Using PowerShell to find objects via SidHistory

I’m using the free Quest CMDLets ( for this post as they do most of the heavy lifting I require under the hood. You can download these for free at and get free support from some of the best PowerShell MVP’s as well as the CMDlet’s developers at

SIDHistory is used extensively during migrations, however sometimes you may run into the scenario where SIDHistory is written incorrectly or you want to find an object in the target based on the source objects SID.

In those cases it’s really useful to be able to search the target forest or domain in order to find the object on which the source user or groups SID is written as SIDHistory.

To be explicit in this example I’m going to specify the full DN of the source object I’m trying to find in the Target forest.


The Syntax above is

(Get-QADobject “DN”).sid.value

in order to return the text value of the SID. Note that you could have assigned the value to a variable as follows:

$sid = (Get-QADObject “DN”).sid.value

The next thing to do is run a search specifying the returned SID as an LDAP search filter (Sidhistory=SIDtosearchfor)



The syntax above is

Get-QADObject –LdapFilter ‘(sidhistory=SIDtosearchfor)’ | fl name, type, DN, Samaccountname

Which searches the directory for all objects with SIDHistory, and returns a formatted list including the objects name, type, Distinguished Name and samaccountname.

Nicolas Blank

Nicolas is an Architect, author, and speaker focused on all things Exchange and Cloud at NBConsult. With over 16 years of experience on Exchange, Nicolas consults to customers globally on cloud based and on-premises Exchange as well as ISVs building Exchange focused products. Nicolas has extensive experience using Azure to create public and private Azure based offerings leveraging cloud based principles and common sense. Nicolas currently holds status of MCM Exchange 2010, Office 365 (Microsoft Certified Master), MCSM Exchange 2013, and has been awarded Microsoft MVP (Most Valuable Professional) for Microsoft Exchange since March 2007. Nicolas has co-authored "Microsoft Exchange Server 2013: Design, Deploy and Deliver an Enterprise Messaging Solution," published by Sybex. Nicolas blogs regularly on Exchange and messaging topics at, tweets at @nicolasblank, and is the founder of and a contributor to IT Pro Africa and @itproafrica

nicolasblank has 99 posts and counting.See all posts by nicolasblank

Pin It on Pinterest