Implication of removing SID history attribute in sharepoint 2016

MARTIN, Florent 21 Reputation points


We would like to remove the "sid-history" attribute from our active directory objects, but it's not clear if this can have any impact on Sharepoint 2016.
I would seems that previous Sharepoint version did not support this attribute (SharePoint 2010 and Kerberos – does SharePoint use sIDHistory at all?), yet this microsoft ressource User accounts migrated with their SID history across forests are not resolved in SharePoint mentions troubleshooting in migration scenario involving "sid-history" attribute.

Can you point me in the right direction ?

Thanks in advance.

Active Directory
Active Directory
A set of directory-based technologies included in Windows Server.
5,161 questions
SharePoint Server Management
SharePoint Server Management
SharePoint Server: A family of Microsoft on-premises document management and storage systems.Management: The act or process of organizing, handling, directing or controlling something.
2,705 questions
0 comments No comments
{count} votes

Accepted answer
  1. Emily Du-MSFT 36,776 Reputation points Microsoft Vendor

    @MARTIN, Florent

    When you migrate a user from domain A to domain B, SharePoint 2016 does store SID history. With SID history, a user would continue to use their old account to access SharePoint until the old account is disabled in AD, the new account is enabled and their account has been migrated within SharePoint (Move-SPUser). From that time forward, the user would only use their new account to log in and access SharePoint.

    It's recommended that you remove SID history once the migration is complete.

    Here're are references about remove SID history.

    Note: Microsoft is providing this information as a convenience to you. The sites are not controlled by Microsoft. Microsoft cannot make any representations regarding the quality, safety, or suitability of any software or information found there. Please make sure that you completely understand the risk before retrieving any suggestions from the above link.

    If the answer is helpful, please click "Accept Answer" and kindly upvote it. If you have extra questions about this answer, please click "Comment".
    Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.

1 additional answer

Sort by: Most helpful
  1. MARTIN, Florent 21 Reputation points

    Thank you for your detailed explainations.

    We actually have already migrated our domain some time ago, before installing sharepoint.
    We would like to know if sharepoint could be impacted when we remove this attribute from AD.

    Best regards