SID specifies the security identifier of the domain account.



Specifies the security identifier of the domain account. SID is a string with a maximum length of 256 characters.

For information on how to determine the security identifier for an Active Directory user account using PowerShell, see this Microsoft Web site.

$objUser = New-Object System.Security.Principal.NTAccount("fabrikam", "kenmyer")
$strSID = $objUser.Translate([System.Security.Principal.SecurityIdentifier])

The following XML example shows the format for the SID value:


<OfflineDomainAccounts> <OfflineDomainAccount> <SID>S-1-5-21-1454471165-1004335555-1606985555-5555</SID> <Groups>Administrators</Group> </OfflineDomainAccount>
<OfflineDomainAccount> <SID>S-1-5-21-1454471165-1004335555-1606985555-5999</SID> <Groups>Administrators;BackupOperators</Group> </OfflineDomainAccount> </OfflineDomainAccounts>


This string type does not support empty elements. Do not create an empty value for this setting.

Valid Configuration Passes


Parent Hierarchy

Microsoft-Windows-Shell-Setup | OfflineUserAccounts | OfflineDomainAccounts | OfflineDomainAccount | SID

Applies To

Windows 10 for desktop editions (Home, Pro, Enterprise, and Education)

Windows Server 2016

For a list of the supported Windows editions and architectures that this component supports, see Microsoft-Windows-Shell-Setup.