Mario's Mo Betta Blog

A tech journal with all my tricks for making things mo' betta.

Account SID’s

Account SID’s

  • Comments 1
  • Likes

If a user's account gets deleted and then re-created with the same name you will have an orphaned account in the User Profile Database. The SID's will be different. To confirm the different sid's, open the Active Directory Console for PowerShell and type the following:

Get-aduser "SAMAccountName"

image

Notice the SID:

S-1-5-21-2487492328-1375672958-281685340-415876

Then open the SharePoint console and retrieve the user into a var.  For my farm the login name is domain\samAccountName

$u = Get-SPUser -Web "http://focas" -Identity "UserLogin"

$u.SID

S-1-5-21-2487492328-1375672958-281685340-308450

The sid's are different even though the SamAccountName is the same.

You can fix the problem using stsadm -o migrateuser  or you can choose the updated PowerShell equivalent: Move-SPUser

Move-SPUser -Identity $u -newalias "domain\samAccountName" -IgnoreSID

Afterwards the SIDs between SharePoint and AD should match.

This is a good article on the updated commands that replace the stsadm commands.

Stsadm to Windows PowerShell mapping (SharePoint Foundation 2010)

Comments
  • useful info - thanks!

Your comment has been posted.   Close
Thank you, your comment requires moderation so it may take a while to appear.   Close
Leave a Comment