How can we know if an SID(Windows Event security identifier) belongs to a domain account or local account?
Identify local account vs domain account using SID
1.8k Views Asked by Krishna At
1
There are 1 best solutions below
Related Questions in WINAPI
- How to immediately apply DISPLAYCONFIG_SCALING display scaling mode with SetDisplayConfig and DISPLAYCONFIG_PATH_TARGET_INFO
- Changing the theme of a #32768 (menu) window class at runtime
- Issue with GetOpenFileName while debugging
- How to populate a ListBox with SendMessage?
- Is there a function to end a child process?
- HDR video publishing
- Frameless Qt + WinAPI maximized window size is bigger than the availableGeometry()
- Mount .iso file with python
- What is Win32 x86-64 CONTEXT::VectorRegister for?
- WinAPI - right mouse drag & drop and IContextMenu
- Win32 per-filesystem cache tuning?
- Client connection timeout during Android & Windows PC communication via sockets
- MessageBoxEx sometimes shows as hollow window, border only, and only on Windows 11
- Win32api send message and Pydirectinput and Powertoy (Keyboard Manager ) Not working when open the application
- Would it be possible to run an application right after csrss.exe loads? (Windows)
Related Questions in WINDOWS-SECURITY
- Pre validate user with LsaLogonUser when offline
- How to read NT Security Descriptor?
- LogonUser fails when disconnected from domain?
- UnauthorizedAccessException when creating second NamedPipeServerStream in a process with a PipeSecurity argument
- A digital signature does not require entering a pin after the first signature
- Windows Security Prompt Rust
- How to transfer folder security and permission from one folder to another (in 2 different servers)?
- Attach to service process SecurityHealthService from Visual Studio 2022
- Using Azure Point-to-Site VPN floods the domain controller with EventId 4768: A Kerberos authentication ticket (TGT) was requested
- Windows Tasklist.exe continuously popup while checking TaskList in subprocess
- How to convert Application Package SID to usable format
- Starting a GUI Application from a service with c++
- Attack surface reduction rule blocking application installation
- LogonUser Doesn't work for a user in the Protected Users group
- unity WebRequest - Windows security
Related Questions in SECURITY-IDENTIFIER
- How to give If condition while calling IdentityReference value
- Check specific process is elevated in delphi
- How to determine if a string is an NT Account or a Security Identifier?
- Identify local account vs domain account using SID
- How to extract security identifier from member attribute of a group?
- Win2K8 R2, out-of-order SID
- Mapping Samba's S-1-22-[12]-* SID into names
- Accessing Foreign Security Principals
- how VIP card helps in verification?
- MemoryMappedFile Process Security
- SecurityIdentifier.Translate(typeof(NTaccount)) bugged?
- Windows logged in user unique ID
- SecurityIdentifiers in Cassini-dev's NTLM authentication
- Get username from SecurityIdentifier
- Windows Identity SID
Trending Questions
- UIImageView Frame Doesn't Reflect Constraints
- Is it possible to use adb commands to click on a view by finding its ID?
- How to create a new web character symbol recognizable by html/javascript?
- Why isn't my CSS3 animation smooth in Google Chrome (but very smooth on other browsers)?
- Heap Gives Page Fault
- Connect ffmpeg to Visual Studio 2008
- Both Object- and ValueAnimator jumps when Duration is set above API LvL 24
- How to avoid default initialization of objects in std::vector?
- second argument of the command line arguments in a format other than char** argv or char* argv[]
- How to improve efficiency of algorithm which generates next lexicographic permutation?
- Navigating to the another actvity app getting crash in android
- How to read the particular message format in android and store in sqlite database?
- Resetting inventory status after order is cancelled
- Efficiently compute powers of X in SSE/AVX
- Insert into an external database using ajax and php : POST 500 (Internal Server Error)
Popular # Hahtags
Popular Questions
- How do I undo the most recent local commits in Git?
- How can I remove a specific item from an array in JavaScript?
- How do I delete a Git branch locally and remotely?
- Find all files containing a specific text (string) on Linux?
- How do I revert a Git repository to a previous commit?
- How do I create an HTML button that acts like a link?
- How do I check out a remote Git branch?
- How do I force "git pull" to overwrite local files?
- How do I list all files of a directory?
- How to check whether a string contains a substring in JavaScript?
- How do I redirect to another webpage?
- How can I iterate over rows in a Pandas DataFrame?
- How do I convert a String to an int in Java?
- Does Python have a string 'contains' substring method?
- How do I check if a string contains a specific word?
There seems no simple general rule to distinguish local account SID and domain account SID. But there are some well-known SIDs you can recognize.
It is sure that all local account SIDs are unique in local scope and all accounts SIDs in the same domain are unique in the domain scope. Otherwise, there will be conflicts.
Domain identifier is used to distinguish the SIDs of one domain from the SIDs for other domain in the same enterprise.
Relative identifier is used to distinguish one SID from the other in the same domain.
More references: Machine SIDs and Domain SIDs, Security identifiers, SID Components.