Find Security Identifier (SID) of User in Windows

Pyprohly · 20 May 2017

Some useful SID related functions for script use. Also demonstrates how to retrieve SID information from .NET instead of WMI.

Code:

function Get-SidFromName ($user) {
    (New-Object System.Security.Principal.NTAccount($user)).Translate([System.Security.Principal.SecurityIdentifier]).Value
}

function Get-NameFromSid ($sid) {
    (New-Object System.Security.Principal.SecurityIdentifier($sid)).Translate([System.Security.Principal.NTAccount]).Value
}

function Get-CurrentUserSid {
    [System.Security.Principal.WindowsIdentity]::GetCurrent().User.Value
}

function Get-UserSidFromWildcard ($sid) {
    ([ADSI]"WinNT://$env:COMPUTERNAME").Children | ?{$_.SchemaClassName -eq 'User'} | %{(New-Object Security.Principal.SecurityIdentifier($_.objectSid.Value, 0)).Value} | ?{$_ -like $sid}
}

function Get-GroupSidFromWildcard ($sid) {
    ([ADSI]"WinNT://$env:COMPUTERNAME").Children | ?{$_.SchemaClassName -eq 'Group'} | %{(New-Object Security.Principal.SecurityIdentifier($_.objectSid.Value, 0)).Value} | ?{$_ -like $sid}
}

function Get-ServiceSidFromWildcard ($sid) {
    ([ADSI]"WinNT://$env:COMPUTERNAME").Children | ?{$_.SchemaClassName -eq 'Service'} | %{(New-Object Security.Principal.SecurityIdentifier($_.objectSid.Value, 0)).Value} | ?{$_ -like $sid}
}

function Get-SidFromWildcard ($sid) {
    ([ADSI]"WinNT://$env:COMPUTERNAME").Children | ?{'Group', 'User' -contains $_.SchemaClassName} | %{(New-Object Security.Principal.SecurityIdentifier($_.objectSid.Value, 0)).Value} | ?{$_ -like $sid}
}

Barman58 · 20 May 2017

Shawn, There's also Mark Russinovich's tool PsGetSid

Brink · 20 May 2017

omidsolo · 17 Dec 2017

WMIC UserAccount Where Name='%Username%' Get SID
-
This works perfectly but it only works in Command Prompt and not in a .bat file.
I also cannot assign it to a string variable since it's not just SID and is a multi line string.
I'm not very comfortable with batch files so what's the shortest and easiest way to store it in a variable to use in a batch file? :)

Brink · 17 Dec 2017

Hello omidsolo, :)

If you like, you could use the command in Option 1 or 3 in a .bat file.

Find Security Identifier (SID) of User in Windows

Find Security Identifier (SID) of User in Windows

To Find SID of Current User using "WhoAmI" command

To Find SID of Current User using "wmic useraccount" command

To Find SID of All Users using "wmic useraccount" command

To Find SID of Specific User using "wmic useraccount" command

To Find User Name for SID using "wmic useraccount" command

To Find SID of All Users using "Get-WmiObject" PowerShell command

To Find SID of Users using Registry Editor