| 両方とも前のリビジョン 前のリビジョン 次のリビジョン | 前のリビジョン最新のリビジョン両方とも次のリビジョン |
| windows:sid [2020/02/18 14:12] – ともやん | windows:sid [2020/03/25 06:56] – ともやん |
|---|
| overflow: scroll; | overflow: scroll; |
| overflow-x: hidden; | overflow-x: hidden; |
| font-size: 12px; | font-size: 10px; |
| } | } |
| </style> | </style> |
| </html> | </html> |
| ====== Windows セキュリティ識別子(SID) ====== | ====== Windows Security Identifiers (SID) - セキュリティ識別子 ====== |
| | |
| | ===== S-1-1- ～ S-1-3-、S-1-5- (SECURITY_NT_AUTHORITY) ===== |
| | <code powershell> |
| | PS > Get-CimInstance -ClassName Win32_GroupUser |
| | </code> |
| <WRAP prewrap 100% #result> | <WRAP prewrap 100% #result> |
| <code powershell> | <code powershell> |
| PS > > Get-CimInstance -ClassName Win32_GroupUser | |
| |
| GroupComponent PartComponent PSComputerName | GroupComponent PartComponent PSComputerName |
| -------------- ------------- -------------- | -------------- ------------- -------------- |
| Win32_Group (Name = "Debugger Users", Domain = "CMON") Win32_UserAccount (Name = "tomoyan", Domain = "CMON") | Win32_Group (Name = "Debugger Users", Domain = "CMON") Win32_UserAccount (Name = "tomoyan", Domain = "CMON") |
| |
| PS > Get-CimInstance -ClassName Win32_SystemAccount | ft Name, SID | </code> |
| | </WRAP> |
| |
| | <code powershell> |
| | PS > Get-CimInstance -ClassName Win32_SystemAccount | ft Name, SID |
| | </code> |
| | <WRAP prewrap 100% #result> |
| | <code powershell> |
| Name SID | Name SID |
| ---- --- | ---- --- |
| BUILTIN S-1-5-32 | BUILTIN S-1-5-32 |
| |
| PS > Get-CimInstance -ClassName Win32_UserAccount | ft Name, SID | </code> |
| | </WRAP> |
| |
| | <code powershell> |
| | PS > Get-CimInstance -ClassName Win32_UserAccount | ft Name, SID |
| | </code> |
| | <WRAP prewrap 100% #result> |
| | <code powershell> |
| Name SID | Name SID |
| ---- --- | ---- --- |
| WDAGUtilityAccount S-1-5-21-862093196-3552257265-3460289004-504 | WDAGUtilityAccount S-1-5-21-862093196-3552257265-3460289004-504 |
| |
| PS > Get-LocalGroup | ft Name, SID | </code> |
| | </WRAP> |
| |
| | <code powershell> |
| | PS > Get-LocalGroup | ft Name, SID |
| | </code> |
| | <WRAP prewrap 100% #result> |
| | <code powershell> |
| Name SID | Name SID |
| ---- --- | ---- --- |
| [[https://support.microsoft.com/ja-jp/help/243330/well-known-security-identifiers-in-windows-operating-systems|Windows オペレーティング システムの既知のセキュリティ識別子]]\\ | [[https://support.microsoft.com/ja-jp/help/243330/well-known-security-identifiers-in-windows-operating-systems|Windows オペレーティング システムの既知のセキュリティ識別子]]\\ |
| [[https://tech.guitarrapc.com/entry/2013/02/08/210233|PowerShellでCIM cmdletを用いて対象PCのユーザーや所属するユーザーグループを調べる - tech.guitarrapc.cóm]]\\ | [[https://tech.guitarrapc.com/entry/2013/02/08/210233|PowerShellでCIM cmdletを用いて対象PCのユーザーや所属するユーザーグループを調べる - tech.guitarrapc.cóm]]\\ |
| | [[https://tutorialmore.com/questions-121178.htm|非表示/仮想Windowsユーザーアカウントのリスト - 初心者向けチュートリアル]]\\ |
| | |
| | [[https://www.bleepingcomputer.com/news/microsoft/windows-10-could-break-if-capability-sids-are-removed-from-permissions/|Windows 10 Could Break If Capability SIDs Are Removed From Permissions]]\\ |
| | |
| | [[https://www.atmarkit.co.jp/ait/articles/0306/28/news004.html|オブジェクトを識別するSIDとは？：Tech TIPS - ＠IT]]\\ |
| | [[https://support.microsoft.com/en-us/help/243330/well-known-security-identifiers-in-windows-operating-systems|Well-known security identifiers in Windows operating systems]]\\ |
| | [[https://docs.microsoft.com/en-us/previous-versions/windows/it-pro/windows-server-2003/cc782090(v=ws.10)?redirectedfrom=MSDN|Security Identifiers Technical Reference | Microsoft Docs]]\\ |
| | [[https://docs.microsoft.com/ja-jp/windows/win32/secauthz/well-known-sids?redirectedfrom=MSDN|Well-known SIDs - Win32 apps | Microsoft Docs]]\\ |
| | [[https://renenyffenegger.ch/notes/Windows/security/SID/index|Windows security identifiers (SID)]]\\ |
| | [[http://www7a.biglobe.ne.jp/~tsuneoka/win32tech/12.html|Windows NTでアプリを実行するユーザーを制御する方法]]\\ |
| | [[http://eternalwindows.jp/security/account/account10.html|SIDの形式 - eternalwindows]]\\ |
| |
