Thursday, September 1, 2011

ObjectSID and Active Directory

What is an objectSID in Active Directory?

When a new object is created in Active Directory, Domain Controller assigns a unique value used to identify the object as a security principal.  This value is unique inside the domain.  An ObjectSID includes a domain prefix identifier that uniquely identifies the domain and a Relative Identifier (RID) that uniquely identifies the security principal within the domain. The RID is a monotonically increasing number at the end of the SID

How do I get ObjectSID information from Active Directory?

You can see the ObjectSID information using ADSI Edit or Attribute Editor or you can use DSQUERY commands.   I will explain these details with the a few screenshots:

Domain SID – I am using the following DSQUERY command with a name filter to get the SID of my domain. 

image

image

User SID – As you can see from the following screenshot, the objectSID of the user (TestABC1) is consist of Domain SID of the domain (santhosh) + Relative ID(RID) of the user account. 

image

image

RID Allocation

RID number will assigned from the RID pool (rIDAAllocationPool) of the Domain Controller.  Each domain controller is assigned a pool of RIDs from the global RID pool by the domain controller that holds the RID master FSMO role.  You can get the RID pool allocation table details using the dcdiag /test:ridmanager /v command. 

image

Keep in mind that the RID pool will be different in each domain controller.  RID will be allocated to an object in Active Directory based on the Domain Controller that you are using.  Here is an example from my second domain controller in my domain:

image

As you can see in the above screenshot, if I create a new object using this domain controller, the new object will be assigned with 1601 (rIDNextRID) as the RID.

You can also use DQUERY command to get the properties of the RID Set.  However, you need to convert some of the values.

image

By default, RID pools will be allocated in increments of 500 (rIDAllocationPool).

image


Other Related Blogs and Articles:

Verify sIDHistory and Identify the Source User Account - http://portal.sivarajan.com/2011/03/verify-sidhistory-and-identify-source.html

ObjectSID Vs sIDHistory - http://sivarajan.com/forum/viewthread.php?tid=8

Identify SID Using DSQUEY Command - http://portal.sivarajan.com/2010/06/identify-sid-using-dsquey-command.html

PowerShell Script - Search Active Directory and Generate SIDHistory Report - http://portal.sivarajan.com/2010/12/powershell-script-search-active.html

SID Filtering – Access is denied - http://portal.sivarajan.com/2009/06/sid-filtering-access-is-denied.html

ADMT SID Mapping File Generation Using DSQUERY Command - http://portal.sivarajan.com/2011/04/admt-sid-mapping-file-generation-using.html

siDHistory Report - with Multi Value Support - http://portal.sivarajan.com/2011/04/sidhistory-report-with-multi-value.html


57 comments:

If you like such articles, visit this portal, my friends.

Stuck on your career choice? I think that this article will help you!



Hermes handbags Luxury Genuine Leather Bags. If you have ever drooled over the gorgeous and exquisite Handbags available in any outlet, you would love to own one. The existing counterfeit Louis Vuitton Bags available in this website include classy and sophisticated Monogram Canvas leather handbags which come in colours like white, black, brown and blue. You can also choose from Rolex Watches of Kelly bags which come with more luxurious colours and designs.



I have seen your blog and really amazing information put in this. If anyone needs Website Designing and Digital Marketing Services in India, visit Ogen Infosystem in Delhi to get a creative and responsive website.
Best Website Designing Company in India

Hi, I need Groups name using ObjectSID's. Is there any possible cases available in LDAP query

We provide customized assignment help service. We are leading the market for over a decade now and have earned the name of being the best academic support service for our comprehensive services at pocket-friendly rates.
Very attractive information blog post, my favorite article post thank you very much for these amazing content.
Assignment Help
write my assignment online

The instructions are detailed but, as for me, are not clear enough. I still don't get how can it help me to write a research paper abstract template

Hello, I have browsed most of your posts. This post is probably where I got the most useful information for my research. Thanks for posting, maybe we can see more on this. Are you aware of any other websites on this subject.
Haroon Ullah

I think this is one of the most significant information for me. And i’m glad reading your article. But should remark on some general things, The web site style is perfect, the articles is really great : D. Good job, cheers Click here

Hello, I have browsed most of your posts. This post is probably where I got the most useful information for my research. Thanks for posting, maybe we can see more on this. Are you aware of any other websites on this subject.
metallic epoxy floor san antonio

Thanks for a wonderful share. Your article has proved your hard work and experience you have got in this field. Brilliant .i love it reading.
fort lauderdale water damage restoration

This comment has been removed by the author.

I think this is one of the most significant information for me. And i’m glad reading your article. But should remark on some general things, The web site style is perfect, the articles is really great : D. Good job, cheers.
miami remodeling contractors

You have a good point here!I totally agree with what you have said!!Thanks for sharing your views...hope more people will read this article!!! polished concrete floors fort worth

Superbly written article, if only all bloggers offered the same content as you, the internet would be a far better place.
concrete driveway repair midland tx

I think this is one of the most significant information for me. And i’m glad reading your article.bathroom remodelers south miami

Superbly written article, if only all bloggers offered the same content as you, the internet would be a far better place.
residential water heater services atlanta

Superbly written article, if only all bloggers offered the same content as you, the internet would be a far better place. bathroom remodeling miami beach fl

I think this is one of the most significant information for me.
hvac companies west palm beach

Pretty! This has been a really wonderful post. Many thanks for providing this information.
kbc official winner

Hello, I believe your web site could possibly be having internet browser compatibility problems. When I take a look at your blog in Safari, it looks fine however when opening in Internet Explorer, it has some overlapping issues. I just wanted to give you a quick heads up! Aside from that, wonderful website!
Kaun Banega Crorepati 2019

متون تخصصی نیاز به مترجم تخصصی دارند تا اصطلاحات و لغات تخصصی به درستی ترجمه شود. ترجمه آنلاین آماده ارائه خدمات ترجمه تخصصی به دانشگاهیان و سازمان ها است. ترجمه تخصصی
در تمامی رشته ها با بهترین و مجرب ترین مترجمان

يجب أن تجعل الحيوانات الأليفة منزلك أكثر جاذبية. ولكن إذا لم تكن حريصًا ، فيمكنهم بالفعل جذب الآفات إلى منزلك وجعلها تشعر بأنها أقذر وأكثر راحة. يمكن أن يساعدك اتخاذ هذه الخطوات في الحفاظ على نظافة منزلك والحيوانات الأليفة الخاصة بك شركة مكافحة حشرات بتبوك
شركة رش مبيدات بتبوك
كيفية صنع مبيد للنمل بالمنزل
شركة الانوار لرش المبيدات

Thanks for sharing such a nice blog. I like it.
microsoft office support

Allassignmenthelp.com
guarantee you to delivery your help with the homework
on time. You can count on us. We will not let you down with your timeframes.

Thanks for sharing such a nice blog. I like it.
webroot customer service number

Aixonne offers a wide selection of high quality iPhone cases and accessories. Find your perfect iPhone case today!

Wow!!! It was really an Informational Article which provide me with much Insightful Information. I would like to first thank the author for such an Insightful Content. If someone here is looking for a Website Designing Company in India, then look no further than Jeewangarg.com as we are the best website designing company in Delhi working in the arena for the last 8 years.
website designing company in India
website designing company in NCR
Google Partner in India

Post a Comment

Popular Posts

Share

Twitter Delicious Facebook Digg Stumbleupon Favorites More