Questions tagged [security-identifier]

A Security Identifier is a unique alpha-numeric String assigned by an authentication agent and is used to identify a user or a group of users.

15 questions
19
votes
1 answer

Mapping Samba's S-1-22-[12]-* SID into names

Samba3 uses SID's in the range S-1-22-1 for users and S-1-22-2 for groups. For instance, S-1-22-1-1-10042 is the UNIX user with uid 10042. I would like to be either able to map such a SID into a name, like 'myunixaccount', similar to this…
Guido Leenders
  • 4,232
  • 1
  • 23
  • 43
7
votes
0 answers

SecurityIdentifier.Translate(typeof(NTaccount)) bugged?

When doing a conversion from a SID to an NTAccount, I use the following code: DirectorySecurity folder_sec = Directory.GetAccessControl("c:\\test", AccessControlSections.All); AuthorizationRuleCollection rules = folder_sec.GetAccessRules(true, true,…
Jordan
  • 221
  • 2
  • 6
3
votes
1 answer

Windows Identity SID

Does SID for a windows account (local, domain, Active Directory) ever changed once an account is created? If yes, under what conditions.
TheVillageIdiot
  • 40,053
  • 20
  • 133
  • 188
3
votes
2 answers

Accessing Foreign Security Principals

Searching for the user michael@mycontoso.com with the objectSid S-1-5-21-1234567890-123465789-123456789-123456, I only find a Foreign Security Principal…
Alexander
  • 19,906
  • 19
  • 75
  • 162
3
votes
0 answers

MemoryMappedFile Process Security

I'm trying to create a MemoryMappedFile and ensure that only certain processes have access to the shared memory. This blog post on MSDN says: The memory mapped file security allows you to customize who or which process can have access to the…
2
votes
1 answer

SecurityIdentifiers in Cassini-dev's NTLM authentication

In this block of code in Cassini-dev's NTLM authentication class, calls made to SECUR32.DLL (via Interop) are made to authenticate the base64 encoded data in an HTTP request's Authorization headers. This makes sense, when both…
Jon Lin
  • 142,182
  • 29
  • 220
  • 220
1
vote
1 answer

Check specific process is elevated in delphi

I have the following code that can help to check whether the process is running under elevated. How can I modify the code in order to allow it to check whether a certain process is elevated? function IsElevated: Boolean; const TokenElevation =…
Leong
  • 229
  • 2
  • 11
1
vote
2 answers

How to determine if a string is an NT Account or a Security Identifier?

Question How can I reliably tell if a given string represents an NTAccount, or a SecurityIdentifier? Verbose Given a string I can convert it to an NTAccount or a SecurityIdentifier via the constructor: [string]$myAccount = '...' # some…
JohnLBevan
  • 22,735
  • 13
  • 96
  • 178
1
vote
2 answers

How to extract security identifier from member attribute of a group?

Suppose we have an AD Group with some members as foreign security principals. The format of the values in the member attribute in that case is as follows: CN=S-1-5-21-XXXX-XXXXXXXX-XXXXXXXXX-XXXX,CN=ForeignSecurityPrincipals,DC=dmc,DC=001,DC=net We…
Nikul
  • 343
  • 1
  • 2
  • 9
1
vote
0 answers

how VIP card helps in verification?

How does the 6 digit randomly generated security code from (disconnected)Verisign Identity Protection card helps in verification/validation of any user? Why one cannot enter any random 6 digit value instead of generating that value from VIP…
Yogesh Jadhav
  • 127
  • 2
  • 2
  • 7
0
votes
1 answer

Windows logged in user unique ID

I'm writing a windows client application, and i wish to have a global unique identifier which is not generated by my application (I don't want to generate a GUID and save it locally). Also - each application is installed separately for each windows…
Bagelzone Ha'bonè
  • 1,192
  • 1
  • 14
  • 29
0
votes
1 answer

How to give If condition while calling IdentityReference value

//I need to get permissions of Network shared folders and display in Grid.. When retrieving local files shares it shows the accounts name correctly but when i try to retrieve shared folder permission it displays SID for account name instead of…
Sandy
  • 1
  • 3
0
votes
1 answer

Identify local account vs domain account using SID

How can we know if an SID(Windows Event security identifier) belongs to a domain account or local account?
Krishna
  • 1
  • 1
0
votes
1 answer

Get username from SecurityIdentifier

I am using Windows Authentication on a website where users create reports that are stored in a database. When I save a report, I want to know which user filled it out, so I have been storing the SecurityIdentifier of their WindowsIdentity in the…
John Fischer
  • 1,115
  • 3
  • 13
  • 24
-2
votes
1 answer

Win2K8 R2, out-of-order SID

how comes that the SID on a domain are out-of-order ? by out-of-order I mean that the Relative-ID (the very last part of the SID) of some recently created accounts is lower than the one of much older accounts. I always though the Relative-ID was…