-2

how comes that the SID on a domain are out-of-order ? by out-of-order I mean that the Relative-ID (the very last part of the SID) of some recently created accounts is lower than the one of much older accounts. I always though the Relative-ID was allocated in a pure monotonic ascendant way.

I googled but found no clue. any idea ?

Windows 2008-R2, 5 DC.

Peyre
  • 397
  • 2
  • 14

1 Answers1

1

this has to do with the way relative identifiers are allocated when there is more than one DC i na domain: each DC has its own pool of relative identifiers, hence the apparent non-continuity of allocated SIDs.

https://technet.microsoft.com/en-us/library/cc961984.aspx

user9020831
  • 26
  • 1