General discussion

Locked

SID as Member in Event Log

By richpiech ·
When a member is added to a local group in NT 4.0 SP5 or 2000, the Member field shows up as a SID, not the member name. What would cause that? What needs to be changed to show the Member name in the Event instead of the SID?

This conversation is currently closed to new comments.

5 total posts (Page 1 of 1)  
| Thread display: Collapse - | Expand +

All Comments

Collapse -

SID as Member in Event Log

by ktyfuller In reply to SID as Member in Event Lo ...

It is possible to build a llist of mappings o user names to SIDs by performing the following steps:
1. Dump the user list to a text file with the NET USERS command or with Addusers.exe
2. Modify this text file to remove unwanted information (Headers, and so forth)
3. Modify the resulting list of user nmaes into a batch file, using the GETSID resource kit utility to translate each user name into a SID. Redirect the output to a text file.
4. When you encounter a SID, search the text file (created previously) for that SID. This will place you on the line with the user's name.
For more information http://support.microsoft.com/support/kb/articles/Q174/0/73.ASP

I hope this was helpful. Let me know if I can be of more service. ktyfuller@juno.com

Collapse -

SID as Member in Event Log

by richpiech In reply to SID as Member in Event Lo ...

The question was auto-closed by TechRepublic

Collapse -

SID as Member in Event Log

was the member a member of the local domain that the machine was in?
this can cause the SId to show because of a lack of corrolations between the domain, where the member belongs, and the local computer, which, if not added to the domain can not assign names to an unknown SID,
Happens to me sometimes too...
Good Luck,

Collapse -

SID as Member in Event Log

by richpiech In reply to SID as Member in Event Lo ...

The question was auto-closed by TechRepublic

Collapse -

SID as Member in Event Log

by richpiech In reply to SID as Member in Event Lo ...

This question was auto closed due to inactivity

Back to Windows Forum
5 total posts (Page 1 of 1)  

Related Discussions

Related Forums