How can I trace the SidHistory to the original and destination domain? The Next CEO of Stack OverflowIs there a way to view the members of an Active Directory group if you aren't a domain admin and can't log into to a domain controller?How to promote Active Directory domain controller replica to replace the main domain controller?How can I find out what AD groups I'm a member of?How can pc's on a network join a domain and configure DNS server on WS 2008?How can I clear cached domain credentials?What is Active Directory Domain Services and how does it work?How can I audit ONLY logon / logoff's in Windows DomainCA and Primary Domain Controller on the same serverIf an old Exchange server is not part of a domain, does that imply that it can be safely removed without affecting mailflow?How can I trace the source of repeated account lockout against Exchange server?
How is this set of matrices closed under multiplication?
If Nick Fury and Coulson already knew about aliens (Kree and Skrull) why did they wait until Thor's appearance to start making weapons?
TikZ: How to reverse arrow direction without switching start/end point?
How to prove a simple equation?
How to avoid supervisors with prejudiced views?
The past simple of "gaslight" – "gaslighted" or "gaslit"?
Easy to read palindrome checker
Would this house-rule that treats advantage as a +1 to the roll instead (and disadvantage as -1) and allows them to stack be balanced?
Are police here, aren't itthey?
What does "Its cash flow is deeply negative" mean?
Is it convenient to ask the journal's editor for two additional days to complete a review?
Where do students learn to solve polynomial equations these days?
What connection does MS Office have to Netscape Navigator?
Find non-case sensitive string in a mixed list of elements?
How to check if all elements of 1 list are in the *same quantity* and in any order, in the list2?
Would a grinding machine be a simple and workable propulsion system for an interplanetary spacecraft?
A Man With a Stainless Steel Endoskeleton (like The Terminator) Fighting Cloaked Aliens Only He Can See
Solving system of ODEs with extra parameter
What did we know about the Kessel run before the prequels?
Which one is the true statement?
Flying from Cape Town to England and return to another province
Is there always a complete, orthogonal set of unitary matrices?
Why do airplanes bank sharply to the right after air-to-air refueling?
What steps are necessary to read a Modern SSD in Medieval Europe?
How can I trace the SidHistory to the original and destination domain?
The Next CEO of Stack OverflowIs there a way to view the members of an Active Directory group if you aren't a domain admin and can't log into to a domain controller?How to promote Active Directory domain controller replica to replace the main domain controller?How can I find out what AD groups I'm a member of?How can pc's on a network join a domain and configure DNS server on WS 2008?How can I clear cached domain credentials?What is Active Directory Domain Services and how does it work?How can I audit ONLY logon / logoff's in Windows DomainCA and Primary Domain Controller on the same serverIf an old Exchange server is not part of a domain, does that imply that it can be safely removed without affecting mailflow?How can I trace the source of repeated account lockout against Exchange server?
I am seeing groups that either contain the current or prior SidHistory for a user in a large complex AD Forest with many domains.
Is it possible to look at the first half of the SidHistory and identify which Tree or Domain that a particular Sid entry came from?
Is this behavior expected? Under what conditions?
Should these groups, with legacy Sids, be cleaned up somehow? (or not)
windows-server-2008 active-directory exchange-migration
asked yesterday
Ran DomRan Dom
264
add a comment |
I am seeing groups that either contain the current or prior SidHistory for a user in a large complex AD Forest with many domains.
Is it possible to look at the first half of the SidHistory and identify which Tree or Domain that a particular Sid entry came from?
Is this behavior expected? Under what conditions?
Should these groups, with legacy Sids, be cleaned up somehow? (or not)
windows-server-2008 active-directory exchange-migration
asked yesterday
Ran DomRan Dom
264
add a comment |
I am seeing groups that either contain the current or prior SidHistory for a user in a large complex AD Forest with many domains.
Is it possible to look at the first half of the SidHistory and identify which Tree or Domain that a particular Sid entry came from?
Is this behavior expected? Under what conditions?
Should these groups, with legacy Sids, be cleaned up somehow? (or not)
windows-server-2008 active-directory exchange-migration
asked yesterday
Ran DomRan Dom
264
I am seeing groups that either contain the current or prior SidHistory for a user in a large complex AD Forest with many domains.
Is it possible to look at the first half of the SidHistory and identify which Tree or Domain that a particular Sid entry came from?
Is this behavior expected? Under what conditions?
Should these groups, with legacy Sids, be cleaned up somehow? (or not)
windows-server-2008 active-directory exchange-migration
windows-server-2008 active-directory exchange-migration
asked yesterday
Ran DomRan Dom
264
asked yesterday
Ran DomRan Dom
264
asked yesterday
Ran DomRan Dom
264
asked yesterday
Ran DomRan Dom
264
asked yesterday
Ran DomRan Dom
264
264
add a comment |
add a comment |
1 Answer
1
active
oldest
votes
Is it possible to look at the first half of the SidHistory and identify which Tree or Domain that a particular Sid entry came from?
Not usually. SIDHistory SIDs are typically from domains that were migrated from and hopefully no longer exist. If they do exist you could try running Sysinternals psgetsid.exe [SID] to see if it resolves to something.
Is this behavior expected? Under what conditions?
Yes, when your organization performed a migration that created the SIDHistory SIDs.
Should these groups, with legacy Sids, be cleaned up somehow?
