Avatar of jskfan
jskfan
Flag for Cyprus asked on

Active Directory Group SID

Active Directory Group SID

I have read online that SID  and GUID  are created whenever you create new object in Active Directory.
SID is only unique in its Domain , GUID unique in its forest and even world wide.
Not sure how GUID uniqueness is controlled world wide ?

For SID if it is user object and it is moved out of the domain, its SID will change.

What about the SID related to user Group, will that be changed if it is moved to another Domain ?

Thank you
Active Directory

Avatar of undefined
Last Comment
jskfan

8/22/2022 - Mon
ASKER CERTIFIED SOLUTION
Michael B. Smith

THIS SOLUTION ONLY AVAILABLE TO MEMBERS.
View this solution by signing up for a free trial.
Members can start a 7-Day free trial and enjoy unlimited access to the platform.
See Pricing Options
Start Free Trial
GET A PERSONALIZED SOLUTION
Ask your own question & get feedback from real experts
Find out why thousands trust the EE community with their toughest problems.
Henrik Johansson

It doesn't matter of object class (user, group etc).
Object's SID is based on domain's SID + object's RID in current domain, and the object's SID will change when moving object to another domain
Object's previous SID is stored in SIDhistory attribute on object.
jskfan

ASKER
Thank you
I started with Experts Exchange in 2004 and it's been a mainstay of my professional computing life since. It helped me launch a career as a programmer / Oracle data analyst
William Peck