how to get group policy for duplicate sid

Question

how to get group policy for duplicate sid

Ron Sigmon 0

duplicate sid on cloned computer. trying to get temporary group policy

LOUIS LOPEZ 25 Reputation points

2026-02-05T10:22:37.5133333+00:00

echo THIS FIXES THE DUPLICATE SID AND PASSWORD IS CORRECT BUT DOESN'T WORK

echo Install the Windows 11 24H2, Windows 11 25H2 and Windows Server 2025 KB5065426 250923_06201 Known Issue Rollback.msi

echo https://download.microsoft.com/download/c6c70455-59ce-4d47-b13c-56b99d0435f1/Windows%2011%2024H2%2c%20Windows%2011%2025H2%20and%20Windows%20Server%202025%20KB5065426%20250923_06201%20Known%20Issue%20Rollback.msi

echo Run powershell as Administrator

echo This compliments the duplicate SID failure on the computer accessing the host

New-Item -Path HKLM:\SYSTEM\CurrentControlSet\Policies\Microsoft

New-Item -Path HKLM:\SYSTEM\CurrentControlSet\Policies\Microsoft\FeatureManagement

New-Item -Path HKLM:\SYSTEM\CurrentControlSet\Policies\Microsoft\FeatureManagement\Overrides

Set-ItemProperty -Path "HKLM:\SYSTEM\CurrentControlSet\Policies\Microsoft\FeatureManagement\Overrides" -Name "1517186191" -Type 'DWord' -Value 0 -Confirm:$false

echo Reboot after this

Now map the drive and it works
Viet Ho Van 0 Reputation points

2026-03-18T04:23:24.26+00:00

Thank you for sharing. I have resolved the issue.

Answer recommended by moderator

3 additional answers

Your answer

LOUIS LOPEZ 25 Reputation points

2026-02-05T10:22:37.5133333+00:00

echo THIS FIXES THE DUPLICATE SID AND PASSWORD IS CORRECT BUT DOESN'T WORK

echo Install the Windows 11 24H2, Windows 11 25H2 and Windows Server 2025 KB5065426 250923_06201 Known Issue Rollback.msi

echo https://download.microsoft.com/download/c6c70455-59ce-4d47-b13c-56b99d0435f1/Windows%2011%2024H2%2c%20Windows%2011%2025H2%20and%20Windows%20Server%202025%20KB5065426%20250923_06201%20Known%20Issue%20Rollback.msi

echo Run powershell as Administrator

echo This compliments the duplicate SID failure on the computer accessing the host

New-Item -Path HKLM:\SYSTEM\CurrentControlSet\Policies\Microsoft

New-Item -Path HKLM:\SYSTEM\CurrentControlSet\Policies\Microsoft\FeatureManagement

New-Item -Path HKLM:\SYSTEM\CurrentControlSet\Policies\Microsoft\FeatureManagement\Overrides

Set-ItemProperty -Path "HKLM:\SYSTEM\CurrentControlSet\Policies\Microsoft\FeatureManagement\Overrides" -Name "1517186191" -Type 'DWord' -Value 0 -Confirm:$false

echo Reboot after this

Now map the drive and it works
Viet Ho Van 0 Reputation points

2026-03-18T04:23:24.26+00:00

Thank you for sharing. I have resolved the issue.

Answer 1

GTS-NJ 575 Volunteer Moderator

This is the only fix I have found to actually work for the duplicate SID problem. (Credit to AksWoody.com)

Download and run this on the Guest PC (the one accessing the shares).

Windows 11 24H2, Windows 11 25H2 and Windows Server 2025 KB5065426 250923_06201 Known Issue Rollback.msi

from

https://download.microsoft.com/download/c6c70455-59ce-4d47-b13c-56b99d0435f1/Windows%2011%2024H2%2c%20Windows%2011%2025H2%20and%20Windows%20Server%202025%20KB5065426%20250923_06201%20Known%20Issue%20Rollback.msi

Then in Local Group Policy Editor (gpedit.msc) -

Local Computer Policy / Administrative Templates \ KB5065426_20250923_06201 Known Issue Rollback

Set to Disabled.

Reboot

Alternatively this can be done with a registry change. (I haven't tested this one.)

HKLM\SYSTEM\CurrentControlSet\Policies\Microsoft\FeatureManagement\Overrides

Right-click the key, click New, and create a DWORD32 named 1517186191 with a value of 0.

