How to link SID to Security ID

[BlackZao]

Hello all,

I'm looking for a way to link a SID string, which looks like this:

S-1-5-21-3623811015-3361044348-30300820-1013

...to a Security ID, which looks like this:

 Security ID:       DOMAIN\useraccount

Which shows up in the event logs. What I am trying to do is tie account creation to the specific SIDs that they create for the purposes of auditing and logging of accounts. Thanks for your help!

[JSapienza · Accepted solution]

I would Start by dumping the SID and users account name to a file with something like this:
Creating a SID Mapping File with Windows PowerShell

Next, I would take this data and create a lookup :
Fields lookup based on a static table

See if this gets you on the right track.

[youngsuh]

could you do this via scripted input?  or is the permission needed beyond system to run the powershell script?

[BlackZao]

This certainly looks like it will work. Thank you very much!