Unable to see user sid history in AD?

Question

Unable to see user sid history in AD?

Khushboo Kumari 20

Hi, I am unable to see the users SID history in the user properties. It is showing as <Not set>. So is the default behaviors or like how to set the Sid history of users? Thanks!

1 answer

Your answer

Answer 1

Anonymous

Hello Khushi kumari, Thank you for posting in Q&A forum. When an object migrated from one domain to another, a new SID must be generated for the user account and stored in the ObjectSID property. Before the new value is written to the property, the previous value (ObjectSID from source domain) is copied to another property of a User object, sIDHistory in the Target domain. So you can use the sIDHistory value to search the Source domain using the ObjectSID attributes to identify the corresponding object in the Source domain. In other words, the sIDHistory value will be equal to the source ObjectSID. Did you migrate this user accounts? SID History value should in the sidHistory attribute and you can view this by using Powershell. Please open PowerShell as an administrator and enter the following two commands, please replace the hack with the username you want to query. If you didn't perform this user migration, the SID history property is an empty value. I hope the information above is helpful. If you have any question or concern, please feel free to let us know. Best Regards, Daisy Zhou

If the Answer is helpful, please click "Accept Answer" and upvote it.

Khushboo Kumari 20 Reputation points

2024-01-31T11:20:06.57+00:00

Hi @Daisy Zhou, Thanks for the information. We want to migrate the SID history, so that users can access the share files or folders of the source domain from the target domain. Just to validate the below attached image statement. so can you please provide some information on this, if there is empty value in SID history. how to validate this.
Anonymous

2024-02-02T02:51:55.8733333+00:00

Hello Khushi kumari, Good day! When an object migrated from one domain to another, a new SID must be generated for the user account and stored in the ObjectSID property. Before the new value is written to the property, the previous value (ObjectSID from source domain) is copied to another property of a User object, sIDHistory in the Target domain. So you can use the sIDHistory value to search the Source domain using the ObjectSID attributes to identify the corresponding object in the Source domain. In other words, the sIDHistory value will be equal to the source ObjectSID. Did you migrate this user accounts? SID History value should in the sidHistory attribute and you can view this by using Powershell. Please open PowerShell as an administrator and enter the following two commands, please replace the hack with the username you want to query. If you didn't perform this user migration, the SID history property is an empty value. I hope the information above is helpful. If you have any question or concern, please feel free to let us know. Best Regards, Daisy Zhou

If the Answer is helpful, please click "Accept Answer" and upvote it.

Share via

Unable to see user sid history in AD?

1 answer

Your answer