Introduction To Security Identifiers (SIDs) | Windows Server 2019 Security

[@ittaster]

Please share with the I.T. learner community! Follow & Say hi on social media! Twitter: twitter.com/it_taster Instagram: instagram.com/it_taster Facebook: facebook.com/Ittaster

[@TheLordWhoSeesMe]

thank you thq thq. It is simple and understandable.

[@NewlyDavid-qw4yx]

Hello

[@noahshoesmith4106]

Morning! This video went perfectly with my ⏰

[@MohsenJebelli145]

great and clear explanation.tnx

[@jmedz893]

Wow 6am on the dot ! Good morning John !

[@ittaster]

Thanks! Good morning Josh!

[@johna1857]

Nice and clear as always. Very interesting.

[@ittaster]

Thanks John👍

[@johna1857]

@@ittaster you very welcome

[@mg7670]

Helpful video! Many thanks!

[@mrg3921]

Great job!

[@abdullahalkraidees7452]

Amazing video many thanx

[@samuelsule9168]

Good boss please I want to learn fully server security how can I start please I need your guidance

[@domesticme9364]

I have few folders that cannot open because of S-1-5-21 user. because of my computer formatted, I cannot use these files. how to regain access of this folders?

[@robertcollcott6579]

As ever Jon very insightful, never knew about SID’s before this video of yours I’ll give this a go myself in my test lab Hoping to make another MS Teams video soon about teachers grading their student assignments and a student viewing their feedback Also did some work on in the test lab this week too by creating a bootable password reset pen drive using Rufus post Is on LinkedIn, have a look

[@ittaster]

Thanks Robert! I'm glad you enjoyed the video. I will check out your MS Teams work too. Rufus is a very useful tool for making bootable devices 👍

[@jehangirsharif6767]

i have issue related SID in Domain level. I have domaon JS.Local. i have another computer which is join my domain js.local. i log in jehangir user name and all windows profile setting and dektop seting on this user jehangir. some issue i have re-join domain and again log in user name jehangir which is not replaced old user name jehangir and its SID differ. i want to need same SID in my old profile jehangir which is all setting in this user.Can it possible. please guide us.

[@ALUMINUM20]

Great video. Are RIDs issued sequentially? If so, can I clarify that if you have multiple user accounts on a Windows computer with RIDs of 1115, 1116, 1119, 1120 that there are 2 user accounts which have been deleted (1117 & 1118)?

[@ittaster]

Great question!! The answer is, sort of... It depends on how many domain controllers there are,. blocks of RIDs are handed out to DCs in the domain by the DC with the RID master role (there can only be one). Therefore where accounts are created on different DCs there would be a discrepancy.

[@davideldridge204]

Great explanation and was helpful. Thank you sir!

[@ittaster]

Thanks David! I'm glad you enjoyed the video👍

[@sorenkaden8615]

i dont mean to be off topic but does anybody know of a method to get back into an Instagram account?? I was stupid forgot the account password. I love any help you can offer me

[@deshawnthaddeus3202]

@Soren Kaden instablaster :)

[@sorenkaden8615]

@Deshawn Thaddeus Thanks for your reply. I found the site on google and im in the hacking process atm. I see it takes quite some time so I will reply here later when my account password hopefully is recovered.

[@sorenkaden8615]

@Deshawn Thaddeus It worked and I actually got access to my account again. I am so happy:D Thank you so much you saved my account :D

[@Jamesaepp]

Not re-issuing SIDs is very important for the AD Recycle Bin to work :)

[@ittaster]

Absolutely, and a very good point!

[@hussainafghan5289]

thank you sir, please have a video about Exchange and DAG too

[@ittaster]

thanks for your suggestions👍

[@manikeshtechtube4490]

Thank you :)

[@richardwilliam7030]

Hi John, what will happen if I forget to check generalized button on sysprep, then I capture the image and redeploy to several computers

[@ittaster]

Hi Richard, /generalize is important as you point out. If the same image is deployed without 'sysprep'. The local SIDs on the computers would not be unique (local admin accounts, groups etc. ) It's not a good situation, especially in a peer to peer 'workgroup' environment.

[@runout74]

@@ittaster I know this comment is two years old, but isn't this a myth that was debunked awhile back. Do a search for Machine SID Duplication Myth. With that said, I still generalize.

[@ahmadmuzaffarzafriy]

Is there a way to reset SID to 1001?

[@ittaster]

Hi, not built into the operating. I would tend to avoid changing with third party tools, they are unlikely to be supported and may cause issues.

[@ahmadmuzaffarzafriy]

@@ittaster The only way to reset it to 1001 is to reformat the OS or Sysprep?

[@ittaster]

'Sysprep' would be my preferred option.

[@arvindbangali]

Why domain controllers have same sid?

[@arvindbangali]

@@ittaster, please verify once after promotion of computer to additional domain controller it's sid changes and all domain controllers have same sid. I just don't know why.

[@ittaster]

Hi, I think you may well be right! Microsoft documentation refers the uniqueness of SIDs for accounts, groups and computers, but is somewhat vague around DCs. However there is an article by Mark Russinovich that seems to suggest there is an exeception regarding DCs. Great question! Thanks for sharing👍