Windows Server 2012 clears and rebuilds SIDs

Let's start by introducing what SID is.

The SID, also known as the security Identifiers, is the unique number that identifies the user, group, and computer accounts.　When you create the account for the first time, a unique SID is published for each account on the network. If there are two users of the same SID, the two accounts will be identified as the same account, in principle, if the account is increased indefinitely, the same SID will be generated, in the usual case the SID is unique, he is by the computer name, the current time, The current user-state thread's CPU time-consuming sum of three parameters is determined to ensure its uniqueness.
A complete SID consists of:
· Security descriptions for users and groups
· ID of 48-bit Authority
· Revised version
· Variable validation values variable sub-authority values

If the two machines have the same SID, then we add the domain when only one machine can add, the second machine will be added when the error. This usually happens because we use Ghost to install the system or to do experiments with the virtual machine clone. Also, when you install VMware View server, you verify that the SID of both machines is the same

Now that we know the importance of SID for computers, how do we look at the SID of a machine?

In fact, it is very simple, we can only use one command. At the command prompt interface, enter Whoami/user.

　　

We can see that the SID of this machine is s-1-5-***-79435-500, if we use virtual machine to generate a clone system, then SID will be like this machine, Microsoft provides a tool for this, the system has built-in, we can through Sysprep.exe This gadget to reset the SID

First, CD C:windowssystem32sysprep switch to the Sysprep directory and then execute Sysprep to open the System Readiness Tool

　　

The Sysprep version of Windows Server 2012 is 3.14

　　

We tick the generic, other default, click OK, then start cleaning up the system

　　

Clean-up is automatically restarted, then the system needs to be re-encapsulated, re-unpacking

　　

After entering the system, we enter Whoami/user to view the newly acquired SID

　　

This time it's s-1-5-***-33394-500, it's changed, and we're not going to have a problem with that.

Microsoft about resetting Sid has a gadget, called NewSID, you can go to Microsoft's official website to download, but I now use server 2012 each time with NewSID reset SID, once restarted will be an error, do not know what reason, perhaps the version is too low caused by, Wait for the next version of Microsoft Sid to try again. If you're interested, you can try.

Windows Server 2012 clears and rebuilds SIDs