How to Produce a List of Users and SIDs

Article translations Article translations
Article ID: 177077 - View products that this article applies to.
This article was previously published under Q177077
Expand all | Collapse all

On This Page


This article describes how to produce a sorted list of Windows NT user names and their corresponding Security Identifiers (SIDs).


The following example will show you how to create a text file that contains each Windows NT Domain User listed with the corresponding SID.

The solution outlined in this article uses the following utilities contained in the Windows NT 4.0 Server Resource Kit: Global.exe and Getsid.exe.

  1. Make sure that the Global.exe and Getsid.exe utilities are installed on the computer running Windows NT and are accessible through the system's PATH variable.
  2. Create a directory on the computer running Windows NT that has read/write permissions assigned to the user account you are logging in with.
  3. Create the Listsid.bat, Listsid2.bat, Listsid3.bat, Cleanup.bat and Verify.bat files listed in this article. Create these files in the directory created in Step 2 above.
  4. Execute the Listsid.bat file at an MS-DOS command prompt. The command has the following syntax:

    LISTSID <Domain Name> <Primary Domain Controller Name>

    For Example: LISTSID MyDomain MyPDC
  5. Examine the contents of Usersids.txt.

    Note: These series of batch files were designed to understand a username that can contain as many as three parts separated by spaces. For example, the following name is valid:

    Joe B. Admin

    The following name would not be valid: Joe B. Admin II

    The three batch files could be modified to support names if necessary.
NOTE: The lines in Listsid.bat and Listsid2.bat that begin with "for /F" are wrapped for readibility. If these lines are not corrected before running, the batch jobs will not work.


echo off
IF (%1)==() GOTO NoParams
IF (%2)==() GOTO NoParams
if exist usersids.txt del usersids.txt
if exist domusers.txt del domusers.txt
if exist domusers.tmp del domusers.tmp
echo Creating list of users in %1.
global "domain users" %1 > domusers.txt
echo Removing machine names from list.
for /F "tokens=1,2,3" %%a in (domusers.txt) do call cleanup.bat
%%a %%b %%c
del domusers.txt
ren domusers.tmp domusers.txt
echo Getting SIDs from PDC.
for /F "tokens=1,2,3" %%a in (domusers.txt) do call listsid2.bat
%2 %%a %%b %%c
echo Sorting List.  Please wait...
sort /+1 < usersids.txt > sortsids.txt
echo --------------------------------------------
del usersids.txt
ren sortsids.txt USERSIDS.TXT
echo Done!  Outfile file is called: USERSIDS.TXT
echo --------------------------------------------
goto Bottom
Echo usage: LISTSID [Domain Name] [PDC Name]


if exist user.txt del user.txt
if not (%4) == () goto ThreeName
if not (%3) == () goto TwoName
getsid \\%1 %2 \\%1 %2 > user.txt
for /F "skip=2 tokens=7" %%a in (user.txt) do call listsid3.bat
%%a %2
goto Bottom2
getsid \\%1 "%2 %3" \\%1 "%2 %3" > user.txt
for /F "skip=2 tokens=8" %%a in (user.txt) do call listsid3.bat
%%a %2 %3
goto Bottom2
getsid \\%1 "%2 %3 %4" \\%1 "%2 %3 %4" > user.txt
for /F "skip=2 tokens=9" %%a in (user.txt) do call listsid3.bat
%%a %2 %3 %4
goto Bottom2


echo Now working on: %2 %3 %4
if not (%4) == () goto ThreeName
if not (%3) == () goto TwoName
echo %2 %1 >> usersids.txt
Goto Bottom3
echo %2 %3 %1 >> usersids.txt
Goto Bottom3
echo %2 %3 %4 %1 >> usersids.txt


if exist onename.txt del onename.txt
echo %1 > onename.txt
for /F "delims=$ tokens=1" %%a in (onename.txt) do call verify.bat %%a %1


if (%1)==(%2) echo %1 >> domusers.tmp


Article ID: 177077 - Last Review: February 23, 2007 - Revision: 2.2
  • Microsoft Windows 2000 Server
  • Microsoft Windows 2000 Advanced Server
  • Microsoft Windows 2000 Professional Edition
  • Microsoft Windows NT Workstation 3.5
  • Microsoft Windows NT Workstation 3.51
  • Microsoft Windows NT Workstation 4.0 Developer Edition
  • Microsoft Windows NT Server 3.5
  • Microsoft Windows NT Server 3.51
  • Microsoft Windows NT Server 4.0 Standard Edition
kbinfo KB177077

Give Feedback


Contact us for more help

Contact us for more help
Connect with Answer Desk for expert help.
Get more support from