SIDHistory is an Active Directory attribute that can preserve a user's or group's former SIDs after a domain migration.
Simple definition
SIDHistory is an Active Directory attribute that can preserve a user's or group's former SIDs after a domain migration. It belongs to the Active Directory vocabulary and is useful when reading architecture diagrams, product documentation, logs, or administration procedures.
What is it used for?
Its main purpose is to temporarily preserve access to resources still secured with old SIDs during a migration. The practical value depends on the surrounding architecture, security model, and operational requirements.
How does it work?
During authentication, SIDs stored in SIDHistory can be added to the security token and therefore match older ACLs.
Key points
- Scope: An Active Directory attribute that can preserve a user's or group's former SIDs after a domain migration.
- Operational goal: Temporarily preserve access to resources still secured with old SIDs during a migration.
- Implementation: During authentication, SIDs stored in SIDHistory can be added to the security token and therefore match older ACLs.
Points to watch
SIDHistory is security-sensitive: protect write permissions and remove it after ACL migration to reduce abuse risk.
In short
SIDHistory = an Active Directory attribute that can preserve a user's or group's former SIDs after a domain migration. Use it when you need to temporarily preserve access to resources still secured with old SIDs during a migration.