export SID number

[chris16]

Does anyone know how to export the SID from AD?? I know you can use some AD
tools such as ldfide or csvide to export account information..but that
doesn't export the SID number associated w/ that object. thank you.

[Herb Martin]

"chris16" <[email protected]> wrote in message
news:[email protected]...
> Does anyone know how to export the SID from AD?? I know you can use some
> AD
> tools such as ldfide or csvide to export account information..but that
> doesn't export the SID number associated w/ that object. thank you.

Shouldn't be that hard with a script or something.

What good will it do you? What are you really trying to accomplish?

--
Herb Martin, MCSE, MVP
http://www.LearnQuick.Com
(phone on web site)

[kj]

Adfind does that quite nicely, but you'll need to lookup the correct syntax
unless someone has it handy.

--
/kj
"Herb Martin" <[email protected]> wrote in message
news:%[email protected]...
>
> "chris16" <[email protected]> wrote in message
> news:[email protected]...
>> Does anyone know how to export the SID from AD?? I know you can use some
>> AD
>> tools such as ldfide or csvide to export account information..but that
>> doesn't export the SID number associated w/ that object. thank you.
>
> Shouldn't be that hard with a script or something.
>
> What good will it do you? What are you really trying to accomplish?
>
> --
> Herb Martin, MCSE, MVP
> http://www.LearnQuick.Com
> (phone on web site)
>

[Joe Kaplan]

LDIFDE will do this too, but it will give you the data in Base64 (since it
is stored as binary in the directory), so it might not be so practical to
look it. Joe R. always tries to make the annoying stuff easier for us. :)

Joe K.

--
Joe Kaplan-MS MVP Directory Services Programming
Co-author of "The .NET Developer's Guide to Directory Services Programming"
http://www.directoryprogramming.net
--
"kj" <[email protected]> wrote in message
news:[email protected]...
> Adfind does that quite nicely, but you'll need to lookup the correct
> syntax unless someone has it handy.
>
> --
> /kj
> "Herb Martin" <[email protected]> wrote in message
> news:%[email protected]...
>>
>> "chris16" <[email protected]> wrote in message
>> news:[email protected]...
>>> Does anyone know how to export the SID from AD?? I know you can use some
>>> AD
>>> tools such as ldfide or csvide to export account information..but that
>>> doesn't export the SID number associated w/ that object. thank you.
>>
>> Shouldn't be that hard with a script or something.
>>
>> What good will it do you? What are you really trying to accomplish?
>>
>> --
>> Herb Martin, MCSE, MVP
>> http://www.LearnQuick.Com
>> (phone on web site)
>>
>
>

[kj]

>Joe R. always tries to make the annoying stuff easier for us. :)

Quite thankfully. <g>

--
/kj
"Joe Kaplan" <[email protected]> wrote in message
news:%23%[email protected]...
> LDIFDE will do this too, but it will give you the data in Base64 (since it
> is stored as binary in the directory), so it might not be so practical to
> look it. Joe R. always tries to make the annoying stuff easier for us.
> :)
>
> Joe K.
>
> --
> Joe Kaplan-MS MVP Directory Services Programming
> Co-author of "The .NET Developer's Guide to Directory Services
> Programming"
> http://www.directoryprogramming.net
> --
> "kj" <[email protected]> wrote in message
> news:[email protected]...
>> Adfind does that quite nicely, but you'll need to lookup the correct
>> syntax unless someone has it handy.
>>
>> --
>> /kj
>> "Herb Martin" <[email protected]> wrote in message
>> news:%[email protected]...
>>>
>>> "chris16" <[email protected]> wrote in message
>>> news:[email protected]...
>>>> Does anyone know how to export the SID from AD?? I know you can use
>>>> some AD
>>>> tools such as ldfide or csvide to export account information..but that
>>>> doesn't export the SID number associated w/ that object. thank you.
>>>
>>> Shouldn't be that hard with a script or something.
>>>
>>> What good will it do you? What are you really trying to accomplish?
>>>
>>> --
>>> Herb Martin, MCSE, MVP
>>> http://www.LearnQuick.Com
>>> (phone on web site)
>>>
>>
>>
>
>

[Joe Richards [MVP]]

LOL.

You guys are welcome

AdFind will decode SIDs by default. To get a dump of all SIDs in a
domain in CSV format something like the following should suffice

adfind -default -f objectsid=* objectsid -csv

If you want SAM Name too then something like

adfind -default -f objectsid=* samaccountname objectsid -csv


--
Joe Richards Microsoft MVP Windows Server Directory Services
Author of O'Reilly Active Directory Third Edition
www.joeware.net


---O'Reilly Active Directory Third Edition now available---

http://www.joeware.net/win/ad3e.htm


kj wrote:
> >Joe R. always tries to make the annoying stuff easier for us. :)
>
> Quite thankfully. <g>
>