Datatypes

Windows security identifier (SID)

ID windows_sid

DatatypeNot PIIidentifierDraft

This record is a draft: it has not been reviewed yet and may be incomplete or wrong. Do not rely on it for compliance decisions. Help improve it (see CONTRIBUTING.md).

Identifier of a security principal in Microsoft Windows, such as a user account, group, computer or service. Its text form is S-1- followed by the identifier authority and up to 15 subauthorities, all decimal and separated by hyphens. Domain and local accounts have SIDs starting with S-1-5-21. Well-known SIDs, such as S-1-5-32-544 for the local Administrators group, are the same on all systems.

Categories
Software development, User accounts in products and services
Countries
Global (not tied to a country)
Languages
Common to most languages
Quality
75/100 · missing: mapping (Wikidata, Schema.org, ...), translation, detector coverage
Metacrafter rules
no detection rule yet
Supported by tools
no tool record lists this type yet

Regular expression

^S-1-\d+(?:-\d+){1,15}$

Python re syntax.

Examples

ValueDescription
S-1-5-32-544Well-known SID of the built-in Administrators group
S-1-1-0Well-known SID World, the group of all users
S-1-5-80-859482183-879914841-863379149-1145462774-2388618682Service SID of the dnscache service
S-1-5 invalidAn identifier authority without subauthorities

Sources

Use this record