The difference between SID and GUID

1. Creating a user or group in AD will assign it a SID and assign a guid,guid to a 128-bit string, an identifier, a GUID that is unique within the entire domain, and unique across the world. , in other words, you can't find the same two GUID values for the whole world. In addition, not only users and groups of these security principals are assigned a GUID, but all objects within the entire domain are assigned a GUID, such as a domain controller. And once the object is assigned a GUID then this GUID will accompany this object until it is deleted. 

2.SID can be changed (the SID of the general group does not change), the GUID cannot be changed, and any property of the object can be changed, but only the GUID cannot be changed. The role of 

3.SID is mainly for objects and resources to do permission control. The purpose of the GUID is primarily to determine who the object is and where the object is. GUIDs are typically copied into the global catalog. For example, when we look for objects in AD, we actually look for the GUID.

The difference between SID and GUID