsultantCommented:
no, it won´t
David Johnson, CD, MVPOwnerCommented:
no it only changes the membership
RiscsotmAuthor Commented:
How about when moving a user to a sub domain?
Big Business Goals? Which KPIs Will Help You

The most successful MSPs rely on metrics – known as key performance indicators (KPIs) – for making informed decisions that help their businesses thrive, rather than just survive. This eBook provides an overview of the most important KPIs used by top MSPs.

RiscsotmAuthor Commented:
A better question, would be what would cause an SID to change ?
Will SzymkowskiSenior Solution ArchitectCommented:
a SID (Security Identifyer) is an Active Directory low level representation of an AD account. Each AD Object has a SID generated when you create new Objects in Active Directory. A SID will never change within the same domain. The only time a SID will change it if you migrate this user to another domain.

However, when you move a user from one OU to another this does NOT change Group Membership of this user itself.

The only thing that you need to be aware of when moving a user to another OU is the Group Policies that will be applied to the user you moved based on the GPO's that are applied to the OU you moved the user to.

You will also have to take in to consideration regarding Security Filtering on the GPO's as well that are linked to this OU, because if you are using specific groups in your security filtering if this user is not part of these groups, then the GPO's will not be applied.

Will.
helpfinderIT ConsultantCommented:
SID is changed if you move user from one domain to another. but also in this case user has access for defined resources since even SID is changed there is a SID history so original SID is not lost

for more detailed information you can check short MS article

Experts Exchange Solution brought to you by

Your issues matter to us.

Facing a tech roadblock? Get the help and guidance you need from experienced professionals who care. Ask your question anytime, anywhere, with no hassle.

Start your 7-day free trial
It's more than this solution.Get answers and train to solve all your tech problems - anytime, anywhere.Try it for free Edge Out The Competitionfor your dream job with proven skills and certifications.Get started today Stand Outas the employee with proven skills.Start learning today for free Move Your Career Forwardwith certification training in the latest technologies.Start your trial today
Active Directory

From novice to tech pro — start learning today.