Getting computer SID, GUID

[Owen]

Just wondering what Hyena is using to get the computer SID, as it's different from what is produced when you use Sysinternals' psgetsid on a client PC.

There's no problem getting the user SID, just need the computer one.

[missioncritical]

Let me know where in Hyena you are seeing the computer's SID. If its an Active Directory display, then its coming from the value of the 'objectsid' attribute in the directory. Hyena uses a Microsoft API to format the SID string (and GUIDs too). I downloaded psgetsid and see that the only difference I can see if Hyena's sid display includes the RID portion (the last portion of the SID). I suppose you could say that the objectSID in the directory includes the computer's SID + the RID, which is a unique ID added to computers that are joined to the domain. I used ADSI edit to view the objectSid and its the same as the Hyena view (presumably coming from the same Microsoft function). I don't know which is technically correct, to show the SID without the RID or not, but it should be easy to parse out knowing what the difference is.

Let me know if this explains your situation or not.

[Owen]

I'm getting the SID via Hyena on: DomainName>Computers>ComputerName
Right-clicking for properties, then going to Object
There seems to be no relationship between the two SIDs that I can see.

[Owen]

Aha, best to use:
psgetsid Domain\computername$
which gives me the SID as seen in Hyena.

Ta!

[Owen]

There's also the very wonderful dsget:
dsget computer <dn> -sid
FWIW, it's a lot faster than psgetsid.

[missioncritical]

Thank you for the information.