Stan 6 Reputation points

2025-12-22T06:35:48.9366667+00:00

Thank you for this post — it can definitely save the necks of many admins. After decades, Microsoft suddenly (and without any warning) started requiring non-duplicate SIDs for local computer accounts. This is not how things should be done.

We deployed a solution from Stratesave, SIDCHG – SID Changer Utility. It is a paid product, but it is a 100% functional solution.
Padraig R 0 Reputation points

2026-01-08T16:44:39.75+00:00

@GTS-NJ Thanks for this . I assume this is the Group Policy Object normally only available through Microsoft Support but it seems that to purchase a single support incident costs €299 which seems excessive for very small businesses. Are there any licensing issues in using your link above rather than going through Microsoft Support
Padraig R 0 Reputation points

2026-01-08T16:49:20.4033333+00:00

@Stan Have you found any unintended issues arising from using SIDCHG – SID Changer Utility ?
Sam Post 0 Reputation points

2026-01-31T17:15:02.4633333+00:00

I ran into this very same problem.
I had issues trying to access a file share from a cloned machine that had a duplicate SID.
I tried to use SYSPREP but it failed. I didn't have the time to iron out the bug, so I turned to A.I.
A.I. failed me.
I tried the SIDCHGX method, Fail.
I tried WittyDiskClone method, Fail.
Then I found this article and it SOLVED my problem.

I signed up for an account just to thank the author.

Thank-you!
John Stfford 0 Reputation points

2026-02-18T21:24:06.4433333+00:00

I had pretty much given up. This one worked for me. I have tried so many other ways & still couldn't connect either with file explorer or VNC. Both work fine now.
Cleito Carvalho Jr 0 Reputation points

2026-03-22T13:20:52.1833333+00:00

Oh God, this resolves my problem!

The registry change works like a charm.

Thanks Very Much.

Answer 2

HLBui 4,640 Independent Advisor

Hi Ron Sigmon

Just checking to see how is everything. Please feel free to let me know if you need any assistance

0 comments

Answer 3

Dear Ron Sigmon

In general, Windows does not provide a Group Policy Object specifically for fixing or detecting duplicate SIDs, because duplicate machine SIDs typically don’t cause functional issues in domain-joined systems. However, if you’re working with imaging or deployment scenarios, the recommended approach is to ensure each machine is generalized using Sysprep, which automatically generates a unique SID during the setup phase. You can also review your deployment workflow to confirm that no images are being cloned without running Sysprep beforehand.

If your concern is related to domain conflicts, you may validate unique domain SIDs by rejoining the affected device to the domain, which forces regeneration of local identifiers. Additionally, tools such as PsGetSid from Sysinternals can help you verify the SID of each machine for auditing purposes. If this issue is appearing during compliance or security checks, updating your imaging process is typically the long-term fix.

Please feel free to let me know if you’d like guidance on adjusting your deployment process or validating SIDs across multiple systems.

If this guidance proves helpful, feel free to click “Accept Answer” so we know we’re heading in the right direction and let me know if you need any assistance. Thank you

Answer 4

To address the issue of duplicate SIDs on cloned computers, you can utilize Group Policy to manage temporary settings. However, it's essential to note that Microsoft does not support images prepared using tools like NewSID for deployment; instead, they recommend using the Sysprep utility to avoid SID duplication.

To create a temporary Group Policy for handling duplicate SIDs, you can follow these general steps:

Identify Duplicate SIDs: Use tools like Ntdsutil to check for duplicate SIDs in your environment. This will help you understand the scope of the issue.
Create a Temporary Group Policy Object (GPO): In the Group Policy Management Console, create a new GPO that applies specific settings to the affected computers. This can include user permissions, security settings, or other configurations needed to mitigate the impact of duplicate SIDs.
Link the GPO: Link the newly created GPO to the organizational unit (OU) that contains the cloned computers. This ensures that the settings are applied to the correct machines.
Monitor and Adjust: After applying the GPO, monitor the environment for any issues related to access permissions or security. Adjust the GPO settings as necessary to ensure proper functionality until the duplicate SID issue is resolved.

Remember that resolving the underlying SID duplication issue should be a priority, as temporary fixes may not provide a long-term solution.

Share via

how to get group policy for duplicate sid

3 additional answers

Your answer