How to change the SID on a Windows XP, Windows 2000, or Windows NT computer...

How to change the SID on a Windows XP, Windows 2000, or Windows NT computer...

Post by -|TreeBonz » Wed, 14 Sep 2005 09:49:06

ow to change the SID on a Windows XP, Windows 2000, or Windows NT computer

You are copying a Windows XP, Windows 2000, or Windows NT computer to another computer, and you want to know how to change the Security Identifier (SID) afterward.

Need to change the SID
When you clone a Windows NT/2000/XP installation to many computers, the destination computers have the same SID and computer name as the source Windows installation. Because Windows NT/2000/XP networks use each computer's SID and computer name to uniquely identify the computer on the network, you must change the SID and computer name on each destination (client) computer after cloning.

Overview of ways to change the SID after cloning

* Ghost Walker
Ghost Walker is a Ghost utility included in the corporate Ghost versions and Norton Ghost 2003. Ghost Walker is a DOS program that allows you to change the SID and computer name at each client computer after cloning, that is, before restarting the computer into Windows.
* Ghost Console
The option SID Change is available on the Task you create in Ghost Console. When you use this option, Ghost remotely runs Ghost Walker at each client computer. That is, Ghost does not require that you visit each client computer to change the SID.
* Microsoft's System Preparation Tool (SysPrep)
Microsoft provides the SysPrep utility for preparing a source computer before creating an image of that computer. SysPrep allows you to change the SID, computer name, and other configuration information. When used on a Windows 2000/XP installation, SysPrep also prompts the client computers to rebuild their Plug and Play driver database.
* Third party utilities

Problems with changing SIDs
When the SID changer cannot locate and change all of the files that it needs to change, some applications or Windows features may not work on the destination computer.

Example of need to remove features before creating an image file
For instance, Windows 2000 NTFS File Encryption and Windows NT and Windows 2000 Protected Storage use a SID as a unique token. When you change the SID, Windows can no longer access encrypted files or Protected Storage media. To prevent the problem, these features must be removed before creating the image file.

Test the image file before rolling it out
For these reasons we advise that you prepare for mass rollouts or upgrades by first testing the image file on the various computer environments that you will rollout the image to, including testing the applications after cloning to a new computer.

Which SID changer to use
Each method for changing the SID has its own advantages and disadvantages. Use the SID changer recommended for the operating system being cloned.:

Note: Because Microsoft support varies depending upon the operating system, method of cloning, and method of changing the SID, refer to the Microsoft document Do Not Disk Duplicate Installed Versions of Windows (Article ID 162001) for more detailed information.

* Windows 2000 or Windows XP installation: Use Microsoft's System Preparation (SysPrep) tool.

Although Ghost Walker successfully changes the SID on Windows 2000/XP computers, Microsoft's System Preparation (SysPrep) tool changes the SID and prompts Windows 2000/XP to rebuild its Plug-and-Play driver database.

Alternatively, instead of using SysPrep for all configuration changes, you can use SysPrep to rebuild the dr

How to change the SID on a Windows XP, Windows 2000, or Windows NT computer...

Post by Bruce Cham » Wed, 14 Sep 2005 13:06:34

Very old information snipped. Was there a question there? If so, I
certainly couldn't find it.


Bruce Chambers

Help us help you: ~esr/faqs/smart-questions.html

You can have peace. Or you can have freedom. Don't ever count on having
both at once. - RAH


How to change the SID on a Windows XP, Windows 2000, or Windows NT computer...

Post by v-mqi » Wed, 14 Sep 2005 17:50:58


Thank you for your information sharing here. However, to make our newsgroup
more clear, I would like to suggest you do not cross-post the same
information in multiple newsgroups in the future. Your understanding and
cooperation is appreciated.

Have a nice day!


Martin Qiu
Microsoft Online Partner Support

Get Secure! -

When responding to posts, please "Reply to Group" via your newsreader so
that others may learn and benefit from your issue.
Business-Critical Phone Support (BCPS) provides you with technical phone
support at no charge during critical LAN outages or "business down"
situations. This benefit is available 24 hours a day, 7 days a week to all
Microsoft technology partners in the United States and Canada.

This and other support options are available here:


If you are outside the United States, please visit our International
Support page:

This posting is provided "AS IS" with no warranties, and confers no rights.