Sid resolution to Security Principal name

G-ONE 166 Reputation points
2021-02-07T03:46:52.493+00:00

Hi IT Guys,

How does Sid resolution to Security Principal name really work? How does Sid resolution to Security Principal name work if Server membership has been changed from source domain to target domain? Could someone please explain the workflow of background process under the hood?

Does Sid resolution to Security Principal name depends on several factors such as Direction of Trust, domain membership of the host from where permission is checked and domain membership of servers where resource is hosted?

Thanks in advance!

Windows Server
Windows Server
A family of Microsoft server operating systems that support enterprise-level management, data storage, applications, and communications.
12,125 questions
Active Directory
Active Directory
A set of directory-based technologies included in Windows Server.
5,852 questions
Windows Server Management
Windows Server Management
Windows Server: A family of Microsoft server operating systems that support enterprise-level management, data storage, applications, and communications.Management: The act or process of organizing, handling, directing or controlling something.
421 questions
Windows Server Infrastructure
Windows Server Infrastructure
Windows Server: A family of Microsoft server operating systems that support enterprise-level management, data storage, applications, and communications.Infrastructure: A Microsoft solution area focused on providing organizations with a cloud solution that supports their real-world needs and meets evolving regulatory requirements.
513 questions
Windows Server Migration
Windows Server Migration
Windows Server: A family of Microsoft server operating systems that support enterprise-level management, data storage, applications, and communications.Migration: The process of making existing applications and data work on a different computer or operating system.
408 questions

1 answer

Sort by: Most helpful
Most helpful Newest Oldest
  1. Vicky Wang 2,646 Reputation points
    2021-02-08T09:34:18.787+00:00

    The SID is built in a hierarchy structure of four parts:

    Revision – the version of a SID structure. Windows NT and later starts with 1.
    Identifier Authority – Identifies the Authority that can issue SID for this type of Security Principal. The value for Windows NT and later is 5 (NT Authority).
    Subauthorities – Identifies the domain in the forest. Usually called the Domain Identifier.
    Relative Identifier (RID) – The last part that identifies the particular account or group in the domain.
    If we take a look at a user object in the attribute editor we can see the users SID stored in the objectSid attribute (the same goes for computers and groups).

    reference:https://learn.microsoft.com/en-us/troubleshoot/windows-server/identity/security-identifiers-in-windows

    https://secureidentity.se/security-principal-and-the-sid/

    Please Note: Since the web site is not hosted by Microsoft, the link may change without notice. Microsoft does not guarantee the accuracy of this information.