SID Search Screen

Specifies the directory to search for SID usage. To search a remote machine specify a UNC path.

 

Example:

        \\remotehost\c$\directory

Defines the registry key to search for SID usage.

 

To search a remote registry, specify the hostname.

 

The search the entire registry, specify '\'.

Specifies the set of SIDs you want to search for. Separate each SID by a comma.

This screen allows you to search for objects which define permissions on files, directories and registry keys for any given set of Security Identifiers.

 

You can also use this screen to identify SID usage for dangling objects. These are usually permissions for deleted domain users/groups.

 

Such permissions cannot be resolved to a name, and are presented as a set of numbers and letters (the SID).

This will begin the search.

 

To search sub-directories and sub-registry keys, then the checkbox must be selected.