Yes, that's the concept.
answered yesterday
Greg AskewGreg Askew
29.1k33768
add a comment |
Your Answer
StackExchange.ready(function()
var channelOptions =
tags: "".split(" "),
id: "2"
;
initTagRenderer("".split(" "), "".split(" "), channelOptions);
StackExchange.using("externalEditor", function()
// Have to fire editor after snippets, if snippets enabled
if (StackExchange.settings.snippets.snippetsEnabled)
StackExchange.using("snippets", function()
createEditor();
);
else
createEditor();
);
function createEditor()
StackExchange.prepareEditor(
heartbeatType: 'answer',
autoActivateHeartbeat: false,
convertImagesToLinks: true,
noModals: true,
showLowRepImageUploadWarning: true,
reputationToPostImages: 10,
bindNavPrevention: true,
postfix: "",
imageUploader:
brandingHtml: "Powered by u003ca class="icon-imgur-white" href="https://imgur.com/"u003eu003c/au003e",
contentPolicyHtml: "User contributions licensed under u003ca href="https://creativecommons.org/licenses/by-sa/3.0/"u003ecc by-sa 3.0 with attribution requiredu003c/au003e u003ca href="https://stackoverflow.com/legal/content-policy"u003e(content policy)u003c/au003e",
allowUrls: true
,
onDemand: true,
discardSelector: ".discard-answer"
,immediatelyShowMarkdownHelp:true
);
);
Sign up or log in
StackExchange.ready(function ()
StackExchange.helpers.onClickDraftSave('#login-link');
);
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
StackExchange.ready(
function ()
StackExchange.openid.initPostLogin('.new-post-login', 'https%3a%2f%2fserverfault.com%2fquestions%2f960635%2fhow-can-i-trace-the-sidhistory-to-the-original-and-destination-domain%23new-answer', 'question_page');
);
Post as a guest
Required, but never shown
1 Answer
1
active
oldest
votes
1 Answer
1
active
oldest
votes
active
oldest
votes
active
oldest
votes
Is it possible to look at the first half of the SidHistory and identify which Tree or Domain that a particular Sid entry came from?
Not usually. SIDHistory SIDs are typically from domains that were migrated from and hopefully no longer exist. If they do exist you could try running Sysinternals psgetsid.exe [SID] to see if it resolves to something.
Is this behavior expected? Under what conditions?
Yes, when your organization performed a migration that created the SIDHistory SIDs.
Should these groups, with legacy Sids, be cleaned up somehow?
Yes, that's the concept.
answered yesterday
Greg AskewGreg Askew
29.1k33768
add a comment |
Is it possible to look at the first half of the SidHistory and identify which Tree or Domain that a particular Sid entry came from?
Not usually. SIDHistory SIDs are typically from domains that were migrated from and hopefully no longer exist. If they do exist you could try running Sysinternals psgetsid.exe [SID] to see if it resolves to something.
Is this behavior expected? Under what conditions?
Yes, when your organization performed a migration that created the SIDHistory SIDs.
Should these groups, with legacy Sids, be cleaned up somehow?
Yes, that's the concept.
answered yesterday
Greg AskewGreg Askew
29.1k33768
add a comment |
Is it possible to look at the first half of the SidHistory and identify which Tree or Domain that a particular Sid entry came from?
Not usually. SIDHistory SIDs are typically from domains that were migrated from and hopefully no longer exist. If they do exist you could try running Sysinternals psgetsid.exe [SID] to see if it resolves to something.
Is this behavior expected? Under what conditions?
Yes, when your organization performed a migration that created the SIDHistory SIDs.
Should these groups, with legacy Sids, be cleaned up somehow?
Yes, that's the concept.
answered yesterday
Greg AskewGreg Askew
29.1k33768
Is it possible to look at the first half of the SidHistory and identify which Tree or Domain that a particular Sid entry came from?
Not usually. SIDHistory SIDs are typically from domains that were migrated from and hopefully no longer exist. If they do exist you could try running Sysinternals psgetsid.exe [SID] to see if it resolves to something.
Is this behavior expected? Under what conditions?
Yes, when your organization performed a migration that created the SIDHistory SIDs.
Should these groups, with legacy Sids, be cleaned up somehow?
Yes, that's the concept.
answered yesterday
Greg AskewGreg Askew
29.1k33768
answered yesterday
Greg AskewGreg Askew
29.1k33768
answered yesterday
Greg AskewGreg Askew
29.1k33768
answered yesterday
Greg AskewGreg Askew
29.1k33768
29.1k33768
add a comment |
add a comment |
Thanks for contributing an answer to Server Fault!
- Please be sure to answer the question. Provide details and share your research!
But avoid …
- Asking for help, clarification, or responding to other answers.
- Making statements based on opinion; back them up with references or personal experience.
To learn more, see our tips on writing great answers.
Sign up or log in
StackExchange.ready(function ()
StackExchange.helpers.onClickDraftSave('#login-link');
);
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
StackExchange.ready(
function ()
StackExchange.openid.initPostLogin('.new-post-login', 'https%3a%2f%2fserverfault.com%2fquestions%2f960635%2fhow-can-i-trace-the-sidhistory-to-the-original-and-destination-domain%23new-answer', 'question_page');
);
Post as a guest
Required, but never shown
Sign up or log in
StackExchange.ready(function ()
StackExchange.helpers.onClickDraftSave('#login-link');
);
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
Sign up or log in
StackExchange.ready(function ()
StackExchange.helpers.onClickDraftSave('#login-link');
);
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
Sign up or log in
StackExchange.ready(function ()
StackExchange.helpers.onClickDraftSave('#login-link');
);
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
