Sometimes you may have a SID (objectSid) for an Active Directory object but not necessarily know which object it belongs to. You can find the object using PowerShell.

I came across this when recovering a hard drive for a company. The hard drive was from a domain computer and the NTFS permissions only showed the SID as the recovery computer was a workgroup computer and didn’t have access to the domain. I wanted to re-apply the NTFS permissions on the replaced drive so I needed to know which each SID belonged to.

Run the following on a computer that is a member of the domain:

Import-Module ActiveDirectory
Get-ADUser -Identity S-1-5-21-941005169-1824062477-405670111-1106

Gregory Strike

Husband, father, IT dude & blogger wrapped up into one good looking package.