switchboard
All tools

SID Decoder

Break a Windows SID into authority, domain and RID, and name the well-known ones.

Why this exists

SIDs show up in ACLs, event logs, and replication errors. Knowing that S-1-5-32-544 is Administrators, or that RID 512 is Domain Admins, saves a lookup every time.

How to use
  1. Paste a SID (e.g. S-1-5-21-1004336348-1177238915-682003330-512).
  2. See the revision, identifier authority, sub-authorities, domain SID, and RID.
  3. Well-known SIDs and RIDs are named automatically.

Worked example

Try S-1-5-32-544 (Administrators), or a domain SID like S-1-5-21-1004336348-1177238915-682003330-512 to see the domain SID split from the RID (512 = Domain Admins).