Windows Forum

Ask something
Discussion Locked

SID as Member in Event Log

0 helpful
5 replies

by richpiech

Closed to new repliesThis discussion is closed. It stays readable, but it takes no new replies.
When a member is added to a local group in NT 4.0 SP5 or 2000, the Member field shows up as a SID, not the member name. What would cause that? What needs to be changed to show the Member name in the Event instead of the SID?

5 replies

by ktyfuller

It is possible to build a llist of mappings o user names to SIDs by performing the following steps:
1. Dump the user list to a text file with the NET USERS command or with Addusers.exe
2. Modify this text file to remove unwanted information (Headers, and so forth)
3. Modify the resulting list of user nmaes into a batch file, using the GETSID resource kit utility to translate each user name into a SID. Redirect the output to a text file.
4. When you encounter a SID, search the text file (created previously) for that SID. This will place you on the line with the user's name.
For more information http://support.microsoft.com/support/kb/articles/Q174/0/73.ASP

I hope this was helpful. Let me know if I can be of more service. ktyfuller@juno.com

by michael roark - ccna/da mcp 3csa

was the member a member of the local domain that the machine was in?
this can cause the SId to show because of a lack of corrolations between the domain, where the member belongs, and the local computer, which, if not added to the domain can not assign names to an unknown SID,
Happens to me sometimes too...
Good Luck,

This discussion is closed to new replies.