Please report all spam threads, posts and suspicious members. We receive spam notifications and will take immediate action!
Results 1 to 2 of 2

Thread: SID & User Account




  1. #1
    Join Date
    May 2006
    Posts
    2

    Default SID & User Account

    SID and User Account
    I am running XP-Pro SP2. As you know each user has a unique SID. If you delete a user and create a new one with the same name, it will get new SID and not the previous one.
    Questions:
    1. Where\How can I see the SIDs
    2. How can tell which SID belongs to which User
    3. How can I tell which SIDs belong to deleted users

    Thanks.

  2. #2
    Join Date
    Nov 2001
    Location
    Texas, USA
    Posts
    4,825

    Default Re: SID & User Account

    1- They are located in the registry

    2- You have to know where to look in the registry as there are entries to identify which SID is associated with the user name. All user SID numbers will have 4 numbers starting with 10xx. There are also 2 other base SID numbers (500 and 501) that identify adminsitrator accounts that are set on the machine by default.

    3- Same as #2 above, by cross referencing the registry entries. When a user account is deleted, the SID does not get recycled. It maintains its association with the account that it was originally assigned to. You might look at some of the registry tools available and see if any of them will automate the association for you. I do it manually most of the time when I examine a computer, but not often enough where I have the registry keys memorized as to their location.
    Old age and treachery will overcome youth and skill
    My Toys

Thread Information

Users Browsing this Thread

There are currently 1 users browsing this thread. (0 members and 1 guests)

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •